Privacy policy

1. Data controller

Controller: [full name], an individual.

PATRICIA BARDEAU CONSULTING is the brand under which the controller presents her professional activity. It is not an incorporated company.

Tax identification: [Spanish NIF / NIE or Portuguese NIF, if applicable].

Address for notices: [postal address], [Spain or Portugal].

Contact email: [contact email].

2. Information processed

What you enter in the form: name, email address, company or project (optional) and your message.

The website language you used, the date of sending, the date you confirm you have read this policy and the policy version in force at that time are also stored.

To prevent automated and abusive submissions, an encrypted, irreversible technical fingerprint is calculated from the connection. The IP address is not stored and this fingerprint is deleted automatically after 24 hours.

If we continue the conversation by email, the messages we exchange will also be processed.

3. Purposes

To reply to your enquiry and, if you request it, arrange a first conversation and follow up on that potential professional relationship.

To protect the form against automated or abusive submissions.

Your data is not used for newsletters, advertising or automated marketing communications, and is not shared with third parties for those purposes.

4. Legal basis

Proposed legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) to reply to your enquiry, and legitimate interest (Art. 6(1)(f) GDPR) to protect the form against abuse. [Pending legal validation].

Ticking the box on the form means you have read and understood this policy. It is not consent to receive advertising: the website does not ask for that consent because it does not send marketing communications.

5. Service providers

Lovable: hosting of the website and its typefaces, the database where enquiries are stored, and sending an internal notice to the controller whenever an enquiry arrives. That notice contains none of your data. [Provider's legal name, country and safeguards, to be confirmed].

Google (Gmail): the controller receives the internal notices and replies to enquiries from a Gmail account, so your email address and the messages we exchange pass through that service. [Provider's safeguards, to be confirmed].

The website does not load resources from any other provider and uses no analytics or advertising tools.

6. Retention

Enquiries received: [retention period, for example up to 12 months from the last contact if no professional relationship begins; to be decided and validated]. They will then be deleted.

Anti-spam technical fingerprint: 24 hours.

7. International transfers

[To be confirmed based on where Lovable's and Google's servers are located and the safeguards that apply].

8. Your rights

You can request access to, correction or deletion of your data, as well as restriction of processing, objection and portability, by writing to [contact email].

You can also lodge a complaint with the supervisory authority: [AEPD (Spain) or CNPD (Portugal), depending on country of residence].

9. Security measures

Enquiries are stored in a private database that is not publicly accessible. Only the controller can view them. Communication with the website is encrypted (HTTPS).

10. Cookies

This website uses no tracking, analytics or advertising cookies, so no cookie notice is shown.