Privacy policy

This Privacy policy describes the processing of the personal data of people who visit the website https://guforge.com and the example websites hosted on its subdomains, such as chiringuito-linda.guforge.com (hereinafter, together, "the Website"), or who contact its owner, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

1. Data controller

The data controller is Fran Beltrán, a self-employed professional trading under the name GuForge, with tax identification number (NIF) 76440940A and address at Calle Real, Huétor Vega, Granada (Spain), who may be contacted at the email address [email protected] (hereinafter, "the Controller"). No Data Protection Officer has been appointed, as one is not required under applicable law.

2. Data processed

Contact data: when users contact the Controller by email or through the contact form, their name, email address, the type of project indicated and the content of the message are processed. The form stores no information on the Website: it opens the user's email program with the message prepared, and the user decides whether to send it.

Technical data: when the Website is visited, the servers and the security network log technical data such as the IP address, browser type and pages requested, which are needed to serve the Website and protect it against attacks.

Usage data: the PostHog analytics tool records the pages visited, the links and buttons clicked, the device and browser type, the referring site and the approximate country. If the user does not accept analytics cookies, visits are counted without storing any identifier in the browser, as described in the Cookie policy.

No special categories of data are collected and no profiles are built for advertising purposes. Providing data is voluntary, although an enquiry cannot be answered without an email address.

3. Purposes and legal bases

Answering enquiries and, where appropriate, preparing a proposal for services, on the basis of the data subject's consent and of steps taken at their request prior to entering into a contract (article 6.1.a and 6.1.b GDPR).

Keeping the Website available and secure, on the basis of the Controller's legitimate interest (article 6.1.f GDPR).

Measuring the use of the Website in order to improve it, on the basis of consent where the user accepts analytics cookies (article 6.1.a GDPR) and otherwise of the legitimate interest in knowing the number of visits through an anonymous count without cookies (article 6.1.f GDPR).

Complying with applicable legal obligations (article 6.1.c GDPR).

No marketing communications are sent without the data subject's prior consent.

4. Recipients

Data is not disclosed to third parties except where required by law or by a competent authority. The following providers have access to it as processors, and only to the extent necessary to provide their services: Cloudflare, Inc. (content delivery and security network for the Website and forwarding of email addressed to [email protected] and [email protected]); OVH SAS (hosting of the Website on servers located in the European Union); Google LLC (mailbox where messages are received); and PostHog Inc. (usage analytics, with the data hosted in the European Union).

5. International transfers

Cloudflare, Inc., Google LLC and PostHog Inc. are established in the United States and may process data outside the European Economic Area. In such cases, transfers are covered by the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the Standard Contractual Clauses adopted by the European Commission.

6. Retention periods

Messages are kept for as long as necessary to answer the enquiry and, if a professional relationship is established, for its duration and the applicable statutory limitation periods. Enquiries that do not lead to a professional relationship are deleted within one year at most. Analytics data is deleted automatically after one year.

7. Data subject rights

Data subjects may at any time exercise their rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to [email protected]. Requests will be answered within one month at most. Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Cookies

The Website only sets analytics cookies if the user accepts them. Detailed information is available in the Cookie policy.

9. Changes

The Controller may amend this Privacy policy to reflect legal or technical changes. Amendments will be published on this page, together with the date of the latest update.