This English version is a translation provided for convenience. In the event of any discrepancy between this version and the Spanish version, the Spanish version shall prevail.
Last updated: 29 September 2026.
This policy explains what personal data is processed on javiertoledano.com, why, and what your rights are under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).
1. Data controller
- Controller: Javier Toledano, a private individual resident in Spain.
- Tax ID (NIF): 52344458T
- Address: Madrigal de la Vera 7, 28044 Madrid, Spain. [REVISAR: street type and floor/door, if applicable]
- Email: info@javiertoledano.com
2. What data is processed and why
This website has no forms, user accounts, newsletters, analytics or advertising tools. Personal data is only processed in these cases:
- Emails you send to info@javiertoledano.com: your name, email address and whatever you include in your message. They are used to reply to you and, where relevant, to manage the partnership you propose. Legal basis: legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR) and, if the partnership goes ahead, steps prior to entering into a contract or the performance of a contract (Art. 6(1)(b) GDPR).
- Technical connection data: the hosting provider automatically records your IP address, the date and time and the page requested in its server logs. This is used to keep the website secure and working. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
3. How long data is kept
- Emails: for as long as the conversation or partnership lasts and, afterwards, for any legally required periods (for example, tax obligations if invoices are issued).
- Server logs: for a short period, depending on the hosting provider’s settings. [REVISAR: confirm log retention period with BanaHosting]
4. Recipients and international transfers
Data is not shared with third parties unless required by law. The website relies on this provider, which processes data on the controller’s behalf:
- BanaHosting: web hosting and email. Its servers are located in the United States, so data is transferred outside the EU. This transfer is covered by the safeguards provided for in the GDPR, such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework, as applicable. [REVISAR: confirm BanaHosting’s data processing agreement and the safeguard that applies]
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to info@javiertoledano.com. You will receive a reply within one month at the latest.
If you believe your rights have not been properly respected, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority in your country.
6. Security
The website always uses an encrypted connection (HTTPS), and access to its administration area is protected and limited against unauthorised login attempts.
7. Changes to this policy
This policy may be updated. The version in force is always the one published on this page, with its update date.