GDPR compliance
Last updated: August 14, 2026
Our commitment to GDPR
Taller de Costura is committed to compliance with the General Data Protection Regulation (GDPR) and respecting the privacy rights of individuals in the European Union.
Legal basis for processing
We process personal data based on the following legal grounds:
- Consent: When you submit an inquiry or provide information voluntarily
- Contractual necessity: To fulfill service agreements and provide requested tailoring services
- Legitimate interests: To improve our services and communicate with clients
Data subject rights
Under GDPR, you have the following rights regarding your personal data:
Right to access
You may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to rectification
You can request correction of inaccurate or incomplete personal information.
Right to erasure
You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes it was collected.
Right to restriction
You can request limitation of processing your personal data in specific situations.
Right to data portability
You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.
Right to object
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights related to automated decision-making
We do not engage in automated decision-making or profiling that produces legal effects.
Exercising your rights
To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.
Data protection officer
For questions about our GDPR compliance or data protection practices, contact our data protection officer at [email protected].
Supervisory authority
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, place of work, or where an alleged infringement occurred.
International data transfers
Your personal data is processed within the European Economic Area. If we transfer data outside the EEA, we ensure appropriate safeguards are in place.
Data breach notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR.