Privacy policy

1. Data controller

The controller for data collected on this site is:

• —Owner: Víctor Andújar Murcia, trading as Ammavaroo.
• —Tax ID: 53296659R.
• —Address: Avinguda Comte Ramon Berenguer, 146, bajos 2ª — 08690 Santa Coloma de Cervelló (Barcelona), Spain.
• —Email: ammavaroo.contact@gmail.com.
• —Website: www.ammavaroo.com.

2. What we process and why

There are exactly three processing activities on this site. There are no others: we create no user accounts, sell nothing online and build no profiles.

• —Contact form. We collect your name, email, phone, the service you're interested in and your message. We use them solely to reply and discuss the project with you. On submitting, you receive a confirmation copy by email.
• —Web analytics. If you accept analytics cookies, Google Analytics collects aggregated browsing data: page views, time on site, referrer and device type. If you decline, the script is never loaded.
• —Abuse prevention. When you submit the form, your IP address is held in server memory for one hour to limit automated submissions. It is never written to a database, never linked to your message, and is discarded when the server restarts.

3. Legal basis for each activity

• —Contact form: your consent, given by ticking the box before submitting (Art. 6(1)(a) GDPR), and our legitimate interest in answering an enquiry you initiated (Art. 6(1)(f)).
• —Web analytics: your consent alone (Art. 6(1)(a) GDPR). You can withdraw it at any time from the cookies button, without affecting the lawfulness of prior processing.
• —Abuse prevention: legitimate interest in keeping the service available and protected against automated submissions (Art. 6(1)(f) GDPR).

4. How long we keep it

• —Form messages: for as long as the commercial relationship lasts and, afterwards, for the period legally required to address potential liabilities. If we don't end up working together, they are deleted within twelve months at most.
• —Analytics data: per the Google Analytics retention setting, capped at fourteen months.
• —Abuse-control IP address: one hour.
• —Your cookie preference: stored in your browser's local storage until you clear it.

5. Who else sees your data

We neither sell nor share data for commercial purposes. Only the providers needed to run the site are involved, each as a processor:

• —Brevo (Sendinblue SAS, France): delivery of the form emails. Data hosted in the European Union.
• —Google Ireland Ltd.: Google Analytics, only if you accept analytics cookies.
• —Our hosting provider, which processes technical server logs.

6. International transfers

Google Analytics may involve transferring data to servers in the United States. Google adheres to the EU-US Data Privacy Framework, which the European Commission considers to provide an adequate level of protection. If you decline analytics cookies, this transfer never takes place.

All other processing stays within the European Economic Area. The site's typefaces are served from our own domain: visiting us makes no request to Google servers to load them.

7. Cookies and local storage

This site sets no cookies until you decide. When you accept or decline, we store your choice in the browser's local storage (a key named cookiesAccepted). It is not a cookie: it is never sent to the server with each request and cannot identify you.

If you accept, Google Analytics cookies are loaded. You can change your decision at any time from the cookies button in the corner of the screen; withdrawing consent reloads the page so that already-injected scripts are unloaded.

8. Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to ammavaroo.contact@gmail.com, stating which one you wish to exercise. We will respond within one month at the latest. We may ask you to prove your identity if we cannot verify it otherwise.

You may also withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), Calle Jorge Juan 6, 28001 Madrid.

9. Security and automated decisions

The site is served entirely over HTTPS, and the credentials for the services we use are kept out of the code that reaches your browser. Even so, no system is infallible: if we detected a breach affecting your data, we would tell you alongside notifying the supervisory authority.

We make no automated decisions and build no profiles from your data.

10. Minors

This site is intended for people aged 14 and over. We do not knowingly collect data from anyone younger; if we become aware that we have, we delete it.