Privacy policy

This explains what personal data we collect at makeweb.es, what we use it for, how long we keep it and what you can ask of us. It is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Who processes your data

Controllers

Hugo Sanz Abad (NIF 50507227D) and Lucas Segovia Sánchez (NIF 51253727K).

Address

Calle del Marge, 1, 03110 Mutxamel (Alicante), Spain

Privacy contact

contacto@makeweb.es

2. What data we collect

Only what you give us, and only where there is a form or a contact link:

• Contact form: name, business name, email, phone (optional), which plan suits you, what you have now and whatever you write in the message.
• When you submit the form: the service that delivers it also records technical data —your IP address, the date and time, and the page you are writing from— which it needs to filter spam.
• If you email or call us: the data contained in that communication.
• Browsing data: only if you accept analytics cookies. They are explained in the cookie policy.

We do not ask for special category data (health, ideology, religion, trade union membership…). Please do not include it in the free-text message.

This website is not aimed at children under 14 and we do not knowingly collect their data.

3. What we use it for and on what legal basis

Answering your enquiry and preparing a proposal

Legal basis: steps taken at your request prior to entering into a contract (art. 6.1.b GDPR). Without this data we cannot reply to you.

Managing the relationship if we end up working together

Legal basis: performance of the contract (art. 6.1.b GDPR).

Meeting tax and accounting obligations

Legal basis: legal obligation (art. 6.1.c GDPR).

Measuring, in aggregate, how the website is used

Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time from the cookie policy.

We do not send marketing to anyone who has not asked for it, nor do we pass your data on for others to do so.

4. How long we keep it

• Enquiries that go nowhere: up to 12 months from the last contact, in case you pick the project up again. After that they are deleted.
• Clients: for as long as the relationship lasts and, after that, for the limitation periods of our legal obligations (generally 6 years for commercial matters and 4 for tax).
• Analytics data: the period stated for each cookie.
• The copy kept by the form service: up to 3 years on Web3Forms’ servers, under its processing agreement, even though only the last 30 days are visible on our plan. This is separate from what we keep in our inbox.

5. Who else sees your data

We do not sell or pass on personal data. We do work with providers who process it on our behalf, under a signed data processing agreement (art. 28 GDPR):

• Web hosting: GitHub Pages (GitHub, Inc.) (the United States and a global content delivery network).
• Email: IONOS, which hosts the inbox your messages arrive in. Its servers are in the European Union.
• Form delivery: Web3Forms, a service of Web3Creative (India), which receives what you write and forwards it to our inbox. To provide the service it relies on Amazon Web Services, Cloudflare and Hetzner (the latter in the European Union), and keeps a copy of the submission for up to 3 years.
• Spam filtering: CleanTalk and Akismet (Automattic), in the United States. They receive your IP address and email to decide whether the submission is junk. Without this filter the form would be unusable.
• Web analytics: none is connected right now. If there is one in future, it will be listed here by name and will only be switched on if you accept those cookies.
• Accountants: for accounting and tax obligations.

We may also disclose data to public authorities when the law requires it.

6. Transfers outside the EU

Email is processed within the European Economic Area. Two services are not:

• This website’s hosting, on GitHub Pages (GitHub, Inc., United States). When the page is served to you, technical data such as your IP address is logged. The transfer is covered by its group’s certification under the EU-U.S. Data Privacy Framework.
• Contact form submissions, processed by Web3Forms (Web3Creative, India) together with the providers it relies on, including the CleanTalk and Akismet spam filters in the United States. Neither India nor the United States has an adequacy decision covering these providers, so the transfer is covered by the standard contractual clauses approved by the European Commission in Implementing Decision (EU) 2021/914, incorporated by reference into the data processing agreement we have signed with the provider, with the provider acting as data importer and us as exporters.

You can ask us for a copy of the safeguards for any of these transfers by writing to contacto@makeweb.es.

If you would prefer your data not to leave the European Economic Area, email us directly at contacto@makeweb.es instead of using the form.

7. Your rights

You may exercise these rights at any time:

• Access: know what data of yours we hold.
• Rectification: correct any that are inaccurate.
• Erasure: ask us to delete it when it is no longer needed.
• Objection: object to a specific processing.
• Restriction: ask us to keep it but not use it.
• Portability: receive it in a structured, commonly used format.
• Withdraw consent at any time, without affecting the lawfulness of earlier processing.

Write to us at contacto@makeweb.es saying which right you want to exercise. We will reply within one month at most. We may ask you to prove your identity if we cannot identify you with certainty.

If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency: www.aepd.es.

8. Security

We apply reasonable technical and organisational measures to protect your data: encrypted connection (HTTPS) across the whole website, access restricted to those who need it, backups and regular access reviews. No system is infallible; if there were a breach putting your rights at risk, we would tell you and notify the supervisory authority within the legal deadlines.

9. Automated decisions

We do not make automated decisions or create profiles with legal effects on you.

10. Changes to this policy

If the way we process data changes, we will update this page and the date shown above. Where the change is substantial and affects processing based on your consent, we will ask you for it again.