Privacy policy
This is a personal, static website: it sells nothing, has no user accounts, shows no advertising and uses no analytics or tracking cookies. Even so, hosting a website involves processing some personal data, and this page explains which data, what for, and on what legal basis.
Layer one — summary
| Who processes your data? | Daniel Jesús Martín Flores, Cáceres (Spain). Contact: danieljesusmartinflores@gmail.com |
|---|---|
| What data? | The IP address and technical details automatically logged by the server that hosts the site, and the content of any email you choose to send me. |
| What for? | Serving the site, keeping it available and protected against abuse, and replying to your messages. |
| On what legal basis? | My legitimate interest (Art. 6(1)(f) GDPR) in keeping the site working and secure, and in being able to reply to you. |
| Who receives it? | The providers of web hosting (GoDaddy) and email (Google). It is shared with no one else, never sold, and never used for advertising. |
| For how long? | Server logs, the current month and the previous one (they are archived monthly and the previous month's archive is deleted at the end of each month). Emails, for as long as the exchange lasts plus the time needed to evidence it. |
| What are your rights? | Access, rectification, erasure, objection, restriction of processing and portability, plus the right to lodge a complaint with the Spanish Data Protection Agency (AEPD). |
| Where to read more? | In the detail below this table. |
Layer two — detailed information
1. Controller
Daniel Jesús Martín Flores, based in Cáceres (Spain). You can write to danieljesusmartinflores@gmail.com about anything related to this policy or to your data. Appointing a data protection officer is not mandatory here and none has been appointed.
2. What data I process, what for, and on what legal basis
2.1. Server access logs
The server hosting this site automatically logs every request: IP address, date and time, resource requested, response code, amount of data transferred, browser user agent and, where present, the referring page.
Purpose: delivering the pages you request, diagnosing errors, and detecting and stopping abuse (automated scanning, intrusion attempts, traffic that degrades the service).
Legal basis: legitimate interest (Art. 6(1)(f) GDPR). That legitimate interest is keeping the site available, intact and secure; without these logs there is no way to tell a genuine fault from an attack. It is minimal and unavoidable processing on any web server, the data is not combined with any other source, it is never used for profiling or advertising, and it is not consulted except in response to an incident.
Processor: GoDaddy, the hosting provider, processes these logs on my behalf under the corresponding data processing agreement.
Retention: the logs are generated and rotated by the hosting provider; they are archived monthly in the site's storage and the previous month's archive is deleted automatically at the end of each month, so at most the current and the previous month are kept. The provider may keep copies in its own systems under its data processing agreement.
2.2. Preferences stored in your browser
When you change the language (Spanish or English), the theme (light or dark), or turn the console's CRT effect on or off, that choice is stored in your own browser's local storage (localStorage) so that your next visit respects what you chose.
This information is stored only when you make the change, stays on your device, is never sent to any server, is not shared with anyone and cannot identify you. These are interface personalisation preferences that you expressly requested, exempt from the prior consent requirement of Art. 22.2 of Spanish Law 34/2002 (LSSI). You can delete them at any time by clearing the site's data in your browser.
The site sets no first-party or third-party cookies for analytics, measurement, advertising or tracking, and embeds no pixels, social buttons or third-party scripts.
2.3. Technical cookie from the hosting firewall
On a normal visit the site sets no cookies at all. Only if the hosting provider's anti-fraud system deems the traffic suspicious (for instance, connections from data-centre networks or an automated request rate) does it interpose a browser check and may then set a strictly technical cookie to remember that the check was passed. It is necessary to provide the service and is likewise exempt from the consent requirement of Art. 22.2 LSSI. It is not used for analytics or advertising, and I have no access to its contents.
2.4. Email
If you write to the address published in the contact section, I process your address, the name shown in the sender field and the content of your message, together with any attachments.
Purpose: reading, replying to and following up on your message.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in attending to the communication you initiated. If your message is a professional or collaboration enquiry, the basis is also the taking of steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Retention: for as long as the exchange lasts and, afterwards, for the time needed to evidence or resume it; messages are reviewed and deleted periodically, and always at your request unless there is a legal duty to keep them.
Provider: email is provided through Google (Gmail), acting as the email service provider.
3. Recipients
- GoDaddy (web hosting): processes the access logs as a processor acting on my behalf.
- Google (Gmail email service): stores and delivers the emails you send me.
No data is disclosed to any other recipient, except where required by law or by a competent authority. There are no disclosures to advertisers, no sale of data and no exchange with social networks. The LinkedIn and GitHub links are ordinary links: they only connect to those services if you click them.
4. International transfers
Providing the hosting and the email service may involve access to personal data from outside the European Economic Area.
- Hosting (GoDaddy): transfers outside the EEA rely on the appropriate safeguards under Article 46 GDPR set out in GoDaddy's data processing agreement (version consulted: revision of 13 September 2024), which incorporates the standard contractual clauses approved by the European Commission and provides for the EU-U.S. Data Privacy Framework where applicable.
- Email (Google): Google LLC, based in the United States, has certified its adherence to the EU-U.S. Data Privacy Framework, covered by the European Commission's adequacy decision of 10 July 2023. Where that decision does not apply, Google relies on the standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR).
You can obtain a copy of these safeguards, or information on where to consult them, by writing to the contact address.
5. Automated decision-making and profiling
No automated decisions producing legal effects or similarly significantly affecting you are taken, and no profiling is carried out.
6. Minors
This site is not aimed at children under fourteen — the age from which Article 7 of Spanish Organic Law 3/2018 (LOPDGDD) allows processing based on the minor's own consent — and does not knowingly collect data from children below that age.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, recognised in Articles 15 to 22 of Regulation (EU) 2016/679 and in Spanish Organic Law 3/2018.
No processing on this site is based on your consent; if any processing ever were, you could withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. The preferences stored in your browser can be deleted by you directly from your browser settings, with no need to ask.
To exercise your rights, write to danieljesusmartinflores@gmail.com stating the right you wish to exercise and providing something that allows me to identify you, such as the email address you contacted me from. I will reply within one month of receiving the request, extendable by two further months where the request is complex or several requests are received, in which case I will inform you of the extension and its reasons within the first month (Art. 12(3) GDPR). Exercising these rights is free of charge.
If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, Spain; www.aepd.es), without prejudice to any other administrative or judicial remedy.
8. Security and nature of the site
The site is served over encrypted HTTPS. It is a static site: there are no forms, no database, no user registration and no private area, so none of your data is stored on the site itself.
This is a personal professional profile website, with no economic activity, no advertising and no online contracting, so the information required by Article 10 of Spanish Law 34/2002 (LSSI) does not apply to it.
9. Changes to this policy
If this policy changes, the new version will be published at this same address with an updated date. Last updated: 12 September 2026.