Privacy Policy

1. Data controller

The controller of the personal data collected through this website is:

• Owner: Javier Piedra
• Tax ID (NIF): 70256299Q
• Address: 40194 Palazuelos de Eresma (Segovia), Spain
• Email: contacto@jpiedra.com

2. Purpose of processing

Personal data submitted by the user through the contact form on this website is processed for the following purposes:

• To respond to the user's request, query, or information inquiry.
• To maintain the commercial communication necessary to evaluate a potential professional relationship.
• To comply with applicable legal obligations (tax, accounting, or otherwise).

No profiling or automated decision-making is carried out on the data provided.

3. Data collected

The following data is collected through the contact form:

• Name.
• Email address.
• Website (optional).
• Message and any additional information the user voluntarily includes in it.
• Date and time of acceptance of this privacy policy, as proof of consent.

The user is responsible for the accuracy of the data provided and undertakes not to provide third-party information without their express consent.

4. Legal basis for processing

The legal basis for processing the data is:

• The user's consent, expressly given by ticking the acceptance box for this policy before submitting the form (Article 6.1.a GDPR).
• Compliance with legal obligations applicable to the controller, in particular regarding tax and accounting matters (Article 6.1.c GDPR).

5. Retention period

Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected:

• If the inquiry does not result in a commercial relationship, the data will be retained for a maximum of one year from the last contact, unless the user requests its deletion earlier.
• If the inquiry results in a commercial relationship, the data will be retained for the duration of the relationship and, subsequently, for the periods legally required to address potential liabilities (in particular, tax and commercial limitation periods).

6. Recipients and data processors

Personal data will not be transferred to third parties, except where legally required. The following service providers act as data processors in the provision of the service:

• Netlify, Inc. (United States) — website hosting and delivery.
• Supabase, Inc. (United States) — storage of data submitted through the contact form.
• Raiola Networks S.L. (Spain) — hosting of the server that processes the forms via the self-hosted n8n tool.
• Google LLC (United States) — email service (Gmail/Google Workspace) for internal correspondence management.

Some of these providers are located outside the European Economic Area. International data transfers are carried out with the adequate safeguards required by the GDPR, in particular the Standard Contractual Clauses approved by the European Commission.

7. User rights

The user has the right to:

• Access their personal data.
• Request the rectification of inaccurate or incomplete data.
• Request the deletion of their data when it is no longer necessary.
• Request the restriction of processing.
• Object to the processing.
• Request the portability of their data in a structured format.
• Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.

These rights can be exercised by sending an email to contacto@jpiedra.com, clearly indicating the right being exercised and, if necessary, attaching a document proving the user's identity.

The user also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing does not comply with current regulations. This can be done at www.aepd.es.

8. Security measures

The data controller applies the technical and organizational measures necessary to ensure the security, integrity, and confidentiality of personal data, preventing its alteration, loss, unauthorized processing, or access.

9. Changes to the privacy policy

This privacy policy may be updated to reflect legislative changes or modifications to the services provided. The date of the last update is shown at the beginning of the document. Users are advised to review this policy periodically.