Privacy policy

The contact form may process your name, email address, project type, approximate location, approximate date, message and form language. Project type, location and date are optional.

Direct communications may include your email address, name, message and any information you voluntarily provide.

Technical providers may process data necessary to deliver and secure the website, including IP address, access date and time, browser, device, requested page and technical logs used to prevent abuse and resolve incidents.

Please do not include particularly sensitive or confidential information, or third-party data, unless it is necessary for the enquiry.

Data is not used for newsletters, advertising, profiling, sale or commercial disclosure, or automated marketing.

Enquiries and possible projects: taking pre-contractual steps requested by the person concerned and managing an enquiry submitted voluntarily.

Security and operation: legitimate interest in maintaining the security, availability and integrity of the website, preventing abuse and resolving incidents.

Legal obligations: compliance with applicable legal duties. Reading this policy is not treated as authorisation for commercial communications.

Data is not sold or disclosed for commercial purposes. Where necessary, it may be accessed by Netlify, which provides hosting and form processing; Hostalia, which provides email and domain registration; and professional or technical providers subject to confidentiality duties.

Responses submitted through Netlify Forms may be stored in the form dashboard and sent as a notification to the professional email account. Data may also be disclosed to public authorities or courts where legally required.

Netlify has infrastructure and entities that may involve processing outside the European Economic Area. International transfers must use safeguards recognised under applicable data protection law.

Netlify describes contractual safeguards, including Standard Contractual Clauses where applicable. The provider’s privacy and data-processing documentation is available online.

Video thumbnails are hosted locally. YouTube does not load when a page opens: the player is created only when a visitor presses play and uses privacy-enhanced mode through youtube-nocookie.com.

When a video is played, the browser connects to YouTube. Google may receive technical data and use cookies or other storage under its own policies. Privacy-enhanced mode does not mean that all processing is eliminated. You can avoid the connection by not playing the video.

You may request access, rectification, erasure, restriction, objection and portability where applicable by emailing info@cedricsierras.com. Only information necessary to verify identity will be requested where there is reasonable doubt.

You may also lodge a complaint with the Agencia Española de Protección de Datos, the Spanish data protection authority.

Reasonable technical and organisational measures are applied to protect data and restrict unauthorised access. No system can guarantee absolute security.

The website and its professional contact forms are not specifically directed at children. Children’s data should not be submitted without the legally required involvement and authorisation.

This policy may be updated when the website, providers, forms, legal obligations or processing purposes change. The update date will remain visible at the beginning of the page.