What we do with your data

Controller

Raúl López Doña

Tax ID (NIF)

74727566Z

Address

Calle Juan Gris 3, 28702 San Sebastián de los Reyes (Madrid)

Email

raul.lopez@plazoleta.dev

Only what you type into the contact form: name, email, company (optional) and a description of your project.

The server also records your IP address for a few minutes, to limit repeated submissions from the same connection and hold back spam. It isn't stored afterwards and isn't linked to your message.

If you accept the cookie notice, Google Analytics additionally collects browsing data —pages viewed, where you arrived from, device type and clicks on buttons— with your IP anonymised. If you decline, nothing from Google is loaded and none of that data is collected.

There is no cross-site tracking and no advertising profiling.

This site uses two first-party Google Analytics cookies (_ga and _ga_<id>) to distinguish visits. They expire after two years and are only set if you accept them: until then Google's script isn't even loaded.

You can change your mind at any time from the Cookies link in the footer: withdrawing consent also deletes any cookies already set.

Beyond that, the site stores your theme preference (light or dark) and your answer to this notice in your browser's local storage. Those aren't cookies, they never leave your device and they don't require consent.

To read your message and reply to you. Nothing else: it isn't used to send you advertising, there is no newsletter, and it is neither shared nor sold.

Your consent, given by ticking the box on the form before sending it (art. 6.1.a GDPR). You can withdraw it whenever you like by writing to raul.lopez@plazoleta.dev, without affecting the lawfulness of processing carried out beforehand.

If the contact turns into a proposal or a project, later processing relies on the performance of that contractual relationship (art. 6.1.b GDPR).

One year from the last contact, if the conversation doesn't turn into a project; after that it is deleted. If it does turn into a project, the data is kept for the duration of the relationship and afterwards for the periods required by Spanish tax and commercial law.

Nobody outside Plazoleta, other than the providers that keep the site running and act as processors under contract:

Google Ireland Ltd. (Google Analytics)

Website usage statistics. Only switched on if you accept the cookie notice; if you decline, it isn't loaded. Ireland, with transfers to the USA covered by the EU-US Data Privacy Framework.

Resend

Delivering the email with your message. USA, under the European Commission's Standard Contractual Clauses.

Vercel

Hosting the site and keeping technical request logs. USA, under the European Commission's Standard Contractual Clauses.

You can exercise them by writing to raul.lopez@plazoleta.dev from the address you contacted us with. We reply within one month at the latest.

Access

Find out what data of yours we hold.

Rectification

Correct anything inaccurate.

Erasure

Ask us to delete it.

Objection

Object to us processing it.

Restriction

Ask us to keep it without using it.

Portability

Receive it in a readable format.

If you believe we haven't handled your request properly, you can complain to the Spanish Data Protection Agency.

The site is served over HTTPS and messages travel encrypted to the mailbox. The smallest possible number of people sees them: in practice, whoever is going to reply to you.