Privacy Policy

1. Controller and contact

I am Bernardo Ramirez, an individual resident in Spain and the controller of the personal data I manage in connection with bernardoramirez.com.

You can contact me and exercise your rights at hello@bernardoramirez.com. Address: Calle Alvarado, 28770 Colmenar Viejo, Madrid, Spain.

2. What data I process and why

Optional email subscription. If you open and submit the Brevo form, you provide your email address to receive updates about gatherings, workshops and occasional personal reflections. The legal basis is your consent (GDPR Article 6(1)(a)). You receive an email asking you to confirm and should only become an active subscriber after confirming. Brevo may process technical data and consent records needed to deliver the service and prevent abuse. The form follows the page language; correct language classification in the mailing list depends on Brevo settings. Every mailing will provide an unsubscribe option. Emailing me directly does not subscribe you.

External form resources. If you choose to open the form, your browser connects to Brevo and any anti-spam services included in its form; these may process technical data and use cookies or similar technologies. You can read this policy first, or use the direct contact email without loading the form.

Email contact. If you write to me, I use your email address, any name you provide and your message to handle your enquiry and reply. For enquiries about potentially booking an activity, the basis is taking steps at your request before entering into a contract —GDPR Article 6(1)(b)—. For other questions, the basis is my legitimate interest in replying to people who contact me —Article 6(1)(f)—, limited to that conversation. Writing to me does not subscribe you to a mailing list.

Browsing and security. The selected hosting service is GitHub Pages. GitHub states that it logs visitors' IP addresses for security. The purpose of using this hosting is to make the website available and protect its operation. GitHub explains processing for which it is responsible in its privacy statement.

Rights requests. I use the information needed to respond to data protection requests and comply with the corresponding legal obligations —GDPR Article 6(1)(c)—.

Contact is by direct email. The Brevo subscription form is loaded only if you choose to open it; visiting this page does not subscribe you.

3. Required information and sensitive data

Providing data is voluntary. To reply, I need a valid email address and an understandable enquiry. Without that information, I may be unable to help.

I do not request medical histories, diagnoses or intimate accounts about other people. Please avoid sending health data or other particularly sensitive information through this channel. If I receive unnecessary sensitive information, I will restrict access and seek to delete it without reusing it, unless a legal obligation or basis justifies retention. Sending information voluntarily does not amount to consent to any processing.

4. Services used and international transfers

Brevo. I use Brevo to manage the updates mailing list when someone chooses to subscribe.

I use a domain email service whose infrastructure is identified as Mailhostbox to receive and manage messages sent to hello@bernardoramirez.com. This is a separate mailbox and is not automatically forwarded to my personal Gmail. GitHub Pages is the intended hosting service for the website. I do not sell contact lists or use your enquiries to send marketing without permission. I may disclose information to authorities when required by law.

The email service and Brevo process data for the purposes described here. Brevo terms and privacy information are available at www.brevo.com; GitHub explains its processing in its privacy statement.

Email providers, Brevo and GitHub may process data outside the European Economic Area. Specific transfer mechanisms and safeguards depend on the applicable contracts and services. You can request information and documentation at hello@bernardoramirez.com.

5. Retention

I keep enquiries that do not lead to a contract until resolved and for no more than 12 months after the last exchange, unless a legal obligation or specific claim justifies keeping information longer. In that case, I will limit the data and its use to what is necessary and, where applicable, retain it in a legally blocked state for the relevant liability periods before deletion.

If an enquiry leads to a contract, I will provide information about the additional processing and retention periods. GitHub's security logs are retained under the purpose and obligation criteria described in its policy; I do not set a retention period for them under my own control.

6. Your rights

You can request access, correction, erasure, restriction and, where applicable, portability. You can object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. You can object to direct marketing at any time.

Write to hello@bernardoramirez.com. I will respond without undue delay and generally within one month. If a lawful extension of up to two further months is needed because of the complexity or number of requests, I will inform you within the first month. I will only request additional identity information where necessary and proportionate.

You can complain to the Spanish Data Protection Agency — AEPD or another competent authority, particularly where you habitually reside, work or where the alleged infringement occurred.

7. Updates and changes

The subscription uses Brevo, requires email confirmation and offers an unsubscribe option. You can choose not to load the form, and visiting the site does not automatically subscribe you.

I do not use your enquiries to build marketing profiles or make decisions based solely on automated processing that produce legal effects or similarly significantly affect you. I will update this policy before introducing new processing where required. Registration for future activities may require additional specific information.

Last updated: 14 November 2026.