Privacy policy
Last updated: 2 August 2026
This site collects very little. There is one form, no analytics and no advertising. This page explains exactly what happens with the data you send, in plain language.
1. Who is responsible for your data
- Controller: Adrián Rojas Barrera, individual working as a self-employed professional
- Spanish tax ID (NIF): 45880470R
- Contact: adrianrbdev@gmail.com
Full identification details are available in the legal notice.
No Data Protection Officer has been appointed: this activity does not fall within the cases where Article 37 of the GDPR requires one.
2. What is collected and why
| What is collected | Why | Legal basis |
|---|---|---|
| Quote and contact form. Name, email, phone (optional), company (optional), project type, indicative budget, timeframe and your message. | To answer your enquiry, discuss the project and send you a written quote. | Your consent, Art. 6(1)(a) GDPR, and steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR. |
| Technical data about the submission. IP address stored in pseudonymised form (a hash, never the address in plain text), browser user agent, the URL the form was sent from and the referring page. | Security, spam prevention and limiting how many submissions come from the same origin. | Legitimate interest in protecting the site from abuse, Art. 6(1)(f) GDPR. |
Nothing else is collected. There are no hidden fields, no tracking pixels and no profiling. Providing your name, email and message is necessary to reply to you; every other field is optional and only helps prepare a more accurate quote.
3. How long the data is kept
If your enquiry turns into a working relationship, the data is kept for as long as that relationship lasts and, once it ends, for the period required by tax and commercial legislation.
If no relationship follows, the data stays on file so the conversation can be picked up later, until you ask for it to be deleted. Technical submission data is kept only for as long as it is useful for security and anti-spam purposes.
4. Who else sees the data
Your data is never sold, rented or shared with third parties for their own purposes. It is only disclosed where a legal obligation requires it, for example a court or a public authority acting within its powers.
Two providers process data on the controller's behalf, under contract and following instructions:
- Hosting: Hostinger International Ltd., which operates the server where the site and the enquiries database run, in a data centre located in the European Union.
- Email: the provider used to receive and reply to the messages sent through the form.
5. International transfers
The site loads its typefaces from Google Fonts. When a page loads, your browser requests those files directly from Google, which means your IP address may be communicated to Google LLC in the United States.
That transfer is covered by the EU–US Data Privacy Framework, the adequacy decision adopted by the European Commission for certified US companies. Beyond what any browser sends when it requests a file (IP address, user agent and the page making the request), no personal data is transferred to Google by this site.
There are no other international transfers.
6. Cookies
This site does not use analytics cookies, advertising cookies or third-party tracking. That is why you will not see a cookie banner: there is nothing to consent to.
The only thing stored in your browser is a technical entry in local storage that remembers whether you chose the light or the dark theme. It stays on your device, is never sent to any server, and is exempt from consent because it is strictly necessary to provide a feature you asked for. You can clear it at any time from your browser settings.
7. Your rights
Under the GDPR you can ask to:
- Access the data held about you.
- Rectify it if it is inaccurate or incomplete.
- Erase it when it is no longer needed.
- Object to processing based on legitimate interest.
- Restrict processing while a request is being resolved.
- Receive your data in a portable, machine-readable format.
You can also withdraw your consent at any time. Withdrawing it does not affect processing carried out before you did so.
To exercise any of these rights, write to adrianrbdev@gmail.com, ideally from the address you used in the form, saying which right you want to exercise. Proof of identity may be requested if there is reasonable doubt about who is making the request. You will get an answer within one month.
If you think your data has not been handled properly, you can lodge a complaint with the competent supervisory authority, the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD): www.aepd.es. If you live in another EU country, you may also contact your national supervisory authority, which will forward the complaint.
8. Security
The site is served over HTTPS. Access to stored enquiries is restricted to the controller and protected by authentication. IP addresses are stored as a hash, never in plain text.
Reasonable technical and organisational measures are in place to protect the data, although no system connected to the internet can promise absolute security.
9. Changes to this policy
This policy may be updated if the site changes or if the applicable legislation does. The version in force is always the one published on this page, with the date shown at the top.
Last updated: 2 August 2026.