Privacy policy

• ▪Controller: Pablo Luna
• ▪Contact (also for exercising your rights): [email protected]

Contact form. If you use it, we process your name, email address, the subject (optional) and the content of your message to handle your enquiry or proposal and reply to you. We also email you a confirmation copy of what you sent.

Security and abuse prevention. To limit mass submissions, we store with each message an identifier derived from your IP address using a keyed hash (the IP itself is not stored in clear) and the submission date. The form also includes a hidden field to detect bots.

Technical logs. Like any web server, the hosting provider may temporarily log technical connection data (IP, browser, requested pages) for security and operation.

This site does not use analytics, advertising or user tracking, and does not build profiles.

• ▪Contact: your consent, given by voluntarily submitting the form (Art. 6.1.a GDPR), and steps taken at your request before entering a contract (Art. 6.1.b).
• ▪Security, abuse prevention and technical logs: legitimate interest in protecting the site (Art. 6.1.f).

Messages are kept for as long as needed to handle your enquiry and, if a professional relationship starts, for its duration and the legal limitation periods afterwards. They are then deleted or blocked while liabilities may arise. The IP-derived identifier is kept with the message and used only for the hourly submission limit.

We do not sell or share your data. To provide the service we rely on providers acting as data processors:

• ▪Vercel Inc. (site hosting and image storage).
• ▪MongoDB, Inc. (Atlas), the database where messages are stored.
• ▪Mailjet (Sinch), sending of notification and confirmation emails.

Some providers are established outside the European Economic Area (e.g., the US). Those transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses, as applicable.

You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to [email protected] and identifying yourself. If you feel your rights have not been honoured, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local authority.

This site is not aimed at children under 14. If you believe a minor has sent us data, write to us and we will delete it.

We may update this policy to reflect legal or service changes. The date of the latest revision appears at the top.