1. Data controller
- Controller: Thierno Diallo
- Address: Gijón, Asturias, Spain
- Contact email:[email protected]
2. Data we collect
By using the Site's contact and review forms, the following personal data may be collected:
- Contact form: name, email address, project type and message.
- Review form: name, email address, company (optional), rating, review title and text, and project type.
No specially protected data is collected (health, ideology, religion, etc.).
3. Purpose and legal basis of processing
| Purpose | Legal basis |
|---|---|
| Handling your inquiry or project via the contact form | Performance of pre-contractual measures at the data subject's request (Art. 6.1.b GDPR) |
| Publishing the review on the portfolio (subject to moderation) | Data subject's consent (Art. 6.1.a GDPR) |
| Forwarding contact information to the controller's email via EmailJS | Controller's legitimate interest (Art. 6.1.f GDPR) |
4. Recipients and international transfers
Data entered in the contact form is processed by EmailJS (EmailJS Ltd.), an email delivery service. EmailJS processes data on servers located in the European Union in accordance with its privacy policy.
Reviews are stored on Google Firebase / Firestore, which is GDPR-compliant and provides adequate safeguards for data transfers.
No data is shared with third parties for marketing or advertising purposes.
5. Retention period
Contact form data is retained only for as long as necessary to handle the communication. Published reviews are retained while visible on the portfolio; the user may request their deletion at any time.
6. Data subject rights
Under the GDPR and the LOPDGDD, you may exercise the following rights by emailing [email protected] with the subject "GDPR Rights":
- Access: know what data we process about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data.
- Objection: object to processing based on legitimate interest.
- Restriction: request restriction of processing.
- Portability: receive your data in a structured format.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) if you believe the processing does not comply with the GDPR.
7. Security
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss or accidental destruction, in accordance with Article 32 of the GDPR. Data is stored on Google Firebase, which implements encryption in transit (TLS) and at rest.