Privacy policy

This policy explains how the personal data of people who visit aitormurillo.com or contact its owner is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

Data controller

• Controller: Aitor Murillo Ramírez
• Tax ID (NIF): 77615359L
• Address: Taulat 59, 1.º, 08005 Barcelona, Spain
• Email: aitor@martillo.studio

What data is processed

This website has no forms, user accounts or newsletter. Only the following data is processed:

• Data you send by email: if you write to aitor@martillo.studio, your name, email address and any other information included in your message or attachments are processed.
• Browsing data: when you visit the website, the server and technical providers automatically receive data such as your IP address, browser type, device and the pages you visit.
• Analytics data: only if you accept analytics cookies, Google Analytics collects information about how you use the website. See the Cookie Policy for details.

Purposes and legal basis

• Replying to your messages and handling possible collaborations or quotes. Legal basis: taking steps at your request before entering into a contract, or performing a contract (Art. 6.1.b GDPR) and, for general enquiries, the legitimate interest in answering the messages received (Art. 6.1.f GDPR).
• Serving the website and keeping it secure. Legal basis: the legitimate interest in offering a website that works properly and is secure (Art. 6.1.f GDPR).
• Analysing how the website is used in order to improve it. Legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time from the cookie settings.

How long data is kept

• Emails: for as long as needed to handle your enquiry and, if a professional relationship begins, for its duration and for the periods required by tax and commercial law.
• Browsing data: for the period set by the technical providers for security purposes, usually short.
• Analytics data: 14 months, according to the Google Analytics settings.

Recipients and providers

No data is disclosed to third parties unless required by law. The website relies on providers that may process data on behalf of the controller:

• Netlify, Inc. (web hosting), United States.
• Sanity AS (content management and image delivery), Norway, with infrastructure that may be located outside the European Economic Area.
• Vimeo.com, Inc. and Mux, Inc. (video delivery), United States.
• Google Ireland Limited (Google Analytics), with possible transfers to Google LLC, United States.
• The email provider used for the aitor@martillo.studio account.

International transfers

Some of these providers may process data outside the European Economic Area, mainly in the United States. These transfers are covered by the EU-US Data Privacy Framework where the provider is certified or, otherwise, by the standard contractual clauses approved by the European Commission.

Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent given, by writing to aitor@martillo.studio. Please state which right you wish to exercise; you may be asked for information to verify your identity if necessary.

If you believe your data has not been processed correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

Appropriate technical and organisational measures are applied to protect personal data, such as encrypted HTTPS connections.

Changes to this policy

This policy may be updated to reflect changes in the law or the website. The date of the last update appears at the top of the text.