Privacy policy
Last updated: 28 October 2026
Controller
- Owner
- Rafael Aceituno Álvarez (rflvz)
- NIF
- 77557921N
- Address
- Calle Málaga 59, 23680 Alcalá la Real (Jaén), España
- Contact
- rafaceitunoalvarez@gmail.com
- Activity
- Self-employed professional: web development, automation, and artificial intelligence adoption and training.
What data I process and why
| When | Data and purpose | Legal basis | Retention |
|---|---|---|---|
| You write through the form | Name or company, email or phone, the service you pick and your message, to reply, prepare your quote and follow up your enquiry (status, notes and next step date). | Your request: pre-contractual steps at your request (art. 6.1.b GDPR). | Up to 12 months after the last contact if we don’t reach an agreement; deleted automatically. If you hire me, for the engagement and the legal periods (tax and liability). |
| The same submission | Where you came from (only the domain, e.g. google.com, and the campaign if the link had one), the last section or button you used and which parts you viewed before writing. It tells me which channels and parts of the site work. | Legitimate interest in improving the website and outreach (art. 6.1.f GDPR). | Same as the message. |
| You visit the website | Anonymous counters aggregated per day: page views, sections reached, buttons used, referring domain and screen type. No IP address or identifier is stored. Details in the cookie policy. | Legitimate interest (art. 6.1.f GDPR). The data cannot identify you. | Counters are kept to compare periods. |
| Any visit | To limit abuse (mass submissions, bots) the server holds your IP in memory for a few minutes without storing it. The host logs technical connection data for security. | Legitimate interest in the website’s security (art. 6.1.f GDPR). | Minutes in memory; host logs, a few days. |
I make no automated decisions about you and do no profiling. No data is mandatory except what I need to reply.
Who else sees the data
I don’t sell or share your data. These providers process it on my behalf, only to deliver their service:
- Vercel Inc. (USA): website hosting and message storage, on servers in the United States.
- Resend (USA): when email alerts are on, it sends me a copy of each message.
- Google (Gmail): the mailbox where I receive alerts and reply if you email me.
Transfers to the United States rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
Your rights
You can request access, rectification or erasure of your data, object to or restrict its use, or ask for portability by writing to rafaceitunoalvarez@gmail.com. I reply within one month. If you think I am not handling it properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Children
This website is not aimed at children under 14. If you are under 14, please don’t send the form.