Legal
Privacy Policy
1. Who is responsible for your data
The data controller for this website is:
Hernán AsoreyLas Rozas Innova · Las Rozas de Madrid, Spain
hernan@asoreyh.com
2. What data is collected and why
This site collects limited, anonymised data for the sole purpose of understanding how it is used and improving the experience over time. No personal profiles are built, no data is sold, and no tracking occurs without your explicit consent.
| Data type | Purpose | Legal basis |
|---|---|---|
| Anonymised usage data (pages visited, session duration, device type) | Analytics — understand traffic patterns and improve the site | Consent (Art. 6(1)(a) GDPR) |
| Cookie consent preferences | Remember your cookie choices | Legitimate interest (Art. 6(1)(f) GDPR) |
Analytics are powered by Google Analytics 4, loaded only after you grant consent. If you reject analytics cookies, no data is sent to Google.
3. Cookies
Cookies used on this site are described in full in the Cookie Policy. You can review and change your preferences at any time using the cookie banner or by clicking Manage preferences in the footer.
4. Third-party processors
The following third-party services may process data when you consent to analytics cookies:
| Service | Purpose | Privacy policy |
|---|---|---|
| Google Tag Manager | Tag management infrastructure | policies.google.com/privacy |
| Google Analytics 4 | Anonymised site analytics | policies.google.com/privacy |
| CookieYes | Consent management | cookieyes.com/privacy-policy |
5. Data transfers outside the EU
Google Analytics and Google Tag Manager may transfer data to servers in the United States. Google participates in the EU–US Data Privacy Framework, which provides an adequate level of protection under GDPR. No other international data transfers occur.
6. How long data is retained
Analytics data is retained in Google Analytics for 14 months, after which it is automatically deleted. Cookie consent records are stored locally in your browser and expire after 12 months.
7. Your rights
Under GDPR you have the right to:
- Access — request a copy of the data held about you.
- Rectification — correct inaccurate data.
- Erasure — request deletion of your data.
- Restriction — limit how your data is processed.
- Objection — object to processing based on legitimate interest.
- Portability — receive your data in a machine-readable format.
- Withdraw consent — at any time, without affecting prior processing.
To exercise any of these rights, contact hernan@asoreyh.com. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD).
8. Security
This site is served exclusively over HTTPS. No sensitive personal data (passwords, payment details, health data) is collected or stored.
9. Changes to this policy
Material changes will be reflected in the "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance.
10. Contact
Questions about this policy? Write to hernan@asoreyh.com.