Privacy policy

1. Data controller

• Controller: Carlos Gálvez Carrillo
• Tax ID: 49080222Q
• Address: Calle Museo 4, 21840 Niebla (Huelva)
• Contact: hola@carlosgcstudio.com

2. What we collect

The contact form collects your name, email, phone (if provided), business name and message. The speed tester records the web address analysed and its score, with no personal data attached.

3. Why we use it

• To answer enquiries and manage the relationship with you.
• To send the information you request about our services.
• To improve the service using aggregated usage data.

No automated decision-making or profiling takes place, and your data is never used to send unsolicited marketing.

4. Legal basis

Processing is based on your consent, given by ticking the acceptance box, and on legitimate interest in responding to commercial enquiries.

5. Retention

Data is kept for as long as needed to handle your request and for any legally required periods. You may request deletion at any time.

6. Recipients and processors

Data is not shared with third parties except where legally required. The following providers act as data processors:

• Cloudflare, Inc. — website hosting and content delivery.
• Supabase, Inc. — database storing the contact form messages.
• Google Ireland Ltd. — email and the PageSpeed Insights API behind the speed tester.

Some of these providers are located outside the European Economic Area. Transfers rely on the Standard Contractual Clauses approved by the European Commission and on the EU-US Data Privacy Framework.

7. Security

The whole site is served over HTTPS and the database is protected by access policies that make the messages received unreadable to the public.

8. Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to hola@carlosgcstudio.com. You may also complain to the Spanish Data Protection Agency (aepd.es).