Privacy Policy

Sergio Torices, Madrid, Spain. Email contact@sergiotorices.com with questions or to exercise your data rights.

When you use an enabled form, we store your name, email, message, enquiry category, language and enquiry source, including campaign parameters carried by the link. This information is used to respond and follow up on your request. Making contact does not subscribe you to the newsletter.

Requested pre-contractual steps rely on GDPR Article 6(1)(b); other enquiries and security rely on the legitimate interest in handling and protecting communications under Article 6(1)(f). Follow-up records are limited to the relationship and the work needed to address it.

Subscription relies on your consent (GDPR Article 6(1)(a)), is voluntary and requires confirmation through an emailed link. We record your language, request, confirmation and withdrawal. You can withdraw consent using the unsubscribe link in the emails. Confirming withdrawal cancels queued campaign emails.

Sender processes subscription confirmations, newsletter editions and contact notifications. It receives the recipient address and the content needed for that email. We retain the message identifiers and states reported by the provider. An accepted send is not treated as a confirmed delivery. This website does not add its own tracking pixels; Sender may process technical delivery, open and click data according to the service configuration.

Sales remain disabled until genuine offers and prices are configured. When enabled, Stripe processes payments on its own hosted page. This website does not receive or store card numbers. Necessary order details, amount, currency, customer and payment state confirmed by Stripe will be retained.

GitHub holds code and public assets; contacts and secrets are not stored in the repository. Cloudflare hosts the website and, when enabled, processes forms and stores records in D1. Cloudflare Access protects the private workspace. Enabled forms use Cloudflare Turnstile to verify submissions; Cloudflare receives the token and IP address for this check.

To limit abuse, a temporary fingerprint of the IP address is generated using a secret; the raw IP is not stored in the CRM. Hosting providers may process their own technical logs. Cloudflare, Sender and Stripe may process data under their terms and agreements, including international transfers with applicable safeguards.

Form conversions and acquisition sources are counted without building browsing profiles. Optional Cloudflare analytics loads only when configured and accepted. The cookie policy states whether it is available in this version.

Enquiries are kept while needed to handle the relationship. Newsletter data is kept until withdrawal or erasure, with the minimum evidence needed to respect that decision. Orders may be retained for applicable tax and legal periods. Abuse controls expire within two hours and confirmation links after 24 hours; cleanup depends on the scheduled task.

You can request access, correction, erasure, objection, restriction or portability by emailing contact@sergiotorices.com. You can withdraw consent without affecting earlier processing and lodge a complaint with the Spanish Data Protection Agency (aepd.es).