Privacy policy

1. Data controller

The controller for personal data processed through this website is Eulogio Albalat, based at Pazo de Souto, Begonte, Lugo, Spain. Contact: hello@eulogioalbalat.com.

2. Data we process and why

When you use the contact form, we process your name, email address, inquiry type, message, and the technical data needed to deliver it. We use this information solely to answer your request and manage any relationship that follows from it.

The hosting and content-delivery service may process IP address, request time and path, browser or device information, and security indicators needed to deliver and protect the website. These technical logs are not used by the controller for advertising profiles.

If you consent to analytics, Google Analytics and Cloudflare Web Analytics may process online identifiers, device and browser information, approximate location, and usage data. If you consent to external content, YouTube, Spotify, or Apple Music may receive your IP address, browser details, and interaction data when their thumbnails or players load.

3. Legal bases

Contact requests are processed to take steps at your request before entering into a contract and, for general inquiries, on our legitimate interest in responding. Technical delivery and security logs are processed on the legitimate interest in providing a reliable, secure website. Analytics and external media are processed only with your consent. You may withdraw consent at any time through “Cookie settings” on the privacy or cookie-policy page, without affecting prior lawful processing.

4. Service providers and transfers

Form submissions are delivered by Web3Forms. The site is hosted on Cloudflare Pages. Subject to your choices, it may also use Google Analytics and YouTube, Cloudflare Web Analytics, Spotify, and Apple Music. Some providers may process data outside the European Economic Area. Where applicable, the transfer must be covered by an adequacy decision, the EU–US Data Privacy Framework, or European Commission Standard Contractual Clauses. You may request information about the safeguard used for a particular transfer by emailing the controller.

5. Retention

Inquiries that do not lead to a contractual relationship are deleted no later than 12 months after the last exchange. If a relationship follows, the records needed for that relationship and for legal claims are retained for the applicable statutory periods. Hosting and security logs are retained only for the period required by the host's documented security and operational settings. Consent choices remain in your browser for no more than 24 months, unless you clear them or this policy version changes earlier. Analytics retention is controlled in each provider account and must match the documented internal retention schedule.

6. Your rights

You may request access, rectification, erasure, restriction, portability, or object to processing, and you may withdraw consent at any time. Send your request to hello@eulogioalbalat.com. We may ask for information necessary to verify your identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

7. Required information and automated decisions

Name, email address, and a message are required to submit the form; without them we cannot answer the inquiry. Providing other information is voluntary. The website does not make automated decisions or create profiles that produce legal or similarly significant effects.

8. Security and changes

We use proportionate technical and organisational safeguards, but no internet transmission is completely risk-free. We may update this policy when the website or legal requirements change; the revision date above identifies the current version.