Privacy policy

This English version is provided for convenience. The legally binding version, under Spanish data protection law, is the Spanish-language privacy policy.

1. Data controller

• Controller (full name): Juan Cruz Santostefano
• NIE (Spanish foreigner identification number): X2172080Y
• Address: Calle Francesc Vidal i Sureda, 15, 07015 Palma de Mallorca (Balearic Islands), Spain
• Email: juansantostefano@gmail.com

2. Data we process and purpose

When you use the contact form we process the name, email, phone number (if provided) and the content of the message you send us, solely to reply to your enquiry. We do not use this data for any other purpose or share it with third parties, except where legally required.

If you accept analytics cookies, we also process aggregated browsing data through Google Analytics (see the cookie policy for details).

3. Legal basis

The legal basis for processing contact form data is your consent, given by ticking the privacy checkbox and submitting the form. Analytics data processing is likewise based on your consent, given through the cookie banner.

4. Retention

Contact form data is kept for as long as necessary to handle your enquiry and, unless a longer period is legally required, is deleted once it has been resolved.

5. Recipients and processors

We do not share your data with third parties. For website analytics we use Google Analytics, provided by Google Ireland Limited / Google LLC, which acts as a data processor under its own terms and with the safeguards applicable to international data transfers. IP addresses are processed in anonymised form.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to juansantostefano@gmail.com, stating the right you wish to exercise and attaching a copy of an ID document.

If you believe your data has not been processed in accordance with the law, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Security measures

Reasonable technical and organisational measures have been implemented to protect personal data and prevent its alteration, loss, unauthorised processing or access.