This Privacy Policy is intended to inform users of the davidalvarezp.com website about how their personal data is collected, used, stored and protected, as well as the rights they have in relation to such processing.
Personal data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), and any other applicable legislation.
1. Data Controller
The data controller responsible for processing personal data collected through this website is:
- Data Controller: David Álvarez Pampillón.
- Website: https://davidalvarezp.com
- Domain: davidalvarezp.com
- Email address: [email protected]
The Data Controller determines the purposes and means of processing personal data carried out through this website.
2. Scope of Application
This policy applies to personal data that may be collected through:
- Communications sent by email.
- Browsing and use of the website.
- Technologies used by the website to store and access information, including cookies.
- Third-party services integrated into the website, where they involve the processing of personal data.
This policy does not apply to external websites, platforms or services that users may access through links published on davidalvarezp.com. Such services have their own privacy policies.
3. Personal Data That May Be Collected
Depending on how users interact with the website, the following categories of personal data may be processed:
3.1. Data Voluntarily Provided by Users
When users contact the Data Controller by email, the following information may be processed:
- First and last name, if provided.
- Email address.
- Message content and related communications.
- Any other information voluntarily included by the user.
Users are responsible for avoiding the submission of unnecessary personal information or special categories of personal data, unless strictly necessary and supported by an appropriate legal basis.
3.2. Technical Browsing Data
While users browse the website, servers and infrastructure providers may record technical information necessary to provide the service and ensure its security.
This information may include:
- IP address.
- Date and time of requests.
- Addresses of the requested pages.
- Browser and operating system information.
- Technical information about the device.
- Records of errors, access attempts and security events.
This data is primarily used to ensure the proper operation, maintenance, troubleshooting and security of the website.
3.3. Statistical and Analytics Data
When users expressly accept analytical cookies, the website may collect statistical information about how it is used.
This information may include pages visited, session duration, interactions, traffic sources, browser information and other browsing indicators.
This data may be processed through Google Analytics, in accordance with the service configuration and the user's consent preferences.
4. Purposes and Legal Bases for Processing
Personal data will only be processed where there is a lawful basis for doing so, in accordance with Article 6 of the GDPR.
4.1. Handling Enquiries and Communications
Data provided by email will be used to receive, manage and respond to enquiries, requests for information and other communications.
The legal basis will be the implementation of pre-contractual measures at the data subject's request when the communication relates to the potential engagement of services, or the legitimate interests of the Data Controller in receiving and handling general communications.
4.2. Website Operation and Security
Technical browsing data may be used to:
- Maintain the availability and operation of the website.
- Detect and resolve technical errors.
- Prevent unauthorised access and malicious activity.
- Investigate security incidents.
- Protect the integrity of systems and services.
The legal basis will be the legitimate interest of the Data Controller in maintaining the security, stability and availability of the technological infrastructure.
4.3. Website Usage Statistics and Analytics
Where users have given their consent, analytical tools may be used to obtain statistics on website usage and improve its content, functionality and browsing experience.
The legal basis will be the user's consent, which may be withdrawn at any time.
4.4. Compliance with Legal Obligations
Data may be processed where necessary to comply with legal obligations applicable to the Data Controller, including tax, administrative or judicial obligations, where relevant.
The legal basis will be compliance with a legal obligation, pursuant to Article 6(1)(c) of the GDPR.
5. Whether Providing Data Is Mandatory or Voluntary
Browsing the website does not require users to directly provide personal data.
If users contact the Data Controller by email, the information required to respond will be limited to the data necessary to identify the communication and provide an appropriate reply.
Refusing to provide such information may prevent the request from being properly handled.
Accepting analytical cookies is voluntary and does not affect access to the website's content.
6. Data Retention
Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and, subsequently, for the periods required by applicable legal obligations or necessary to address potential liabilities.
- Email communications:for as long as necessary to handle and respond to the enquiry. Afterwards, the data may be retained under restriction for the applicable statutory limitation periods, where necessary.
- Technical logs:for the period necessary to ensure security, diagnose incidents and maintain the service, in accordance with the infrastructure configuration.
- Analytics data:for the period configured in the relevant analytics tool and in accordance with the user's consent preferences.
Once the applicable retention periods have expired, the data will be securely deleted or anonymised, unless a legal obligation requires it to be retained.
7. Recipients and Service Providers
As a general rule, personal data is not sold, rented or disclosed to third parties for their own commercial purposes.
