CP//DEV
es

Privacy

Privacy policy

What personal data carlosp11.es collects, what it is used for, who processes it and how to exercise your rights. Regulation (EU) 2016/679 and Spanish Organic Law 3/2018.

Last reviewed:

1. Data controller

Carlos Ponce, tax ID 55438056Y, registered at Santa Cruz de Tenerife, Islas Canarias (España). Contact address for data protection matters: info@carlosp11.com.

No data protection officer has been appointed: the activity meets none of the conditions in article 37 GDPR.

2. What data is processed

Only what you send through the contact form:

  • Name or company, and email address. Both required — without them there is no way to reply.
  • Subject line and message body.
  • Project type and indicative budget, both optional.
  • Browsing language, so the reply comes in the language you wrote in.

3. What it is used for

Solely to read your message and reply, and where applicable to prepare a proposal.

No profiling, no automated decision-making and no marketing: there is no mailing list or newsletter. Your address is never sold or shared.

4. Legal basis

The consent you give by ticking the box before submitting the form (article 6(1)(a) GDPR), and pre-contractual steps taken at your request when the message is a request for a quote (article 6(1)(b)).

You can withdraw consent at any time by writing to the contact address. Withdrawal does not affect the lawfulness of processing carried out beforehand.

5. How long it is kept

Enquiries that do not lead to an engagement are kept for a maximum of twelve months from the last contact, then deleted.

If the contact leads to work, data is kept for the duration of the professional relationship and afterwards for the applicable tax and commercial limitation periods.

6. Who else sees your data

Two providers, both as processors and only to the extent needed for the site to work:

  • Web3Forms (web3forms.com) handles the form submission and delivers it to the controller’s inbox. Form data passes through its servers outside the European Economic Area, covered by the European Commission’s standard contractual clauses.
  • Render Services, Inc. hosts the site (Frankfurt region, EU) and records technical access data — IP address, user agent, timestamp — in its server logs, solely to operate and protect the service.

7. Cookies

This site sets no analytics, advertising or social cookies, and embeds no third-party players or widgets. There is therefore no consent banner: there is nothing to consent to.

Language preference is resolved by URL (/es/ or /en/), not by cookie. Should analytics be added later, this policy will be updated and consent requested first.

8. Your rights

You may request access to your data, its rectification or erasure, restriction of or objection to processing, and portability. An email to the contact address stating which right you are exercising is enough; it is answered within one month at most.

If you believe the processing does not comply, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Security

The site is served entirely over HTTPS. The form validates data before sending and includes an anti-spam measure that collects no additional information about you.

10. Changes to this policy

Any change is published on this page with its revision date. The version in force is always the one published here.