← Back to homeBLANCO MÉNDEZ

Privacy policy

1. Controller

Xián Blanco Méndez, a self-employed professional. Contact for enquiries and privacy rights: hola@blancomendez.com. The contact address is provided in the legal notice.

2. Data, purposes and legal bases

Voluntary email enquiries: we receive your email address, your name or organisation if supplied, and any message or attachments you choose to provide. We use these to reply and, if requested, prepare a service proposal. Please do not send passwords or client personal information in an initial enquiry; use genuinely anonymous or synthetic examples.

  • If an individual requests steps before entering into a contract to which they would be a party, the legal basis for necessary information is GDPR Article 6(1)(b).
  • For professional company contacts and general correspondence initiated by the sender, the legal basis for these limited exchanges is our legitimate interests in handling that limited relationship (GDPR Article 6(1)(f); Spanish LOPDGDD Article 19 where applicable). This does not authorize unsolicited marketing.
  • When a contract or legal duty applies, necessary records are handled under the corresponding legal basis, including Article 6(1)(c) for identified legal obligations.

Providing information is voluntary. Without sufficient contact details we may be unable to respond. This site contains no contact forms, visitor accounts, payments, newsletter or automated decisions about visitors.

Technical access: website delivery and security may involve processing IP addresses, timestamps, requested resources and connection headers to serve and protect the website. This processing serves delivery and security on the basis of limited and proportionate legitimate interests.

3. Providers and international transfers

Professional email is managed through Google Workspace. The website is hosted by Cloudflare Pages. Providers and their subprocessors may process communications or technical access data to deliver these services.

These services may involve processing outside the European Economic Area, including in the United States. The providers’ agreements provide for international transfer mechanisms such as standard contractual clauses and, where applicable, adequacy decisions. The applicable safeguard depends on the specific transfer; we do not claim that all data remains in Europe.

You can read the Google data processing agreement and the Cloudflare data processing agreement, and request information or a copy of the applicable safeguards by emailing hola@blancomendez.com.

Porkbun manages the domain and forwarding to www.blancomendez.com. When you follow that redirect, it may process your IP address, requested hostname and path, referrer, browser and request timestamp to provide the service. Its data processing agreement describes this service and its transfer safeguards. Its privacy policy sets out retention criteria tied to service delivery and legal obligations.

4. Retention

Enquiries that do not lead to a contract are reviewed manually each month. Their data is erased or anonymised when no longer needed and no later than six months after the enquiry’s recorded closure.

Longer retention is limited to what is necessary for a legal obligation, contractual relationship or specific claim. Each exception is recorded and reviewed. Tax and contractual records follow their applicable statutory retention periods.

Technical data is retained only as necessary to deliver and protect the service, taking incident investigation and applicable obligations into account. We do not create our own visitor logs or export browsing logs. Cloudflare applies retention criteria based on service purposes, the nature of the data, security risks and legal obligations; you can read its privacy policy or request information using the contact above.

5. Your rights

You may request access, correction, erasure, restriction, objection and, where applicable, data portability by emailing hola@blancomendez.com. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. Identity checks will be proportionate, and requests will be handled within the applicable legal time limits. You may also lodge a complaint with the Spanish Data Protection Agency.

6. Cookies and external sites

This website’s code includes no analytics, behavioural advertising or cookies, and does not save visitor selections in local storage. External links open only when you choose to follow them; those sites have their own policies.

The hosting and security provider may use technical cookies depending on the enabled services. Any addition of these technologies requires disclosure of their purposes and durations. Technologies requiring consent will not be activated before consent is obtained.