privacy policy
Last updated: June 2, 2026 · Scope: disuarez.es
- Controller
- Diego Suárez Martínez
- Tax ID
- — (private activity)
- Address
- Madrid, Spain
- disuarezmz@gmail.com
- Website
- disuarez.es
▸1. What personal data is collected?
This website collects personal data only through the contact form. The data requested is:
- ▸Name (required to identify the sender)
- ▸Email address (required to reply)
- ▸Subject (optional)
- ▸Message body (free text, required)
No geolocation data, behavioral profiles, or special-category data (health, ideology, etc.) are collected. The visitor's IP address may be processed transiently by the infrastructure servers (Vercel) to handle the HTTP request, without persistent storage by the controller.
▸2. Purposes of processing
Data collected through the form is used exclusively to reply to the submitted inquiry. The email is sent via the Resendservice (external processor) and delivered to the controller's inbox. Resend acts as a data processor and handles the data under its own GDPR terms.
▸3. Legal basis for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to contact requests | Data subject's consent · Art. 6.1.a |
| Technical operation of the site | Legitimate interest of the controller · Art. 6.1.f |
▸4. Recipients and international transfers
Data is not shared with third parties except where legally required. The processors involved in the operation of this site are:
- ▸Vercel Inc. — Site hosting and CDN. Transfer: USA · Standard Contractual Clauses (SCCs).
- ▸Resend Inc. — Email delivery from the contact form. Transfer: USA · SCCs.
▸5. Retention period
Data received via the contact form (emails) is retained in the controller's inbox for as long as necessary to manage the initiated communication. You may request deletion at any time (see section 6).
Cookie consent preferences are stored locally in the user's browser (localStorage) and remain until the user deletes them.
▸6. Data subject rights
Under Regulation (EU) 2016/679 (GDPR), you may exercise the following rights at any time:
Access
Know what data we hold about you.
Rectification
Correct inaccurate or incomplete data.
Erasure
Request deletion of your data.
Objection
Object to certain processing activities.
Restriction
Restrict processing in certain circumstances.
Portability
Receive your data in a structured format.
To exercise any of these rights, contact the data controller at: disuarezmz@gmail.com. Include "GDPR Rights" in the subject line and attach a copy of your ID to verify your identity.
If you believe your data has not been processed in accordance with the applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
▸7. Data security
Appropriate technical and organizational measures are applied to ensure the security of personal data: communications encrypted via TLS/HTTPS and storage in infrastructure with recognized security certifications (SOC 2, ISO 27001).
▸8. Minors
This site is not directed at persons under 14 years of age. If you become aware that a minor has provided personal data without parental consent, please contact the controller to proceed with its deletion.
▸9. Changes to this policy
This policy may be updated to reflect regulatory changes or changes to the site's services. The current version will always be available at this URL with the last updated date shown in the header.