Privacy policy
This policy explains what personal data this website handles, why, and what your rights are, under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
- Owner
- Oriol Corbella
- Location
- Barcelona, Spain
- hi [at] oriolcorbella.com
What data is handled
- Emails you send. If you write to the address above, your name, email address and whatever you include in the message.
- Server logs. Like any web server, the hosting server records technical data for each visit: IP address, date and time, page requested and browser type.
- Visit statistics. Microsoft Clarity and Cloudflare Web Analytics record how the website is used: pages visited, clicks, scrolling, time on page, device and browser type, approximate country and the referring website. Neither identifies you by name, and neither uses cookies on this website.
Google Search Console is also used to see how the website appears in Google search results. It does not run on this website and collects nothing from your visit.
This website has no contact forms, no advertising and no cookies. Its fonts are served from this website, not from third parties.
Why, and on what legal basis
- Emails are used only to reply to you and, if you ask, to prepare a proposal. Legal basis: your request and steps prior to a contract (GDPR art. 6.1.b), or legitimate interest in answering messages (art. 6.1.f).
- Server logs are used to keep the website secure and working. Legal basis: legitimate interest (art. 6.1.f).
- Visit statistics are used to understand which content is useful and to improve the website. Legal basis: legitimate interest (art. 6.1.f).
How long data is kept
Emails are kept while the conversation or any resulting work lasts, and afterwards only as long as required by tax or legal obligations. Server logs are deleted after 90 days. Clarity keeps its statistics for up to 13 months.
Who receives the data
Your data is not sold or shared with third parties. It is stored by these service providers, acting as data processors:
- Website hosting: OVH SAS, France (European Union).
- Email: an email provider based in Spain (European Union).
- Visit statistics: Microsoft Corporation (Clarity), United States, and Cloudflare, Inc. (Web Analytics), United States.
Microsoft and Cloudflare may process data in the United States. Both are certified under the EU–US Data Privacy Framework, which the European Commission recognises as giving adequate protection.
Your rights
You can ask for access to your data, its rectification or erasure, restriction of its processing, its portability, or object to its processing. Write to hi [at] oriolcorbella.com; you will get an answer within one month.
If you think your data has not been handled properly, you can complain to the Spanish Data Protection Agency (AEPD) at aepd.es.
Changes
If this policy changes, the new version will be published on this page with its date.