Privacy
Privacy policy
What personal data carlosp11.es collects, what it is used for, who processes it and how to exercise your rights. Regulation (EU) 2016/679 and Spanish Organic Law 3/2018.
Last reviewed:
1. Data controller
Carlos Ponce, tax ID 55438056Y, registered at Santa Cruz de Tenerife, Islas Canarias (España). Contact address for data protection matters: info@carlosp11.com.
No data protection officer has been appointed: the activity meets none of the conditions in article 37 GDPR.
2. What data is processed
What you send through the contact form:
- Name or company, and email address. Both required — without them there is no way to reply.
- Subject line and message body.
- Project type and indicative budget, both optional.
- Browsing language, so the reply comes in the language you wrote in.
Beyond the form, audience is measured in aggregate: page viewed, referrer, country, device type and browser. That measurement does not identify you, writes nothing to your device and cannot reconstruct your browsing.
3. What it is used for
Solely to read your message and reply, and where applicable to prepare a proposal.
No profiling, no automated decision-making and no marketing: there is no mailing list or newsletter. Your address is never sold or shared.
4. Legal basis
The consent you give by ticking the box before submitting the form (article 6(1)(a) GDPR), and pre-contractual steps taken at your request when the message is a request for a quote (article 6(1)(b)).
You can withdraw consent at any time by writing to the contact address. Withdrawal does not affect the lawfulness of processing carried out beforehand.
For aggregate audience measurement, the legitimate interest in knowing which content is read and whether the site works (article 6(1)(f) GDPR). Since no identifying data is processed and nothing is stored on your device, this processing requires no prior consent.
5. How long it is kept
Enquiries that do not lead to an engagement are kept for a maximum of twelve months from the last contact, then deleted.
If the contact leads to work, data is kept for the duration of the professional relationship and afterwards for the applicable tax and commercial limitation periods.
6. Who else sees your data
Two providers, both as processors and only to the extent needed for the site to work:
- Web3Forms (web3forms.com) handles the form submission and delivers it to the controller’s inbox. Form data passes through its servers outside the European Economic Area, covered by the European Commission’s standard contractual clauses.
- Render Services, Inc. hosts the site (Frankfurt region, EU) and records technical access data — IP address, user agent, timestamp — in its server logs, solely to operate and protect the service.
- Umami Software, Inc. (umami.is) measures audience in aggregate. It sets no cookies, assigns no persistent identifiers and does not track across sites: the IP address is used transiently to count the visit and is not stored.
7. Cookies
This site sets no analytics, advertising or social cookies, and embeds no third-party players or widgets.
Audience measurement runs on Umami, which writes no cookies and stores no identifiers on your device. That is why there is no consent banner: not because permission is assumed, but because nothing is stored on your device to consent to.
Language preference is resolved by URL (/es/ or /en/), not by cookie.
8. Your rights
You may request access to your data, its rectification or erasure, restriction of or objection to processing, and portability. An email to the contact address stating which right you are exercising is enough; it is answered within one month at most.
If you believe the processing does not comply, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security
The site is served entirely over HTTPS. The form validates data before sending and includes an anti-spam measure that collects no additional information about you.
10. Changes to this policy
Any change is published on this page with its revision date. The version in force is always the one published here.
