Privacy

Data controller

Controller: [PENDING: legal entity name]. Spanish tax ID: [PENDING]. Address: [PENDING]. Privacy contact: [PENDING: confirm a monitored address].

Data protection officer, if applicable: [PENDING: determine whether one is required or has been appointed voluntarily].

Data and intended uses

The website has no contact forms, user accounts or analytics configured in the application code. If someone chooses to email us from their own email client, the controller may receive information included in the message or attachments to respond to the enquiry. Confirm the actual procedure before publication.

The website demonstrations are animations using sample data. They have no input fields, and the application code does not send or store data entered by visitors.

Hosting and content-delivery services may process technical connection data (for example, IP address, date, requested path and browser details) in security logs. Fields, purposes, roles, providers and retention periods: [PENDING: verify contracts, configuration and actual logs].

Purposes and legal bases

Responding to email enquiries and protecting website availability and security are potential purposes. Confirm each specific purpose and its legal basis under the GDPR: [PENDING: legal review]. Consent or a contractual relationship is not assumed in this draft.

Recipients, providers and transfers

Hosting, CDN, email and support providers with access to data: [PENDING: identify entities, roles, locations and processing agreements]. The observed infrastructure uses Cloudflare and Google Cloud Run; their roles, regions, subprocessors and terms must be confirmed before this section is finalised.

Transfers outside the European Economic Area and applicable safeguards: [PENDING: review with providers and document if any occur].

Retention

Retention periods or criteria for messages and technical logs: [PENDING: define based on purpose, legal obligations and actual configuration]. This draft does not set a generic retention period.

Rights and complaints

Where applicable, people may request access, rectification, erasure, restriction or portability, and may object to processing. They may also complain to the competent supervisory authority. Rights-request channel and competent authority for the operating entity: [PENDING: confirm and publish valid details].