1. Data controller
- Owner: Alberto González Quintanilla (AGQ)
- Tax ID (NIF): 45797712C
- Address: C/ Vent de Gregal 9, 8, 46520 Puerto Sagunto (Valencia), Spain
- Email: hola@albgonzalez.com
- Phone: +34 613 078 583
This policy explains how I process the personal data you provide through albgonzalez.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
2. What data I process
- Contact form: name, email address, company and phone (optional), project type and your message.
- Email or phone: any data you include when you write or call me directly.
- Clients: identification, contact and billing data needed to provide the agreed service.
- Technical data: the minimum information needed to protect the form against automated submissions (see section 5) and your cookie preferences (see the cookie policy).
Please do not include special categories of data (health, beliefs, etc.) or third-party data without their permission in your message.
3. Purposes and legal basis
- Answering your enquiry and preparing a quote. Legal basis: your consent, given by ticking the box on the form (Art. 6(1)(a) GDPR), and steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- Providing the contracted services and managing the professional relationship. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Complying with legal, tax and accounting obligations (invoicing, record keeping). Legal basis: legal obligation (Art. 6(1)(c) GDPR).
- Protecting the form against spam and abuse. Legal basis: legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR).
I do not make automated decisions or create profiles with your data, and I do not use it to send you advertising.
4. How long I keep your data
- Enquiries that do not lead to a project: as long as needed to handle them and, at most, 12 months after the last contact.
- Clients: for the duration of the professional relationship and, afterwards, for the legal limitation periods and those required by tax and commercial law (generally between 4 and 6 years).
- Consent record (date, IP address and version of this policy): for as long as the related data is kept, so that consent can be proven.
5. Recipients and service providers
I do not share your data with third parties unless legally required (for example, with the Spanish Tax Agency). Some providers may access data as processors, under a contract and safeguards in line with the GDPR:
- Web hosting and email provider, where the website and the requests received are stored.
- Cloudflare, Inc. (Turnstile), which checks that the form is submitted by a person and not by an automated program. It may process technical data about your browser and your IP address.
- Cookie-Script, the tool that manages the cookie notice and your preferences.
6. International transfers
Some providers (such as Cloudflare) may process data outside the European Economic Area. In those cases, the transfer is based on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw your consent without affecting the lawfulness of prior processing. Write to hola@albgonzalez.com or send a letter to C/ Vent de Gregal 9, 8, 46520 Puerto Sagunto (Valencia), Spain, stating which right you wish to exercise. I may ask you to prove your identity if there are reasonable doubts.
If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
I apply reasonable technical and organisational measures to protect your data: encrypted connection (HTTPS), access control to the admin panel, backups and software updates.
9. Changes to this policy
I may update this policy to reflect legal or service changes. The current version is always the one published on this page, with its update date.