Privacy policy

1. Data controller

Controller: Roberto Pérez Moreno. Tax ID (NIF): 05338014-J. Address: Camino Pocito de San Roque 22, 1A, 28231 Las Rozas, Madrid, Spain. Privacy email: contact@robertoperezmoreno.com.

No data protection officer has been appointed as this is not mandatory for the activity currently carried out.

2. Data processed

Depending on how the user interacts with the website, the following may be processed: identification and contact data (name, email and phone if provided); information voluntarily included in messages or requests; data necessary to manage quotes, services or contractual relationships; technical data such as IP address, browser, device, security logs and cookie preferences; and any other information requested through a form, provided its purpose is explained in advance.

Special categories of data must not be requested. Please do not send health, ideological, religious, sexual orientation or other specially protected data unless strictly necessary and a valid legal basis exists.

3. Purposes and legal bases

Handling enquiries and requests: the legal basis is consent given when voluntarily submitting the form or message and, where applicable, pre-contractual measures requested by the data subject.

Preparing quotes and providing contracted services: the legal basis is pre-contractual measures and contract performance.

Managing invoicing, accounting and tax obligations: the legal basis is compliance with legal obligations.

Ensuring website security and operation: the legal basis is the legitimate interest of the controller in protecting the website, preventing abuse and maintaining security.

Non-essential measurements or analytics: this will only be carried out when the user has given consent through the cookie panel. As of the date of this policy, no first-party or third-party analytics cookies are used.

4. Retention

Enquiries not linked to a contract: for as long as necessary to respond and, at most, 12 months, unless they must be kept to address liabilities.

Contractual and billing data: for the duration of the contractual relationship and the periods required by tax, commercial and liability-prevention regulations.

Technical and security logs: for the period strictly necessary to protect the website and manage incidents.

Cookie consent: while valid and for the time necessary to demonstrate it was obtained (up to 24 months).

Thereafter, data will be deleted or blocked where legally appropriate.

5. Recipients and processors

Personal data will not be sold.

Providers delivering necessary services — such as web hosting, email, maintenance or forms — may access data, subject to data processing agreements where applicable.

Data may also be disclosed to public authorities, courts, law enforcement or other bodies where there is a legal obligation.

Current providers: Web hosting — Hostinger (European Union, depending on the contracted service). Email — Hostinger (European Union, depending on the contracted service). Forms: managed directly on this website, with no external CRM. Analytics: not currently used. Other providers with access to data: Vimeo Inc. only when the user activates embedded video playback.

6. International transfers

No international transfers of personal data outside the European Economic Area are planned by the controller in relation to hosting, email or the contact form.

When the user activates playback of a video hosted on Vimeo, international transfers may occur through that provider. Please refer to Vimeo's privacy policy for destination countries and applicable safeguards.

7. Rights

Data subjects may request access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent at any time, without affecting the lawfulness of prior processing.

Requests may be sent to contact@robertoperezmoreno.com, stating the right you wish to exercise. Additional information to verify identity will only be requested where there are reasonable doubts.

Data subjects may also lodge a complaint with the Spanish Data Protection Agency at https://www.aepd.es.

8. Mandatory nature of data

Fields marked as mandatory are required to handle the request. If they are not provided, the requested service may not be available. Users guarantee that the data provided is accurate and will communicate any changes.

9. Minors

The website is not specifically aimed at minors and does not intentionally collect their data.

10. Security

Appropriate technical and organisational measures proportionate to the risk will be applied to protect data against destruction, loss, alteration, disclosure or unauthorised access. No system is completely invulnerable, but measures will be reviewed and incidents managed in accordance with applicable regulations.

11. Changes

This policy may be updated when processing activities, providers or legal requirements change. Where the change is significant, visible notice will be given and new consent will be requested if necessary.