Privacy policy · Andrés Blanco

This is a translation of the Spanish text, which prevails in case of doubt.

This site collects as little as possible: what you write in the contact form, and visit statistics that don’t identify you. Here’s what I do with it.

Who is responsible

Andrés Jaime Blanco Canelos, tax ID (NIF) 24399695F. For anything about your data, write to legal (at) andresblanco.dev. My other details are in the legal notice.

What I process

What you write in the form: name, email, company and budget (optional), the message and the language of the page.
Your IP address and technical details of your browser, which reach the servers that deliver the site and the form’s spam check. I don’t use them to identify you.
Aggregate browsing data (pages viewed, referring site, country, device type and loading speed), which I only see as totals.

Why, and on what legal basis

To reply to your message and, if you ask, prepare a quote. Basis: your consent when you send the form, and steps taken at your request before a contract (GDPR art. 6.1.a and 6.1.b).
To protect the form from spam and abuse. Basis: my legitimate interest in keeping the site secure (GDPR art. 6.1.f).
To know how many visits the site gets and which pages interest people, so I can improve it. Basis: my legitimate interest (GDPR art. 6.1.f).
If we work together, to run the project and invoicing. Basis: the contract and my legal obligations (GDPR art. 6.1.b and 6.1.c).

I don’t use your details to send you advertising, and I make no automated decisions with them.

How long I keep it

Messages from people who don’t become clients are deleted within a year of arriving. If we work together, I keep them for the length of the project and then for as long as tax and commercial law require.

Who else handles it

I don’t sell or share your details. The site relies on these providers, which process them on my behalf:

Netlify (USA): hosts the site and stores form messages.
Cloudflare (USA): runs the domain, the form’s spam check (Turnstile) and the visit statistics (Web Analytics).
Google (Gmail): the inbox where I receive and answer messages.
Sanity (Norway): the site’s content system; images load from its network.

When data leaves the European Economic Area, the transfer relies on the EU-US Data Privacy Framework where the provider has joined it, or on the standard contractual clauses approved by the European Commission.

If you book a call, the booking is handled by the linked scheduling tool, under its own privacy policy.

Cookies and storage

This site uses no analytics or advertising cookies, so it doesn’t need a cookie banner.

To count visits I use Cloudflare Web Analytics, which uses no cookies, stores nothing in your browser and doesn’t follow you from site to site.
If you change the colour theme (3200K / 5600K), your browser stores that choice (localStorage) to remember it. It never leaves your device.
When you reach the contact form, Cloudflare Turnstile checks you’re a person and may set a technical cookie on its own domain. It serves only that check and isn’t used to track you.
Links to social networks lead to sites with their own cookies and policies.

Your rights

You can ask me for access to your details, have them corrected or deleted, object to or restrict their use, and ask for a portable copy. You can also withdraw your consent at any time. Write to legal (at) andresblanco.dev.

If you feel I haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority where you live.