This policy explains what personal data jmassena.com processes, why, and what rights you have. This is a personal website: it has no user accounts, no shop and no contact forms.
Who is responsible
José Pedro Massena Lindo, Madrid, Spain. For anything related to your data, write to [email protected].
What I process and why
When you email me
Your email address, your name and whatever you choose to write. I use it only to reply. The legal basis is my legitimate interest in answering messages you send me (Article 6(1)(f) GDPR) or, if you write about a role or a workshop, taking steps before a possible contract (Article 6(1)(b)).
Analytics, only if you accept
If you accept analytics cookies in the cookie banner, Google Analytics 4 records how the site is used: pages visited, clicks on contact and outbound links, device and browser type, and approximate location. I use it in aggregate to understand which pages are useful. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time with “Cookie settings” at the bottom of every page. If you don’t accept, no analytics cookies are set; Google may still receive an anonymous, cookieless signal that a page was viewed (Google Consent Mode), with no identifier that could link it to you.
Server logs
My hosting provider records technical data for every request (IP address, browser, date and time, page requested) to keep the site secure and working. The legal basis is legitimate interest in the security of the site.
Fonts
Fonts are served from this website. Your browser does not contact Google Fonts or any other font service.
Links to other services
The site links to LinkedIn, ProductPulse and urbanrace.io. When you follow a link, the privacy policy of that service applies.
Who receives the data
- My hosting provider, which stores the site and its server logs on my behalf.
- Google, for analytics, only if you accept analytics cookies.
Google may process data in the United States. Those transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses.
How long I keep it
- Emails: while the conversation needs it, and no longer than two years after our last contact.
- Analytics: no longer than 14 months.
- Server logs: according to my hosting provider’s retention schedule.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time. Write to [email protected]; I answer within one month.
You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
Changes
If this policy changes, the date at the top changes with it.