Privacy policy.
This website has no sign-up, no newsletter and no cookies. The only data it asks for is in the contact form, and only if you decide to use it: your email and what you need. It isn't used for profiling or advertising. Even so, the law requires us to explain what happens to the technical information generated when you visit it, and to any data you give us if you decide to get in touch.
Data controller
| Owner | Juan Carlos Martel González |
|---|---|
| Trading name | Enlace Estudio |
| Tax ID (NIF) | 79154724V |
| Address | C/ Domingo Pérez Minik, 35, izq., 38006 Santa Cruz de Tenerife, Spain |
| enlaceestudioweb@gmail.com |
There is no data protection officer: given the type and volume of activity, the regulations do not require one.
What data is processed
- Technical browsing data. Like any server, the server hosting the website logs the IP address, the date and time of the visit, the page requested and the browser. This is used to keep the website working and to detect security problems.
- Visitor statistics. We count visits with GoatCounter, installed on our own server. It doesn't use cookies and doesn't store your IP address: it only keeps totals of the pages visited, the page you came from, the browser, the operating system, the screen size and the approximate country and region. So that the same visit isn't counted twice, it uses a temporary identifier for a few hours that doesn't allow you to be identified.
- What you tell us if you get in touch. If you fill in the contact form, we receive your email address, what you need and, if you choose “Other”, what you write. If you email us, your email address and whatever you tell us. We use it to reply to you and prepare a quote.
- Billing data, if we work together. If you commission work from us, the data needed to carry it out and to invoice it.
Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR) for the server's technical logs: keeping the website up and running and secure.
- Legitimate interest (Art. 6(1)(f) GDPR) for visitor statistics: knowing how the website is used in order to improve it.
- Taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) to answer your enquiry and prepare a quote for you.
- Performance of the contract and legal obligations (Art. 6(1)(b) and 6(1)(c) GDPR) to carry out the work commissioned and invoice it.
How long it is kept
The server's technical logs are deleted automatically after 90 days at most. Visitor statistics are kept as totals that don't identify anyone. Conversations and form requests are kept for as long as they are needed to deal with your enquiry. If we end up working together, billing data is kept for the period required by tax and commercial law, which is generally six years.
Who else is involved
We do not pass your data on to anyone, nor do we sell it. Only the following providers are involved:
- Cloudi NextGen S.L. (Clouding), tax ID (CIF) B66356528, based in Barcelona, as hosting provider and data processor. The servers hosting the website are in Spain, so this data does not leave the European Union.
- Google Ireland Limited, which provides the email service (Gmail) and Google Apps Script, the service that receives the contact form and forwards it to us by email, under its privacy policy.
Google may process data outside the European Economic Area, with the safeguards provided for in Chapter V of the GDPR, such as standard contractual clauses or the EU-US Data Privacy Framework.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time.
Email us at enlaceestudioweb@gmail.com saying which right you want to exercise. If we need to check that it's really you, we'll ask for the bare minimum to do so. We will reply within one month at most.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (C/ Jorge Juan 6, 28001 Madrid), or with the data protection authority of the EU country where you live.
Security
The website is served encrypted over HTTPS, and reasonable technical and organisational measures are applied to prevent unauthorised access.
Changes to this policy
If the website adds any other feature that processes data, this policy will be updated before that feature goes live. The date of the latest revision is shown at the top.