EN
Get my quote

§Personal data

Privacy policy

I only ask for the data needed to reply to your quote request. Here is what I do with it, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). This English version is provided for information; in case of discrepancy, the Spanish version prevails.

Last updated:

Details still to be completed

This website is being prepared. Some of the owner’s legal details have not been filled in yet and are shown in square brackets.

Data controller

Controller
Matias Rivero (YAMIA)
NIF
[Tax ID pending]
Address
[Address pending], Rubí (Barcelona), Spain

I have not appointed a data protection officer, as this is not mandatory in my case (Art. 37 GDPR and Art. 34 LOPDGDD).

Data processed

Only the data you send me through the quote form:

  • name and email address;
  • business name and phone number, if you provide them;
  • type of business and message;
  • the options chosen in the price configurator and the resulting estimate.

In addition, when you visit, the hosting provider automatically records technical data (IP address, date and time, page requested, browser) in server logs, which are needed for the service to work and to protect it against abuse.

This website uses no tracking cookies, no analytics tools and no advertising.

Purposes and legal bases

Replying to your quote request
Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR): you ask me for a quote and I prepare it.
Managing the service, if we reach an agreement
Performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations, particularly tax obligations (Art. 6(1)(c) GDPR).
Technical server logs
Legitimate interest in keeping the website secure and working properly (Art. 6(1)(f) GDPR).

I do not sell or transfer your data, I do not use it for marketing, I do not carry out profiling and I make no automated decisions about you.

Do you have to provide the data?

Fields marked as required are needed for me to reply. Without them, I will not be able to handle your request.

How long data is kept

I keep the data from your request for as long as needed to handle it. If no work is agreed, I delete it no later than 12 months after our last exchange.

If you become a client, I keep the necessary data for the duration of the relationship and then for the periods required by tax and commercial law.

Technical server logs are kept for a limited period, according to the hosting provider’s policy.

Recipients

I do not share your data with third parties unless required by law. To work, the website relies on the following providers, who act as processors:

Vercel Inc. (United States)
Website hosting. The function that receives the quote form runs in Vercel’s European region (Frankfurt, Germany). Vercel is certified under the EU-U.S. Data Privacy Framework.
Resend (Plus Five Five, Inc., United States)
Technical sending of the email that forwards your request to me. Certified under the EU-U.S. Data Privacy Framework; its data processing agreement includes the European Commission’s standard contractual clauses. Keeps a technical log of sent emails for 30 days.
[Email provider pending]
Email service on which I receive your messages and reply to you.

I do not keep your request in any database of my own: it reaches me by email.

Transfers to the United States are based on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (July 2023) and, where applicable, on standard contractual clauses.

If you live in Switzerland (nFADP), transfers to the United States are based on the Swiss-U.S. Data Privacy Framework where the provider is certified under it, as Vercel is, or otherwise on standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC), as provided for in Resend’s data processing agreement.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time.

To do so, write to me at hola@yamia.es stating which right you wish to exercise. If I have reasonable doubts about your identity, I may ask you for additional information. I will reply within the one-month period set by the GDPR.

Complaints

If you believe your data has not been handled correctly, you can lodge a complaint with the supervisory authority of your EU country of residence, or with the Spanish authority, the AEPD (www.aepd.es).

If you live in Switzerland, the Federal Act on Data Protection (nFADP) may also apply; the competent authority is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch).

Security

The website is always served over HTTPS, collects only the data that is strictly necessary, and I apply reasonable technical and organisational measures to protect it.

Changes

If the way I process your data changes, I will update this page and show the date of the latest change.

Back to home