Privacy and cookies policy

• Controller: Joan Sanfeliu Vilarrasa
• Tax ID (NIF): 79279716G
• Address: Barcelona, Spain
• Contact email: me@joansanfeliu.com

The Website has no forms, no sign-up and no user area: browsing it requires no data from you. Data is only processed when you make contact:

• Email: the name, address and content of the message you send to me@joansanfeliu.com.
• Call booking: the name, email and time slot you provide in the Cal.com booking calendar linked from the Website (cal.com). They are only processed if you open the calendar and book.
• Technical logs: the hosting provider keeps server logs (IP address, date and time, requested page, browser type) for security and operational purposes.

• Answering your enquiry and holding the conversation prior to a possible engagement — basis: pre-contractual measures taken at your request (art. 6.1.b GDPR).
• Managing and performing the professional relationship if we end up working together — basis: performance of a contract (art. 6.1.b GDPR).
• Keeping the Website secure and available — basis: legitimate interest of the controller (art. 6.1.f GDPR).
• Complying with legal, accounting and tax obligations — basis: compliance with a legal obligation (art. 6.1.c GDPR).

No automated decision-making or profiling takes place, and no commercial messages are sent to anyone who has not requested them.

Conversations that do not lead to an engagement are kept for as long as there may be mutual interest and, at most, one year from the last contact. Where a professional relationship exists, data is kept for its duration and thereafter for the applicable limitation periods (up to six years for commercial and tax records). Server logs are kept for the period set by the hosting provider.

No data is shared with third parties except where legally required. Some providers do act as processors, or receive data when you choose that contact channel:

• Amazon Web Services — hosting of the Website (servers in the European Union).
• Google — email, if you write to me@joansanfeliu.com.
• Cal.com, Inc. (USA) — booking calendar linked at cal.com. It only processes data if you open the calendar and book a call. Transfers to the USA rely on the EU-US Data Privacy Framework and, as a fallback, on standard contractual clauses.

Where a provider processes data outside the European Economic Area, it does so under European Commission adequacy decisions or standard contractual clauses.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to me@joansanfeliu.com, stating which right you wish to exercise. A reply is issued within one month.

If you believe the processing is not correct, you may lodge a complaint with the Catalan Data Protection Authority (apdcat.gencat.cat) or the Spanish Data Protection Agency (www.aepd.es).

This Website uses no cookies. None of its own, none from third parties, no tracking pixels, no analytics tools and no behavioural advertising. Nor does it embed third-party video players, maps or widgets that could install them: links to YouTube, LinkedIn or other services open that site in a new tab.

The Website’s fonts are self-hosted: loading the page makes no request to Google or to any other external server.

That is why you will see no cookie consent banner: there is nothing to consent to. Should any cookie be introduced in the future, this policy would be updated and the prior consent required by article 22.2 LSSI-CE would be requested.

Once you leave the Website for a third-party service, that service’s own cookie and privacy policies apply.

The Website is always served over an encrypted connection (HTTPS) and reasonable technical and organisational measures are applied to protect information. The Website is not aimed at children under fourteen and no data from minors is knowingly collected.

This policy may be updated to reflect regulatory changes or changes to the Website itself. The version in force is always the one published on this page, bearing the last-updated date shown above.