Privacy and cookie policy

1. Data controller

• Controller: Diego Sanjuan Villanueva (individual, self-employed professional)
• Spanish tax ID (NIF): 02577756P
• Address: Calle Miami 27, 28027 Madrid, España
• Contact: hello@diegosanjuan.com

2. What data is processed and why

Email

Apart from the chat contact form (see below), this site does not store any forms. If you write to hello@diegosanjuan.com, your name, email address and whatever you include in the message are used to reply and, where relevant, to prepare a quote or manage a project.

• Legal basis: your consent when you write (art. 6.1.a GDPR) and, if you ask for a quote or hire a service, pre-contractual steps or the contract itself (art. 6.1.b GDPR).
• Retention: as long as needed to answer your enquiry. If a working relationship follows, for the length of that relationship and any periods required by law (for example, tax obligations).

Site chat

If you use the chat, your messages are processed through Vercel AI Gateway and an AI model provider to generate the reply, and a copy of the conversation is sent to hello@diegosanjuan.com so Diego can read it. Only what you type is included, with no extra identifying data. Legal basis: your consent when using the chat (Art. 6.1.a GDPR). Retention: as long as needed to handle your question. If you attach files (images, PDFs or documents), they are processed in memory only to generate the reply and are not stored; the copy sent to Diego includes only the file names. For general questions the chat may search the web through Vercel AI Gateway (Perplexity) and read public web pages; those searches include the text of your question, never your files.

Chat contact form

If you agree in the chat to leave your details, your name, email, phone (optional), business and sector, what you need and an approximate budget are processed. Purpose: so Diego can contact you about your enquiry, suggest a meeting and, if you ask, prepare a quote. They are not used to send you automatic marketing messages.

• Legal basis: your consent, given by ticking the box in the form (art. 6.1.a GDPR), and, if you ask for a quote, pre-contractual steps (art. 6.1.b GDPR).
• Where they are kept: in private Vercel storage (Vercel Blob), and a notice with the details is sent to hello@diegosanjuan.com through Hostinger email.
• Retention: up to 12 months after the last contact if no working relationship follows; if one does, for that relationship and any periods required by law.
• Your rights: you can withdraw your consent, ask for access, correction or deletion of your data, and use the other rights in section 4 by writing to hello@diegosanjuan.com.

Visit statistics

The site uses Vercel Web Analytics to count visits in aggregate (pages viewed, country, device type and browser, referring page). It uses no cookies and stores nothing on your device. According to Vercel, each visitor is identified by a hash of the request that expires after 24 hours and cannot be used to follow you across sites.

• Legal basis: legitimate interest in knowing how the site is used (art. 6.1.f GDPR).
• Retention: data is kept in aggregate under Vercel’s policy.

Technical logs

Like any web server, the hosting provider logs technical data (IP address, date and time, requested page, browser) to serve the site and protect it from abuse. Legal basis: legitimate interest in the security of the site (art. 6.1.f GDPR).

3. Recipients and international transfers

No data is passed to third parties unless the law requires it. These providers are used:

• Vercel Inc. (USA): site hosting and visit statistics.
• Google LLC (USA): email service (Gmail).
• Hostinger International Ltd. (Cyprus, EU): mailbox for hello@diegosanjuan.com and sending of the site’s notices.

Vercel and Google may process data outside the European Economic Area. Those transfers rely on the EU-US Data Privacy Framework and/or the European Commission’s standard contractual clauses.

4. Your rights

You can ask for access, correction, deletion, objection, restriction of processing and portability of your data, and withdraw your consent at any time, by writing to hello@diegosanjuan.com. If you think your rights have not been respected, you can complain to the Spanish Data Protection Agency (www.aepd.es).

5. Cookies

This site sets no first-party or third-party cookies for analytics, advertising or tracking, so it shows no cookie banner. If you close the language suggestion, your browser remembers that choice in its local storage and never sends it to a server. If a tool that uses cookies is ever added, this policy will be updated and your consent will be asked first.

6. Changes

This policy may change. The date of the last update is shown above.