This policy describes how the personal data of people who visit or get in touch through this website is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
1. Data controller
- Controller: Álvaro Barrena Revilla
- Location: Madrid, España
- Contact: alvarobarrena.dev@gmail.com
2. Data processed and source
Depending on how you interact with the site, the following data may be processed:
- Contact data: when you voluntarily write by email, the data you provide is processed (such as your email address and the content of your message). This site has no forms that collect data.
- Browsing data: if you accept analytics cookies, technical and usage data is processed in an aggregated way (pages visited, approximate device, country, etc.). Details are in the Cookie Policy.
3. Purposes of processing
- To handle and respond to the enquiries you send by email.
- To obtain anonymous, aggregated statistics about site usage in order to improve its content and performance (only if you accept analytics cookies).
4. Legal basis
- Email enquiries: the data subject's consent when voluntarily contacting the controller (Art. 6.1.a GDPR) and, where applicable, the legitimate interest in handling the communication (Art. 6.1.f GDPR).
- Analytics cookies: your prior, free, specific and informed consent (Art. 6.1.a GDPR), which you can withdraw at any time.
5. Retention period
Email communication data is kept for as long as necessary to handle your request and, afterwards, for the legally required periods to address any potential liabilities. Analytics data is kept according to the retention periods configured in the analytics tool (see the Cookie Policy).
6. Recipients and processors
Data is not shared with third parties except where legally required. For site hosting and usage analytics, the following providers act as data processors:
- Vercel Inc. — website hosting and delivery.
- Google Ireland Ltd. / Google LLC — web analytics (Google Analytics 4), only if you give your consent.
7. International transfers
Some providers may process data outside the European Economic Area (for example, in the United States). In such cases, transfers rely on the safeguards provided by the GDPR, such as the European Commission's Standard Contractual Clauses or applicable adequacy frameworks (such as the EU–US Data Privacy Framework).
8. Your rights
You may exercise the following rights over your personal data at any time:
- Access: to know what data is processed.
- Rectification: to correct inaccurate data.
- Erasure: to request its deletion.
- Objection: to object to a processing activity.
- Restriction: to limit its processing.
- Portability: to receive your data in a structured format.
- Withdraw consent given, without affecting the lawfulness of prior processing.
9. How to exercise your rights
You can exercise these rights by writing to alvarobarrena.dev@gmail.com, stating the right you wish to exercise. You may be asked to prove your identity. A response will be provided within the legally established time frames.
10. Complaint to the supervisory authority
If you believe that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, or through its electronic office: www.aepd.es.
11. Security and changes
Reasonable technical and organisational measures are applied to protect data against unauthorised access, loss or alteration. This policy may be updated; any changes will be published on this page along with the update date.