Privacy policy

The data controller is Yago Chemelal López (Yago Arriaga), tax ID 33998634B, with address at C/ Argumosa 19, 2.º D, 28012 Madrid, España.

• Contact email for privacy matters: yagochemelal@gmail.com

• Contact form and email. Data: your name, email address and the content of your message. Purpose: to deal with your enquiry and reply to you. Legal basis: your consent (Art. 6.1.a GDPR), which you give by ticking the form's checkbox or by writing to us by email.
• Technical browsing data. Data: IP address and basic request details (date, page, browser). Purpose: to make the website work and keep it secure. Legal basis: legitimate interest in the security and operation of the site (Art. 6.1.f GDPR). These are logged by the hosting provider and kept for a limited time.
• Third-party content (YouTube and Spotify). It is only loaded when you ask for it with a click, and its processing is explained in the Cookie policy. In addition, the video thumbnails in the Press section are downloaded from YouTube (Google) servers, which may therefore receive your IP address.

We use no analytics or advertising tools, build no profiles and make no automated decisions, and we do not currently send newsletters or commercial communications.

We keep your message and contact details for as long as needed to handle your enquiry and, afterwards, duly blocked, for the limitation periods of possible legal liabilities. After that they are deleted. The hosting provider's technical logs are kept only for the period the provider sets for security and operation.

We do not sell or pass on your data to third parties, except where required by law. To provide the service we rely on providers that process data on the controller's behalf (data processors):

• Formspree, Inc. (United States): receives and manages the messages sent through the contact form and forwards them to the owner's email.
• Netlify, Inc. (United States): hosts and serves the website and logs technical access data.
• The owner's email provider (Google, Gmail): where messages are received and answered.

Some of these providers are located in the United States. International transfers rely on the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework where the provider is certified.

You can exercise the following rights at any time by writing to yagochemelal@gmail.com, stating which right you wish to exercise and, if needed, a way to identify yourself:

• Access: find out what data of yours we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data.
• Objection and restriction of processing.
• Portability: receive your data in a structured format.
• Withdraw your consent at any time, without affecting the lawfulness of earlier processing.

We will reply within one month at most. If you believe your rights have not been honoured, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

This site is not aimed at children under 14. If you are under that age, you need the consent of your parent or guardian to send us your data (Art. 7 of Spanish Organic Law 3/2018).

We apply reasonable technical and organisational measures to protect your data:

• All communication with the website is encrypted using HTTPS.
• We collect only the data that is strictly necessary (name, email and message), and the website keeps no database of its own with messages: they are sent straight to the form service and from there to the owner's email.
• Access to received messages is limited to the owner, with protected accounts.
• The form includes an invisible anti-spam mechanism, and our providers apply their own security measures.
• If a security breach affecting your rights occurred, it would be reported to the supervisory authority and, where appropriate, to the people affected, in line with Articles 33 and 34 of the GDPR.

This website links to third-party sites (stores, social networks, video and music platforms). Each has its own privacy policy, for which we are not responsible.

We may update this policy when the way the website works or the law changes. The date of the latest review is shown at the top of the page.