Information about enquiries, subscriptions, purchases and their privacy controls. Forms and payments are available only when the relevant service is enabled.
Controller and contact
Sergio Torices, Madrid, Spain. Email [email protected] with questions or to exercise your data rights.
Conversations and opportunities
When you use an enabled form, we store your name, email, message, language and enquiry source, including campaign parameters carried by the link. This information is used to respond and follow up on your request. Making contact does not subscribe you to the newsletter.
Responding to enquiries and taking requested pre-contractual steps relies on your request. Follow-up records are limited to the relationship and the work needed to address it.
The Second Question
Subscription is voluntary and requires confirmation through an emailed link. We record your language, request, confirmation and withdrawal. You can withdraw consent using the unsubscribe link in the emails. Confirming withdrawal cancels queued campaign emails.
When enabled, Brevo delivers emails. We retain the message identifiers and states reported by the provider. An accepted send is not treated as a confirmed delivery. We do not insert our own tracking pixels.
Payments
Sales remain disabled until genuine offers and prices are configured. When enabled, Stripe processes payments on its own hosted page. This website does not receive or store card numbers. Necessary order details, amount, currency, customer and payment state confirmed by Stripe will be retained.
Hosting, security and providers
GitHub holds code and public assets; contacts and secrets are not stored in the repository. Cloudflare hosts the website and, when enabled, processes forms and stores records in D1. Cloudflare Access protects the private workspace. Enabled forms use Cloudflare Turnstile to verify submissions; Cloudflare receives the token and IP address for this check.
To limit abuse, a temporary fingerprint of the IP address is generated using a secret; the raw IP is not stored in the CRM. Hosting providers may process their own technical logs. Cloudflare, Brevo and Stripe may process data under their terms and agreements, including international transfers with applicable safeguards.
Measurement and retention
Form conversions and acquisition sources are counted without building browsing profiles. Optional Cloudflare analytics loads only when configured and accepted. The cookie policy states whether it is available in this version.
Enquiries are kept while needed to handle the relationship. Newsletter data is kept until withdrawal or erasure, with the minimum evidence needed to respect that decision. Orders may be retained for applicable tax and legal periods. Abuse controls expire within two hours and confirmation links after 24 hours; cleanup depends on the scheduled task.
Your rights
You can request access, correction, erasure, objection, restriction or portability by emailing [email protected]. You can withdraw consent without affecting earlier processing and lodge a complaint with the Spanish Data Protection Agency (aepd.es).