1. Scope of this policy
This Privacy Policy applies to the website jordiascensi.com and governs the processing of personal data collected through the contact form and through the technical operation of this site. It does not apply to any third-party websites that may be linked from this site.
2. What data is collected and why
2.1 Contact form
When you submit a message via the contact form, the following data is collected:
- Full name (required)
- Email address (required)
- Organisation name (optional)
- Service interest category (optional)
- Message content (required)
Purpose: To respond to your enquiry and, where relevant, to establish a professional relationship.
Legal basis: Article 6(1)(b) GDPR — processing necessary for the performance of pre-contractual steps taken at your request; and Article 6(1)(f) GDPR — the legitimate interest of responding to professional enquiries.
Processor: Form submissions are handled by Netlify Forms (Netlify Inc., 44 Montgomery Street, Suite 300, San Francisco, California 94104, USA). Netlify processes data under their Privacy Policy and is covered by standard contractual clauses for data transfers outside the EEA.
2.2 Technical cookies and local storage
This website uses only essential technical cookies and browser local storage strictly necessary for basic functionality:
- cookieConsent (localStorage): Records that you have acknowledged the cookie notice. No expiry; stored locally in your browser only. Not transmitted to any server.
No analytics, tracking, profiling, marketing, or social media cookies are used on this website. No third-party advertising scripts are loaded.
Legal basis: Essential technical cookies do not require consent under Recital 25 of the ePrivacy Directive. The optional notice is provided for transparency.
2.3 Server logs
Netlify, as the hosting provider, may automatically record standard web server log data (IP address, browser type, referring URL, date and time of access) for security and operational purposes. This data is retained by Netlify in accordance with their privacy policy and is not accessible to nor processed by the data controller for analytics or profiling purposes.
3. Data retention
Contact form submissions are retained for as long as necessary to respond to the enquiry and, where a professional engagement results, for the duration of that engagement plus any legally required retention period. Enquiries that do not result in an engagement are deleted within 12 months of the last communication.
4. Data sharing
Your personal data is not sold, rented, or otherwise shared with third parties for marketing purposes. Data may be disclosed to:
- Netlify Inc. — as the form processing and hosting provider, as described in section 2.1 above.
- Competent authorities — where required by law or to establish, exercise, or defend legal claims.
5. Your rights under GDPR
As a data subject you have the following rights regarding personal data processed by this website:
- Right of access (Article 15): You may request a copy of the personal data held about you.
- Right to rectification (Article 16): You may request correction of inaccurate data.
- Right to erasure (Article 17): You may request deletion of your data where there is no overriding legitimate interest or legal obligation to retain it.
- Right to restriction of processing (Article 18): You may request that processing be limited in certain circumstances.
- Right to object (Article 21): You may object to processing based on legitimate interests.
- Right to data portability (Article 20): You may request your data in a structured, machine-readable format where technically feasible.
To exercise any of these rights, contact: dpo@jordiascensi.com. Requests will be responded to within 30 days in accordance with Article 12 GDPR.
You also have the right to lodge a complaint with the relevant supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).
6. Security
This website is served over HTTPS. Form submissions are transmitted securely to Netlify. Reasonable technical and organisational measures are applied to protect personal data against unauthorised access, alteration, disclosure, or destruction.
7. Changes to this policy
This policy may be updated to reflect changes in legal requirements or in the operation of the website. The date at the top of this page indicates when the policy was last revised. Continued use of the site following a material change constitutes acceptance of the updated policy.
8. Contact
For any questions about this Privacy Policy or data processing practices: