Privacy Policy

1. Data Controller

The controller of the personal data collected through this website is:

• Name: Christian Hermoso Nadales
• Contact: crishermosoj@gmail.com
• Location: Zaragoza, Spain

2. What data do we collect?

Through the contact form on this site we collect the following data, voluntarily provided by the user:

• Name
• Email address
• Message / enquiry content

No special category data (health, ideology, etc.) is collected nor is any data requested beyond what is strictly necessary to respond to the enquiry.

3. Purpose of processing

Data is used exclusively to:

• Respond to enquiries or project requests sent via the contact form.
• Maintain communication related to that enquiry.

Data is not used for profiling, automated decisions, nor for advertising or commercial purposes beyond responding to the user's enquiry.

4. Legal basis

The legal basis for processing is the user's consent, expressly given when filling in and submitting the contact form.

5. Data retention

Data will be retained only for as long as necessary to manage the enquiry and, subsequently, for the legally required period to address potential liabilities. After that period, data will be deleted or anonymised.

6. Recipients and processors

To send and manage the contact form we use an external third-party service (Resend), acting as a data processor under Article 28 GDPR. This provider processes data only on the controller's instructions and with the guarantees required by data protection law.

The website is also hosted on Vercel, which may process technical data (such as IP address) as part of the hosting service.

Data will not be disclosed to third parties other than those mentioned here, except where required by law.

7. International transfers

If any of the providers mentioned above is based outside the European Economic Area, such transfer is carried out under the safeguards provided for in the GDPR (such as the European Commission's Standard Contractual Clauses).

8. User rights

Every person has the right to:

• Access their personal data.
• Rectify inaccurate data.
• Erase their data.
• Object to processing.
• Restrict processing.
• Request portability of their data.

These rights can be exercised by sending a request to crishermosoj@gmail.com, indicating the right you wish to exercise and attaching, where appropriate, a copy of an identification document.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es) if you consider that your data is not being processed in accordance with applicable law.

9. Security measures

Reasonable technical and organisational measures have been adopted to protect personal data against unauthorised access, loss or alteration, appropriate to the risk level of the processing carried out.

10. Changes to this policy

This privacy policy may be updated to adapt to legislative changes or changes in the website's operation. Please review this page periodically.