Privacy policy

When you write to me, you share some personal data. Here I explain what I do with it, in line with the General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 (LOPDGDD).

Who is responsible

Data controller

Guillem Sainz Baró

Tax ID (NIF)

49297637N

Address

Carrer de Pau Claris, 28, 08850 Gavà (Barcelona)

Email

hola@guillemsainz.com

What data I collect

• Contact form: your name, email or phone number, the service you need, the date and place (if you tell me) and your message.
• WhatsApp or email: whatever you choose to send me.
• If we work together: the details needed for the quote, the job and the invoice.

The website collects nothing else: no first-party cookies, no analytics and no tracking.

What I use it for

• To reply to your enquiry and send you a quote.
• If you hire me, to organise the job, invoice you and meet my tax obligations.

I won’t send you advertising or newsletters unless you ask. I don’t build profiles or make any automated decisions with your data.

Why I’m allowed to

• Your consent, which you give when you tick the box on the form. You can withdraw it whenever you like.
• Your request for a quote and, if we reach an agreement, the contract between us.
• Legal obligations, such as tax and accounting rules.

How long I keep it

If your enquiry doesn’t lead to a job, I delete your data within a year at most. If we work together, I keep it for as long as the job lasts and then for as long as the law requires. For invoices and accounting records, that is generally six years.

Who else can see it

I don’t share your data with anyone unless the law requires it. To run the website and my work, though, I use some external services that process it on my behalf:

• Web3Forms, which emails me what you write in the form.
• Google (Gmail), where I receive and keep emails.
• WhatsApp (Meta), if you message me there.
• YouTube (Google) and Instagram (Meta), only if you play one of their videos on the website.
• The website’s hosting provider, which stores the website on its servers.

Some of these services may have servers outside the European Economic Area, for example in the United States. In that case, the transfer is made with the safeguards provided by the GDPR, such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

Your rights

At any time, you can ask me to:

• show you what data I hold about you;
• correct or delete it;
• restrict how I use it or stop using it;
• give it to you in a format you can take elsewhere;
• withdraw your consent.

Just write to me at hola@guillemsainz.com. If I’m unsure who you are, I may ask you to prove your identity. I’ll reply within a month at most.

If you think I haven’t handled your data properly, you can file a complaint with the Spanish Data Protection Agency (aepd.es).

Minors

The form is for people aged 14 or over. If you’re younger, ask your mother, father or guardian to write to me.

Security and changes

I take reasonable measures to keep your data safe. If I change this policy, I’ll update this page and the date at the top.