Access
To know what data of yours I hold.
Privacy policy
What I do with your data
Last updated: 26 October 2026
This is a simple website and it collects very little. Here is exactly what I collect, what for, and what you can ask me to do about it.
1 · Who is responsible
| Controller | Arantxa Asenjo Acebo |
|---|---|
| Tax ID (NIF) | 51461162L |
| Address | Els Lliris, Puig de Misa · 07840 Santa Eulària des Riu, Illes Balears, Spain |
| Profession | Technical architect · Reg. No. 386, Official Association of Technical Architects and Building Engineers of Eivissa and Formentera (COAATEEEF) |
| info@aranasenjo.com | |
| Phone | +34 669 079 433 |
2 · What I collect
Two things only, and neither of them quietly:
If you write to me through the form
I collect what you type: name, email address, phone (optional) and your message. Nothing else. There are no hidden fields except one empty box used to catch spam robots, which you neither see nor fill in.
When you visit the site
The server hosting the site records the IP address each form submission comes from, along with the date and time. It is an automatic technical log, used to prevent spam and abuse.
I do not use cookies. None of my own, none from third parties. There is no analytics, no advertising pixel and no embedded social media. That is why this site never asks you to accept anything on arrival.
3 · What I use it for, and on what legal basis
| Replying to you | To answer your enquiry and, if there is interest, prepare a quote. Legal basis: your own request, as a step prior to a possible contract (Art. 6.1.b GDPR). |
|---|---|
| Security and anti-spam | To keep the form from filling up with junk. Legal basis: my legitimate interest in a working website (Art. 6.1.f GDPR). |
| Legal obligations | If we end up working together, invoicing and technical records carry their own statutory retention periods. |
I do not send you marketing, I do not add you to any mailing list, and I do not sell or pass your details to anyone so they can sell you something.
4 · How long I keep it
If your enquiry goes no further, I delete the message one year after our last exchange. If we do work together, the project records are kept for the duration of the engagement and afterwards for as long as tax obligations and professional liability require. And if you ask me to delete them sooner, I delete them.
5 · Who else sees it
Nobody receives your data for their own purposes. Two companies do process it on my behalf, because they host the website and the email:
| Netlify | Hosts the website and receives the form messages. A US company. |
|---|---|
| Provides the info@aranasenjo.com mailbox through Google Workspace. A US company. | |
| Google Fonts | The site loads its typeface from Google's servers, which therefore receive your IP address when the page opens. |
That means a transfer of data to the United States. Both companies are certified under the EU–US Data Privacy Framework and apply the standard contractual clauses approved by the European Commission.
6 · What you can ask me for
Everything the law gives you, and I comply without asking why:
Rectification
To correct anything that is wrong.
Erasure
To have it deleted.
Objection and restriction
To stop me using it, or to have it kept without being used.
Portability
To be given it in a file you can take elsewhere.
For any of these, write to info@aranasenjo.com saying what you want. I reply within one month at the latest.
If you think I have not handled it properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, or to the supervisory authority in your own country.
7 · Security
The site always runs over an encrypted connection (HTTPS) and has the usual security headers enabled. The email sits in Google Workspace. No system is infallible, but I do not keep your data in improvised places or carry it around.
8 · Changes
If any of this changes, I update the date above. If the change is significant and I have a way of telling you, I will.