IA con Cristina
Privacy Policy
Last updated: 27 October 2026. This is the English translation of the Spanish privacy policy.
1. Data controller
The controller of your personal data is:
- Name: Cristina Fonseca
- Business: Crisvfon Studio (eenmanszaak), which runs the IA con Cristina brand
- Activity: Self-employed / ZZP'er
- KVK (Chamber of Commerce): 99603578
- VAT ID (btw-id): NL005397915B27
- Country: The Netherlands
- Contact email: cristina@iaconcristina.com
2. What data do we collect and why?
We only collect personal data when it is needed to provide our services. Below is what data is collected and for what purpose:
a) Call bookings (Cal.com)
When you book the free call or the MOTOR Roadmap for AI, we collect your name, your email, the time you choose and your answers in the booking form. Bookings are handled by Cal.com (Cal.com, Inc., USA), which acts as a data processor.
Legal basis: Pre-contractual steps at your request and performance of a contract (Art. 6(1)(b) GDPR).
b) Pre-session forms (Formspree)
Before a session we may ask you to fill in a form about your business (name, email, company and your answers). These forms are processed by Formspree (Formspree, Inc., USA), which acts as a data processor.
Legal basis: Pre-contractual steps at your request (Art. 6(1)(b) GDPR) and consent (Art. 6(1)(a) GDPR).
c) Newsletter (Substack)
If you subscribe to our newsletter, your email address is stored on Substack (Substack, Inc., USA). Substack acts as a data processor and may process data outside the EEA. See Substack's privacy policy.
Legal basis: Consent (Art. 6(1)(a) GDPR).
d) Transactional emails (Resend)
When you sign up for a free resource or complete an action that requires email confirmation, the email is sent through Resend (Plus Five Five, Inc., USA), which acts as a data processor for sending transactional emails.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) and consent.
e) Purchases
Payments for the MOTOR services are processed by Stripe (Stripe Payments Europe, Limited, Ireland). Digital guides and courses are sold in the Eden store (Eden Suite, Inc., USA) and some guides on systeme.io (ITACWT Limited, Ireland). For live event sign-ups we may use Luma (Luma Labs, Inc., USA). Each platform handles payment and registration data under its own privacy policy.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and tax obligations (Art. 6(1)(c) GDPR).
f) Visit statistics (Vercel Web Analytics)
To see which pages get visited we use Vercel Web Analytics, which works without cookies. It records aggregate data (page visited, referring site, country, browser and device type) and does not store your IP address or anything that identifies you.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
3. Third-party processors
We use the following third-party services, which may process personal data on our behalf:
| Service | Purpose | Company and location |
|---|---|---|
| Vercel | Hosting and cookie-free statistics | Vercel Inc., USA |
| Cal.com | Call bookings | Cal.com, Inc., USA |
| Formspree | Pre-session forms | Formspree, Inc., USA |
| Stripe | Payment processing | Stripe Payments Europe, Limited, EU (Ireland) |
| Eden | Sale of guides and courses | Eden Suite, Inc., USA |
| systeme.io | Sale of guides | ITACWT Limited, EU (Ireland) |
| Luma | Live event sign-ups | Luma Labs, Inc., USA |
| Substack | Newsletter | Substack, Inc., USA |
| Resend | Transactional emails | Plus Five Five, Inc., USA |
Transfers of data outside the European Economic Area (EEA) are made under the appropriate GDPR safeguards, including standard contractual clauses (SCCs) and/or the EU-U.S. Data Privacy Framework.
4. Retention periods
- Contact data: Kept for as long as the business relationship lasts or until you ask for it to be deleted.
- Newsletter: Until you unsubscribe.
- Quiz data: A maximum of 2 years or until you ask for it to be deleted.
- Purchase data: As required by Dutch tax obligations (7 years).
5. Your rights
Under the GDPR (and the Dutch AVG), you have the following rights:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Ask for your data to be deleted (the "right to be forgotten").
- Restriction: Limit the processing of your data in certain circumstances.
- Portability: Receive your data in a structured, commonly used format.
- Objection: Object to processing based on legitimate interest.
- Withdraw consent: At any time, without affecting the lawfulness of earlier processing.
To exercise any of these rights, write to us at cristina@iaconcristina.com. We will reply within 30 days at the latest.
6. Data protection authority
If you believe your data is not being processed in line with the law, you have the right to file a complaint with the Dutch data protection authority:
Autoriteit Persoonsgegevens
autoriteitpersoonsgegevens.nl
Phone: +31 70 888 8500
7. Cookies
This website only uses essential cookies needed for it to work technically (for example, a user session). We do not use tracking, analytics or advertising cookies. Vercel's visit statistics work without cookies.
8. Changes
We may update this privacy policy. Any change will be published on this page with the corresponding update date.