1. Data controller
Full name: Audry Gabriela Sanchez Puerta
NIE: Y9250562-E
Registered address: Calle julio de romero de torres, 4- 3-d
Email: info@moon-blast.com
2. Data we collect and how we obtain it
Categories of personal data we process:
Identification data
Examples: Name, surname, email, telephone number
Source: Contact forms and WhatsApp
Commercial information
Examples: Industry, approximate budget, free-text message
Source: “Tell us your ideas” form
Browsing data
Examples: IP address, cookie identifiers, URL
Source: Analytics cookies (Google Analytics)
3. Purposes and legal bases
Responding to your enquiry or quote request
Explicit consent (required checkbox)
Sending future commercial communications (news and offers)
Additional consent (optional checkbox)
Analysing website traffic and improving the experience
Consent (cookie banner)
Administrative and tax obligations
Compliance with a legal obligation
Fraud prevention and security
Legitimate interest of the data controller
4. Recipients and data processors
Data will be disclosed to:
- Google Ireland Ltd. (Google Analytics 4 service) – International transfer covered by Standard Contractual Clauses.
- Hosting provider – Servers located in the EU.
- Email / CRM provider – (specify country and safeguards).
Data will not be disclosed to third parties unless required by law.
5. Retention periods
Enquiries and leads
12 months from the last interaction
Data for commercial communications
Until you withdraw your consent
Accounting/tax documentation
5 years (Article 30 of the Spanish Commercial Code)
Analytics cookies
14 months (GA4 configuration)
6. Data subject rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by emailing info@moon-blast.com together with a document proving your identity.
If you believe that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) – C/ Jorge Juan 6, 28001 Madrid or at www.aepd.es.
7. Children
This site is not intended for children under the age of 14. If we detect data relating to children, we will delete it immediately.
8. Automated decision-making
We do not make automated decisions or create profiles that have legal effects on users.
9. Security measures
Moon Blast uses TLS encryption, access controls, backups and incident management policies to protect your information.
10. Changes to this policy
Any changes will be published on this page with the updated date shown at the top.

