Privacy policy
Who is responsible for your data
The controller of the personal data processed through this site is:
- Name
- Fernando Garcia de la Cruz
- NIF (tax ID)
- Z2043127L
- Address
- Av. de la Catedral, 6, 08002 Barcelona, Spain
- info [at] fergarciadlc [dot] com
What I collect, why, and on what basis
When you visit the site
The web server records each request: your IP address, the date and time, the page requested, the response status, and what your browser sends with the request, such as its user agent and the page that linked here. I use these logs only to keep the site secure and working and to diagnose errors. The legal basis is my legitimate interest in running a secure website (Article 6(1)(f) GDPR).
There are no analytics, advertising or tracking tools, no cookies, and nothing is loaded from other servers.
When you use the contact form
The form asks for your name, email address and message, which I use to reply to you and to continue the conversation you start. The legal basis is your consent, given by ticking the box (Article 6(1)(a) GDPR), and, when you write about hiring me, the steps you ask me to take before a contract (Article 6(1)(b)). You can withdraw your consent at any time without affecting what was done before.
To stop the form from being abused, the server keeps your IP address in memory for about an hour to limit how many messages can be sent from it. It is never written to disk. The legal basis is my legitimate interest in protecting the form from spam (Article 6(1)(f)).
When you email me
I use your address and whatever you include in the message to reply to you. The legal basis is my legitimate interest in answering messages sent to me (Article 6(1)(f)) and, when you write about hiring me, the steps before a contract (Article 6(1)(b)).
How long I keep it
- Server logs: 14 days, then they are deleted automatically.
- Messages and contact details: as long as needed to deal with your request, and no more than 12 months after our last exchange. If the conversation leads to a contract, the data it requires are kept for as long as Spanish tax and commercial law require.
Who else processes it
I do not sell your data or share it with anyone for their own purposes. These providers process it on my behalf, under data processing agreements:
- DigitalOcean, LLC (USA): hosts the website and the contact form on a server in Frankfurt, Germany.
- Cloudflare, Inc. (USA): runs the domain's DNS. No email or form data passes through it.
- Zoho Corporation B.V. (Netherlands): hosts my mailbox, where your emails arrive, and delivers the contact form's messages to it through its Zoho CPaaS email service. Zoho stores the mailbox in the USA.
Authorities may also receive data where the law requires it.
Transfers outside the European Economic Area
DigitalOcean and Cloudflare are based in the USA, and Zoho stores my mailbox, including the contact form's messages, in the USA. These transfers rely on the EU-US Data Privacy Framework for certified providers, or on the standard contractual clauses approved by the European Commission.
Your rights
You can ask me to access, correct or delete your data, to restrict or object to its processing, or to receive it in a portable format, and you can withdraw your consent at any time. Write to info [at] fergarciadlc [dot] com and I will reply within one month.
If you think I have not handled your data properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
Automated decisions
No decisions about you are made automatically, and no profile of you is built.
Changes
If this policy changes, the new version will be published here with a new date. See also the cookie policy and the legal notice.