legal
Privacy
How contact-form data and cookieless analytics are handled, under the GDPR.
Data controller
The controller of your data is Dídac Pérez Escrich (Sant Boi de Llobregat, Barcelona, Spain). You can get in touch at [email protected].
What data we process and why
If you use the contact form, we process the data you provide —name, email address and the content of your message— for the sole purpose of reading and replying to your enquiry.
Providing this data is voluntary but necessary to answer your enquiry; without it we cannot respond.
Traffic is measured with Cloudflare Web Analytics, a cookieless analytics tool. Its script loads from static.cloudflareinsights.com and writes nothing to your device: no cookies, no local storage, no visitor identifier of any kind.
What reaches the statistics dashboard is aggregate: page path, the domain you arrived from, country, browser, operating system, device type and load timings. It does not identify you and does not track you across sites.
Legal basis
The legal basis for processing the form data is your consent, given when you submit it (Art. 6.1.a GDPR). Aggregated analytics rely on the owner's legitimate interest in understanding how the site is used, without processing personal data.
No automated decision-making or profiling is carried out with your data.
Retention
We keep your enquiry data for as long as necessary to handle it and, afterwards, for the period legally required to address any liabilities. Once that period elapses, the data is deleted.
Recipients and processors
We do not share your data with third parties except where legally required. To provide the service, Cloudflare acts as processor: site hosting, audience measurement via Cloudflare Web Analytics, anti-spam protection of the form via Cloudflare Turnstile, and delivery of the form message to its recipient via Cloudflare Email Routing.
To protect the form against automated submissions, Cloudflare Turnstile processes your IP address as a technical identifier. The basis is the owner's legitimate interest in preventing abuse (Art. 6.1.f GDPR). The IP is not stored on the site nor included in the message.
International transfers
Cloudflare may process data in the United States. It is certified under the EU-US Data Privacy Framework; failing that, the transfer relies on the European Commission's standard contractual clauses. You can request a copy of the safeguards at [email protected].
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email protected].
Where processing is based on your consent, you may withdraw it at any time by writing to [email protected], without affecting the lawfulness of processing before withdrawal.
If you believe the processing does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.
Last updated: August 4, 2026