Privacy policy

Owner

Enzo Ruiz

Email

enzo@stillroom.co

This is a courtesy translation. The Spanish version prevails in case of discrepancy. Read the Spanish version.

Who is the data controller

I am the controller of your data: Enzo Ruiz, whose details are shown above. For anything to do with your privacy, email me at enzo@stillroom.co.

This policy has been written in accordance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the LOPDGDD (Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights).

What data I process

I process the data you give me in the contact form:

• Name.
• Email.
• Telephone number, if you choose to give it.
• Type of business.
• The service you are interested in.
• Timeframe, if you give one.
• Your message.

Fields marked with * are mandatory: without them I cannot deal with your enquiry.

In addition, when you submit the form, technical data such as your IP address, your browser and the page you are writing from are recorded, and the hosting service records connection data such as your IP address and the date of your visit.

What I use it for

• To read your enquiry and reply to you.
• If you ask me for a service, to prepare a proposal tailored to you.
• To protect the website and the form against spam and abuse.

Nothing else. I do not use your data for any other purpose.

Legal basis

Put simply, these are the legal grounds that allow me to process your data:

• If you ask me for a service, I process your data to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
• If you send me any other enquiry, I rely on my legitimate interest in replying to people who write to me (Article 6(1)(f) GDPR). You may object at any time.
• For security, the spam filter and the hosting service’s technical logs, I rely on my legitimate interest in keeping the website secure and free from abuse (Article 6(1)(f) GDPR).

The tick box on the form is only there to confirm that you have read this information.

How long I keep it

I keep your enquiry for 12 months from our last contact. After that, I delete it.

The hosting service’s technical logs and submissions marked as spam are kept for the period set by Netlify, and I delete them within the same 12-month period at the latest.

If we end up working together, your data becomes part of that relationship. In that case, I keep it for the periods required by law, for example tax and commercial law periods, and for as long as liabilities may arise.

Who else is involved

This website is hosted on Netlify, Inc., which also handles the form. Netlify acts as a data processor: it processes the data only to provide me with that service and on my instructions. Enquiries are stored in its dashboard. Enquiries also reach me by email in my enzo@stillroom.co mailbox, which is managed with Google Workspace (Google Ireland Ltd. / Google LLC), acting as a data processor. The person who provides me with technical maintenance for the website may also have access to them, only for that purpose and under a data processing agreement.

Netlify automatically runs all submissions from its forms through Akismet, an anti-spam filter from Automattic, Inc., which acts on Netlify’s behalf. The form also has a hidden trap field to stop automated submissions.

I do not pass your data to anyone else, unless I am required to by law.

International transfers

Netlify, Akismet and Google are based in the USA (or their parent company is), so your data may be processed there. According to its privacy policy, Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework. Google LLC is also certified under the EU-U.S. Data Privacy Framework. In addition, Netlify’s data processing agreement provides for the European Commission’s standard contractual clauses as an alternative safeguard. Akismet acts as a sub-processor of Netlify, which is responsible for the safeguards for that processing under the same agreement.

Your rights and how to exercise them

You have the right to:

• Find out what data of yours I hold (access).
• Have it corrected if it is wrong (rectification).
• Ask me to delete it (erasure).
• Object to my processing it (objection).
• Ask me to restrict its use (restriction).
• Receive it in a format you can take with you (portability).

To exercise them, email me at enzo@stillroom.co and tell me what you are asking for. I will only ask you to prove your identity if I have reasonable doubts that it is you. I will reply within one month, which may be extended in the cases provided for by the GDPR. It is free of charge.

Complaining to the AEPD

If you think I have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD). Even so, I would appreciate it if you told me first, so that I can try to put it right.

Security

The website runs over an encrypted connection (HTTPS). Access to the enquiries that arrive through the form is limited to what is needed to deal with them.

No profiling or advertising

I do not build profiles with your data or make automated decisions about you. The only automated process is the spam filter, which may flag a message as spam by mistake. If you do not receive a reply within a few days, email me directly at enzo@stillroom.co. Nor will I send you newsletters or commercial communications just because you wrote to me through the form.

Children

This website is not aimed at children under 14. If you are younger than that, please do not send me your data.

Changes

If anything changes in how I process your data, I will update this page. I suggest you take a look at it from time to time.