Privacy policy

Data controller

Controller: Daniel López Nicolau. Email: hi@dlopezn.es. Website: https://dlopezn.es.

This policy explains what personal data is processed when you visit this site, for what purpose, and what rights you have over it, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Data processed

This site has no forms and no user registration: browsing it requires no identifying data.

If you get in touch by email, the data you include in your message is processed (name, email address and content).

If you accept analytics cookies, Google Analytics 4 collects pseudonymised usage data: cookie identifier, pages viewed, language, device and browser type, approximate country and traffic source. Your IP address is used for approximate geolocation and is not stored.

The hosting provider (Cloudflare) generates technical access logs needed to deliver the service and protect it from abuse.

Purposes and legal basis

Answering enquiries sent by email: legal basis, your consent when writing (art. 6.1.a GDPR).

Measuring site usage through aggregated statistics in order to improve it: legal basis, your prior consent given in the cookie notice (art. 6.1.a GDPR). You may withdraw it at any time.

Keeping the site secure and available: legal basis, the controller's legitimate interest in keeping the service running and protected (art. 6.1.f GDPR).

Recipients

Personal data is never sold, rented or shared with third parties, except where required by law.

The providers needed to run the service act as processors or joint controllers: Cloudflare, Inc. (hosting and content delivery network) and Google Ireland Limited (Google Analytics 4), the latter only if you accept analytics cookies.

International transfers

Some of these providers may process data outside the European Economic Area, mainly in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework adequacy decision or, failing that, on the standard contractual clauses approved by the European Commission.

Retention period

Emails are kept for as long as the exchange lasts and afterwards for the applicable statutory limitation periods.

Analytics data is retained in Google Analytics for a maximum of 14 months; analytics cookies expire after the periods listed in the cookie policy.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to hi@dlopezn.es stating which right you wish to exercise.

If you believe the processing does not comply with the rules, you may lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es).

Security

The site is served over HTTPS with HSTS only and applies security headers (content security policy, framing protection and browser permission restrictions) to protect information in transit.

Changes to this policy

This policy may be updated to reflect regulatory or technical changes. The version in force is always the one published on this page, with the last updated date shown above.