However, certain technology providers may access personal data where necessary to provide services related to the operation and maintenance of the website.
7.1. Hosting and Infrastructure Providers
Providers responsible for hosting, storage, infrastructure, security or technical maintenance of the website may process technical data and browsing logs to the extent necessary to provide their services.
Where such providers act as data processors, the appropriate safeguards and agreements must be in place in accordance with Article 28 of the GDPR.
7.2. Google Analytics
The website may use Google Analytics, a web analytics service provided by Google, to obtain statistics about website usage.
Its use will be subject to users' prior acceptance of analytical cookies.
Google may process information relating to browsing activity in accordance with the service terms and the privacy and analytics settings established by the Data Controller.
You can find more information about Google's privacy practices at:https://policies.google.com/privacy.
7.3. Google Tag Manager
The website may use Google Tag Manager to manage tags and tools integrated into the website.
Google Tag Manager is a tag management system. The tools loaded through this service will depend on the configuration of the relevant container.
The configuration must ensure that tags requiring consent are not executed before users have granted the relevant authorisation.
More information:Google's Privacy Policy.
8. International Data Transfers
Some technology providers used by the website may be established outside the European Economic Area or use infrastructure located in third countries.
If international transfers of personal data take place, they will only be carried out where a valid transfer mechanism exists under Chapter V of the GDPR.
Possible safeguards include adequacy decisions adopted by the European Commission, standard contractual clauses or other legally recognised mechanisms, where applicable.
Specific information about destination countries and the safeguards used will depend on the providers and the actual configuration of the services.
9. Users' Rights
Any individual whose personal data is processed may exercise the rights recognised under the GDPR and the LOPDGDD.
- Right of access:to find out whether personal data is being processed and obtain information about such processing.
- Right to rectification:to request the correction of inaccurate or incomplete personal data.
- Right to erasure:to request the deletion of personal data where the legally established requirements are met.
- Right to object:to object to certain types of personal data processing where the legal requirements for exercising this right are met.
- Right to restriction of processing:to request the temporary restriction of processing in the circumstances provided for by law.
- Right to data portability:to receive the personal data provided in a structured, commonly used and machine-readable format, where this right applies.
- Right to withdraw consent:to withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, users may send a request to:
The request should specify the right the user wishes to exercise and provide the information necessary to process it. Where there are reasonable doubts about the identity of the applicant, additional information may be requested to verify their identity, in accordance with applicable legislation.
The Data Controller will respond to requests within the time limits established by the GDPR, generally within one month of receipt. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests.
10. Complaints to the Supervisory Authority
If users believe that the processing of their personal data does not comply with applicable legislation, they have the right to lodge a complaint with the competent supervisory authority.
In Spain, the competent supervisory authority is the Spanish Data Protection Agency (AEPD).
Website:https://www.aepd.es/.
11. Security and Confidentiality
The Data Controller implements reasonable technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorised access, taking into account the nature of the data, the risks associated with processing and the state of the art.
These measures may include access controls, infrastructure protection, security updates, monitoring mechanisms and other measures designed to preserve the confidentiality, integrity and availability of information.
However, no information transmission or storage system can guarantee absolute security.
12. Children's Personal Data
This website is not specifically intended for children and does not intentionally request personal data from minors.
Where the processing is based on a minor's consent for information society services, the provisions of Article 7 of the LOPDGDD and the relevant applicable legislation will apply.
If it is discovered that personal data belonging to minors has been collected without the necessary authorisation or legal basis, appropriate measures will be taken to delete such data.
13. Links to Third-Party Websites
The website may include links to external platforms, services and websites, including technical resources, documentation, repositories and professional networks.
The Data Controller does not control the privacy policies, data processing practices or security measures of such external websites.
Users are advised to review the relevant privacy policies before providing personal information or using those services.
14. Marketing Communications
This website does not provide a newsletter subscription system and does not use contact details to send unsolicited marketing communications.
Communications received by email will be used to handle the enquiry or request that prompted the contact.
Any future use of personal data for additional purposes will require an appropriate legal basis and the relevant information to be provided to users.
15. Changes to This Privacy Policy
The Data Controller reserves the right to amend this Privacy Policy to reflect changes in legislation, technology or the operation of the website.
Where significant changes are made, the content published on this page will be updated, including the date of its latest revision.
Users are advised to review this policy periodically to stay informed about how their personal data is processed.
16. Contact
For any enquiries relating to this Privacy Policy or the processing of personal data, you can contact the Data Controller using the following email address: