This policy explains how personal data is handled on this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
This website does not use cookies and does not store your data on a server. It uses Cloudflare Web Analytics, a privacy-first measurement tool that counts aggregate page views without cookies, without fingerprinting, and without tracking individuals across sites.
If you fill in the audit questionnaire, the answers, any files you attach, and the contact details you provide are sent to me by email so I can prepare and send your audit. They are used for nothing else. The form is protected by Cloudflare Turnstile, which processes technical connection data to block spam.
If you contact me by email, phone, or WhatsApp, I will receive the personal data you choose to share (typically your name, contact details, and the content of your message).
Data received through contact channels is used only to respond to your inquiry and, where applicable, to prepare and deliver professional services. The legal basis is your consent when initiating contact, and the performance of pre-contractual or contractual steps (Art. 6.1.a and 6.1.b GDPR).
Messages are kept only as long as needed to handle the inquiry or the resulting professional relationship, and to meet legal obligations that may apply (for example, tax records for delivered services).
Data is not sold or shared with third parties, except providers needed to operate normal communications (for example, my email provider) or where required by law.
I contact businesses directly by email to introduce my services. If you received an email from me and did not give me your address, this section explains where it came from.
Where the data comes from. Public business listings (such as Google Maps business profiles) and the company's own public website. I do not buy contact lists and I do not collect data from private sources.
What I hold. Business contact details only: company name, business email address, business phone, city, website, and notes taken from the company's own public site. No personal or financial data, and no special categories of data.
Why I am allowed to hold it. Legitimate interest in direct business-to-business marketing (Art. 6.1.f GDPR, Recital 47). The data concerns people in their professional capacity, was published by the business itself to be contacted, and is used for a maximum of three emails with no profiling and no automated decision-making.
Objecting. You can object at any time, for any reason or none. Reply to any of my emails with "stop", or write to [email protected]. I remove you from the active list immediately and add your address to a suppression list, kept solely so that you are never contacted again.
How long I keep it. Contact details are deleted 12 months after the last contact, or 12 months after collection if I never wrote to you.
Who else sees it. The providers that run the sending and verification: Instantly.ai, Google Workspace (Google Ireland), Outscraper and MillionVerifier. The data is not sold or shared with anyone else.
You can request access, rectification, erasure, restriction, portability, or object to processing at any time by writing to [email protected], or to [email protected] for anything relating to my outbound emails. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
This is a static website hosted on Cloudflare Pages (Cloudflare, Inc.). Cloudflare may process technical connection data (such as IP addresses in server logs) as needed to deliver and secure the site. Cloudflare participates in the EU-US Data Privacy Framework.