Legal
Privacy Policy
Last updated August 14, 2026
Who's responsible for your data
This site (pablogarciaruiz.com) is run by Pablo García Ruiz, an individual based in Córdoba, Spain. For anything relating to this policy, or to exercise any of the rights below, contactpabgarudev@gmail.com.
What's collected, and why
| What | When | Why | Legal basis |
|---|---|---|---|
| Name, email address, and message content | You submit the contact form | To read and reply to your message | Art. 6(1)(b) — steps taken at your request before/instead of a contract |
| Anonymous, aggregated page-visit data | You browse the site | To understand which pages get read and fix what doesn't work | Art. 6(1)(f) — legitimate interest in a functioning site |
The contact form has no separate consent checkbox, because submitting it is itself the affirmative act that gives permission to process what you typed. Your details are never added to a mailing list, and there's no marketing use of anything you send.
Who else sees it
Two processors, both acting only on instructions from this site, neither reusing your data for their own purposes:
- Resend — delivers the contact form's email to my inbox. It temporarily handles the message content to send it; it isn't stored in a Resend-hosted database beyond that.
- Vercel — hosts the site and runs Vercel Web Analytics, a cookieless analytics tool that doesn't use tracking identifiers and can't follow you to other sites. It reports aggregated counts (which pages, how many visits), not individual visitor profiles.
Your data is never sold, and never shared with anyone beyond these two processors.
Cookies
This site doesn't set any cookies of its own. The only third-party script is Vercel Web Analytics, which by design collects no cookies and no persistent identifiers, so no cookie consent banner is used here — there's nothing that needs your consent under the ePrivacy rules that trigger one.
How long it's kept
Contact-form messages are kept only as long as needed to answer you and for a reasonable period after in case you follow up, normally no more than 12 months, then deleted. Analytics data is aggregated and not tied to you individually, so no per-visitor retention period applies.
Your rights
Under the GDPR, you can ask to:
- Access the data held about you
- Correct anything inaccurate
- Delete it
- Restrict or object to how it's used
- Receive a copy in a portable format
Email pabgarudev@gmail.com for any of these. If you're not satisfied with the response, you can lodge a complaint with Spain's data protection authority, theAgencia Española de Protección de Datos (AEPD).
Changes to this policy
If what's collected or how it's used changes, this page will be updated and the date at the top will move.