Privacy policy

This English version is a translation provided for convenience. In the event of any discrepancy between this version and the Spanish version, the Spanish version shall prevail.

At Alex MG Studio I take privacy seriously. This policy explains what personal data is processed, what it is used for, how long it is kept and what rights you have, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD) and Spanish Law 34/2002 on Information Society Services (LSSI-CE).

1. Data controller

• Controller: Alejandro Martín González (trading name: Alex MG Studio)
• Tax ID (NIF): 54462064L
• Address: Paseo Pedro Ponce 109, El Ejido, 04700, Almería
• Privacy contact email: [email protected]
• Website: https://alexmgstudio.com/

2. What data is processed

a) Data you provide. Through the contact form, by email or by phone:

• Your name and, optionally, the name of your business.
• Email and, optionally, phone number.
• The plan you are interested in and the information you include in your message.

b) Client data. If you hire a service: billing details (name or company name, tax ID, address) and the information and materials you provide to create your website (text, photos, logo, opening hours, etc.).

c) Business contact details. To offer my services, I may contact businesses by phone using their professional contact details published in publicly accessible sources (for example, their Google Maps listing or their social media): business name, phone number and business address. Information is only sent by email when the business has requested or agreed to it beforehand.

d) Browsing data. This website does not use cookies, does not show advertising and does not profile visitors. Visitor statistics are obtained with Cloudflare Web Analytics in an aggregated and anonymous way, without cookies and without identifying anyone. For security and operational reasons, the hosting provider may temporarily log technical data such as the IP address, the browser or the date and time of access.

No special categories of data (health, beliefs, etc.) are requested or processed. Please do not include them in your messages.

3. Purposes and legal basis

Purpose	Legal basis
Responding to your enquiry and preparing the quote you request.	Your consent, when you submit the form (Art. 6(1)(a) GDPR), and taking pre-contractual steps at your request (Art. 6(1)(b) GDPR).
If you hire a service: creating and publishing your website, providing the maintenance you have contracted, communicating with you about the project and issuing invoices.	Performance of the contract (Art. 6(1)(b) GDPR).
Complying with accounting and tax obligations (keeping invoices and records).	Compliance with legal obligations (Art. 6(1)(c) GDPR).
Contacting businesses by phone to present my web design services, using their public professional contact details.	Legitimate interest in making my services known to other businesses (Art. 6(1)(f) GDPR and Art. 19 LOPDGDD). You can object at any time and I will not contact you again.
Sending commercial information by email.	Only with your prior consent (Art. 21 LSSI-CE) or, if you are already a client, about services similar to those you have contracted. You can always unsubscribe.
Ensuring the security and proper functioning of the website.	Legitimate interest (Art. 6(1)(f) GDPR).

4. Mandatory data and accuracy

The fields marked with an asterisk (*) on the form are required so that I can reply to you; if you do not fill them in, I will not be able to deal with your request. You undertake that the data you provide is accurate and to notify any changes. If you provide data about other people (for example, a partner or employee), you must have informed them beforehand.

5. Minors

Alex MG Studio’s services are aimed at businesses and professionals. Data of children under 14 is not knowingly processed (Art. 7 LOPDGDD). If I detect that such data has been received, it will be deleted.

6. Retention period

• Quote requests that do not lead to a contract: a maximum of 12 months from the last contact; after that they are deleted.
• Clients: for as long as the business relationship lasts and, afterwards, for the legal periods (6 years for accounting records under the Spanish Commercial Code and 4 years for tax purposes), plus the limitation period for any possible liabilities.
• Commercial contacts with businesses: a maximum of 12 months if there is no interest. If you object to being contacted again, only the essential data (business name and phone number) will be kept on a suppression list so that you are not contacted again.
• Technical security data: for the period set by the hosting provider, usually a few days.

7. Recipients and data processors

Data is not sold or disclosed to third parties, except where required by law (for example, to the Spanish Tax Agency, courts or law enforcement authorities when they require it). The following providers are used to deliver the service; they access the data only to the extent necessary and act as data processors:

• Cloudflare, Inc.: website hosting, DNS, security and anonymous visitor statistics.
• Web3Forms: receiving the contact form and forwarding it by email.
• Google LLC: email service (Gmail).

The domain and hosting of each client’s website are taken out in the client’s own name with the provider of their choice; that provider processes the data in accordance with its own privacy policy.

8. International transfers

Some of the providers above may process data outside the European Economic Area, for example in the United States. These transfers are made with the safeguards provided for in the GDPR: the provider’s participation in the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

9. Automated decisions

No automated decisions are made and no profiles are created with your data.

10. Your rights

You can exercise the following rights at any time, free of charge:

• Access: to find out what data about you is being processed.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to ask for your data to be deleted when it is no longer needed.
• Objection: to object to processing based on legitimate interest, including commercial contacts.
• Restriction: to ask for your data to be kept but not used, in the cases provided for by law.
• Portability: to receive your data in a structured format.
• Withdraw the consent you have given, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise them, write to [email protected] stating the right you wish to exercise. You will only be asked for a document proving your identity if there are reasonable doubts about it. You will receive a reply within one month at the latest.

If you believe that your data has not been processed correctly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (C/ Jorge Juan, 6, 28001 Madrid).

11. Security

Appropriate technical and organisational measures are applied to protect your data against loss, unauthorised access or misuse, including an encrypted connection (HTTPS) across the entire website and the use of providers that offer security guarantees.

12. Changes to this policy

This policy may be updated to reflect changes in legislation or in the service. The date of the last update appears at the top of this page. See also the Cookie policy and the Legal notice.