Legal information

Privacy policy

Controller

Luan Gonzalez, sole trader (autónomo), trading as InfraMaker.

• Tax ID (NIF): Z1761528D
• Calle Barroso 15, 29001 Málaga, Spain
• hello@inframaker.eu

Full details are in the legal notice.

What I process and why

• Contact form. Your name, work email, company and role if you give them, the topic, your message and your answers about your environment. I use them to reply to your request and, if you ask, to prepare a proposal. Legal basis: your consent, and steps taken at your request before a contract (GDPR article 6(1)(a) and (b)). You can withdraw your consent whenever you like; withdrawing it does not affect what I did before. With each brief I also keep the page you sent it from, the date, and the version of the consent text you accepted.
• Spam protection. When you send the form, your browser solves a small computing puzzle (Altcha) that my own servers check, with no third party. Your IP address and email are kept only as a keyed hash, to limit repeated sending; they expire after 48 hours and are then deleted automatically. Legal basis: the legitimate interest in protecting the form (GDPR article 6(1)(f)).
• Email. If you write to me directly, I use your message and contact details to reply, on the same legal basis as the form.
• Newsletter. Only if you subscribe, by ticking its box on the form or on the newsletter page: your email, your language and the version of the text you agreed to, to send you InfraMaker's new articles. I ask you to confirm by email, and you can unsubscribe from any issue. Legal basis: your consent (GDPR article 6(1)(a)).
• Booking a call. If you book a call, Microsoft Bookings collects your name, email, what you write in the booking and the time you choose, and creates the Microsoft Teams meeting. Legal basis: steps taken at your request before a contract.
• Visit statistics. Umami counts pages viewed, the referring page, the browser, operating system and device type, screen size, language and approximate location (country, region and city), with no cookies and without identifying you. It also records clicks on "Book an intro call" and when the form is started and sent, without anything you type. If your browser sends the "Do Not Track" signal, nothing is recorded. Legal basis: the legitimate interest in knowing which pages are read in order to improve the site, without identifying you (GDPR article 6(1)(f)).
• Technical logs. The hosting may log technical data for each visit, such as the IP address and browser, to serve and protect the site.

How long I keep it

• Briefs in the site's database that don't lead to work: they expire 24 months after receipt. If there is a contract, the data needed moves to the accounts for as long as the law requires.
• Emails (the ones you send me and the notice I receive for each brief): 24 months from the last contact.
• Briefs marked as spam: they expire after 30 days.
• Keyed hashes of IP addresses and emails used against spam: they expire after 48 hours.
• Newsletter: until you unsubscribe.
• Call bookings: 24 months from the date of the call.
• Umami statistics: 6 months.

Briefs, briefs marked as spam, keyed hashes and statistics are deleted automatically when they expire, usually within a few days. I delete emails and bookings myself when their period ends.

Providers that process data

I don't sell or pass on data to third parties, except where the law requires it, I run no third-party advertising, and I make no automated decisions about you. These providers process it on my behalf, under a data processing agreement:

• Amazon Web Services: hosting, the form's functions, the database and email notifications. In the European Union (Frankfurt, Germany).
• Brevo: the newsletter and its confirmation. In the European Union.
• Microsoft: email, bookings with Microsoft Bookings and Microsoft Teams meetings. In the European Union.
• Umami: visit statistics. In its European Union data region, with sub-processors in the United States.

International transfers

Umami and some of its sub-processors, and the parent companies of Amazon Web Services and Microsoft, are in the United States. Where a provider processes data outside the European Economic Area, it does so under the safeguards in Chapter V of the GDPR: a European Commission adequacy decision, such as the EU-US Data Privacy Framework, or standard contractual clauses.

Your rights

You can ask for access to, rectification, erasure, restriction or portability of your data, object to its processing, and withdraw your consent at any time, by writing to hello@inframaker.eu from the address you gave me. I reply within the one-month period the GDPR sets, and you can unsubscribe from the newsletter with the link in any issue. You can also complain to the Spanish Data Protection Agency (aepd.es) or to your own supervisory authority.

Cookies and storage in your browser

This site uses no cookies. If you switch between the light and dark theme, your browser keeps that choice in its local storage. Umami's script reads a local setting (umami.disabled) that lets you turn statistics off in your browser, but it stores nothing.

Minors

This site is aimed at professionals, not at anyone under 14. If I receive data from someone below that age, I delete it as soon as I know.

Changes to this policy

If I change it, I update its date. If the change affects what I do with data you have already given me, I tell you by email before it takes effect.