Skip to content
> poldescomm
EN ES

Privacy Policy

Last updated: 1 June 2026

Who I am

This site (poldescomm.com) is operated by Pol Mendieta, a freelance software engineer based in Barcelona, Spain. Contact: pmendieta920@gmail.com. I am the data controller for any personal data you submit through this website.

What data I collect, why, and on what legal basis

I only process personal data when you actively submit it. There is no automated tracking, no advertising pixels, no third-party analytics on this site at the time of writing.

1. Contact form ("Get a quote")

When you submit the form on the home page, the following fields are sent through Web3Forms (a form-relay service, see below) to my inbox: name, email, project type, budget (optional), message.

  • Purpose: to reply to your project enquiry.
  • Legal basis: taking steps at your request prior to entering a contract (GDPR Art. 6(1)(b)).
  • Retention: 24 months, then deleted from my inbox. If we work together, retention follows my standard contract terms.

2. Server logs

My web server (Nginx) keeps standard access logs: IP address, timestamp, user-agent, URL requested, HTTP status. These rotate every 14 days.

  • Purpose: security, abuse detection, debugging.
  • Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
  • Retention: 14 days.

Cookies

This site does not set any cookies. No analytics, no advertising, no remarketing. The site stores nothing in your browser other than what your browser caches on its own.

Third parties (processors)

Personal data is shared with the following processors, each under a Data Processing Agreement (or equivalent contract):

  • Cloudflare, Inc. (USA, EU offices) — CDN and reverse-proxy. Sees request metadata (IP, headers). Standard Contractual Clauses in place.
  • Web3Forms — form relay. Receives the form submission and forwards it to my email. See their privacy policy.
  • Google LLC (Gmail) — my email provider, where contact-form messages land.
  • Hetzner Online GmbH (Germany) — hosting provider. ISO 27001 certified, EU-based.

International transfers

Cloudflare and Google may process data outside the EEA (United States). Both are signatories to the EU-US Data Privacy Framework or rely on Standard Contractual Clauses.

Your rights (GDPR)

You have the right to:

  • Access the personal data I hold about you.
  • Request rectification of inaccurate data.
  • Request erasure ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time (where consent is the basis).
  • Lodge a complaint with the Spanish Data Protection Authority (AEPD): aepd.es.

To exercise any of these rights, email pmendieta920@gmail.com. I'll respond within 30 days.

Changes to this policy

I'll update the "last updated" date at the top whenever this policy changes. Material changes will also be highlighted on the home page for at least 14 days.