Last updated: 13 October 2026
This English version is provided for convenience. In case of any discrepancy, the Spanish version prevails.
This policy explains what personal data is processed when you visit this website or send an email, for what purpose, and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Controller
- Alejandro Plata Peláez
- Tax ID (NIF)
- [PENDING: NIF]
- Address
- Granada, Spain
- alejandroplatapelaez@gmail.com
- Website
- www.alejandroplata.com
2. What data is processed
This website has no forms, user registration, private area, shop or comments, and uses no analytics, advertising or tracking tools. The processing that takes place is as follows.
2.1. When you send an email
If you get in touch using the email address published on the website, the data you include in your message is processed: at least your email address and, where applicable, your name, the content of your message and any attachments.
- Purpose: to answer your enquiry and, where applicable, to manage the professional collaboration you propose.
- Legal basis: your consent, given when you write (art. 6.1.a GDPR), and, where your enquiry concerns a potential collaboration, taking steps at your request prior to entering into a contract (art. 6.1.b GDPR).
- Retention: if no collaboration results from your message, the email is kept for as long as the conversation lasts and deleted no later than one year afterwards. If a collaboration results, it is kept for as long as the collaboration lasts and then for the periods required by law, for example for tax purposes.
- Email provider: the contact address is a Gmail account, so messages are stored on Google’s servers, with Google acting as the email service provider.
2.2. When you browse the website
To display the website, your browser connects to the servers of the providers that deliver it. As with any internet connection, those servers receive your IP address and technical data about the request, such as the file requested, the date and time or the browser type. These providers are:
- Vercel Inc., which hosts the website, including the typeface, which is served from the website’s own domain.
- Cloudflare, Inc., which delivers the project images and videos through its Cloudflare R2 service.
In both cases:
- Purpose: to allow the website to load and display correctly.
- Legal basis: the owner’s legitimate interest in providing and maintaining the website (art. 6.1.f GDPR).
- Retention: any technical logs these providers may generate are kept for the period each of them sets in its policy.
The owner does not use this data to identify visitors or to build profiles.
2.3. Links to social networks
The links to Instagram and LinkedIn are plain links: no content from those platforms is loaded until you click on them. From that moment on, the processing of your data is governed by each platform’s privacy policy.
3. Recipients and international transfers
No data is disclosed to third parties unless required by law. The providers mentioned in the previous section process data only to the extent necessary to provide their services.
Vercel, Cloudflare and Google are companies based in the United States, so international data transfers may take place. These transfers are covered by each provider’s certification under the EU-U.S. Data Privacy Framework and/or by the standard contractual clauses approved by the European Commission, as each of them states in its privacy policy: Vercel, Cloudflare and Google.
4. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw at any time any consent you have given where processing is based on it, by writing to alejandroplatapelaez@gmail.com. Please state in the subject line which right you wish to exercise. If necessary to verify your identity, you may be asked for additional information.
If you consider that the processing of your data does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
5. Security
The website is served exclusively over an encrypted connection (HTTPS).
6. Changes to this policy
This policy will be updated if the processing described changes, for example if new tools or services are added. The date of the last update appears at the top of the page. The use of cookies is explained in the cookie policy.