Skip to content
Legal information

Privacy policy

1. Data controller

Controller: Fernando Jiménez García, independent professional, with professional address at C/ Recalde, 4 (ground-floor unit), 28017 Madrid (Spain), registered under Spanish IAE tax code 849.7.

Email for exercising data-subject rights and for any enquiry about this policy: [email protected].

Full fiscal identification data of the controller are available upon request from any competent authority and from any interested party with a legitimate interest, by writing to the contact email above.

2. Personal data processed

This site collects only personal data voluntarily provided by the user. Newsletter subscription collects only the email address and the sending language; the contact form and direct email collect:

  • Name
  • Email address
  • Company or organisation (optional)
  • Subject (optional)
  • Content of the message
  • Communication language

In addition, technical data derived from the access itself (IP address, user agent) are processed solely to prevent abuse of the form and to verify the legitimacy of requests via Cloudflare Turnstile.

The site also uses a cookieless audience-measurement tool (Vercel Web Analytics) that records usage data —page views, traffic source, approximate country, device type and browser— in aggregated, anonymous form, without setting cookies, without creating persistent identifiers and without profiling. It does not allow individual visitors to be identified.

3. Purposes

Data are processed for the following purposes:

  • To respond to the enquiry or request submitted.
  • To keep a minimal record of the communication for management of the professional relationship.
  • To prevent automated abuse (anti-spam) via CAPTCHA verification.
  • To send the newsletter on AI governance and technology oversight, but only where the data subject expressly requests it, via a specific subscription checkbox separate from the rest of the form. It is voluntary and can be withdrawn at any time.

No profiling is carried out. Except for the voluntary newsletter subscription, no data are used for advertising purposes, and no data are shared with third parties for purposes other than those described in the section on processors.

4. Legal basis

  • Consent of the data subject (Art. 6(1)(a) GDPR) — expressly obtained by ticking the form checkbox that accepts this privacy policy before submission.
  • Specific consent for the newsletter (Art. 6(1)(a) GDPR) — obtained via a separate, optional checkbox, with subsequent email confirmation (double opt-in) and revocable at any time from every issue.
  • Legitimate interest of the controller (Art. 6(1)(f) GDPR) — prevention of automated abuse via CAPTCHA, minimal technical logging and aggregated, cookieless audience measurement for statistical purposes.

5. Data retention

Form data are retained for as long as an active or potential professional relationship exists, and for a maximum of five years from the last contact, unless a longer legal retention obligation applies. After that period, data are deleted or anonymised.

6. Recipients and processors

Data are stored and processed in third-party tools that act as processors under contract pursuant to Article 28 GDPR:

  • Holded SL — commercial management system (CRM). Servers within the European Union.
  • Microsoft Ireland Operations Ltd. — professional email and notifications (Microsoft 365). Servers within the European Union.
  • Cloudflare Inc. — content delivery network (CDN) and anti-bot verification (Turnstile). International data transfers to Cloudflare are covered by the Standard Contractual Clauses approved by the European Commission.
  • Vercel Inc. — hosting and delivery of the website and aggregated, cookieless audience measurement (Vercel Web Analytics). International data transfers to Vercel (USA) are covered by the Standard Contractual Clauses approved by the European Commission.
  • UAB MailerLite — newsletter delivery platform (email marketing), used only for subscribers who have given their consent. Any international data transfers that may occur are covered by the Standard Contractual Clauses approved by the European Commission.

Except for sending the newsletter to those who have expressly requested it, no data are shared with third parties for commercial or advertising purposes.

7. Data-subject rights

The data subject may exercise the following rights over their personal data at any time:

  • Access
  • Rectification
  • Erasure ("right to be forgotten")
  • Restriction of processing
  • Portability
  • Objection
  • Withdrawal of consent, without retroactive effect

To exercise these rights, write to the email address indicated at the beginning, with sufficient identification. Requests will be answered within a maximum of one month from receipt.

8. Complaint to the supervisory authority

If the data subject considers that the processing of their data does not comply with applicable regulations, they have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority competent in their place of residence.

9. Cookies

This site uses only a functional technical cookie to remember the visitor's language preference. It does not use analytics, advertising or tracking cookies, nor third-party cookies; audience measurement is performed with a cookieless tool (see sections 2 and 6). Details are in the cookie policy.

10. Modifications

This policy may be updated to reflect changes in applicable regulations or in the services offered. The current version is published on this same page, with an indication of the date of the last update.

Last updated: June 2026.