Privacy policy
1. Data controller
The controller is Fernando David Gomez Martinez, the natural person who owns the CEUTINEX trademark and this website. Contact email: ceutinex@gmail.com. Stated address: C/ Turina, 30562, Ceutí, Murcia, Spain, as provided by the website owner.
2. Data processed and source
When a person voluntarily emails the published address, the data processed may include identification and contact details in the message, the content of the communication, professional details provided and technical email metadata. The website does not offer forms, user registration, subscriptions or user profiles. Special-category data is not deliberately requested; please do not include sensitive information unless strictly necessary.
3. Purposes and legal bases
- To respond to enquiries, proposals and communications initiated by the sender and, where applicable, take pre-contractual steps requested by that person (GDPR Article 6(1)(b)).
- To manage and retain professional communications and establish, exercise or defend legal claims where a properly balanced legitimate interest applies (Article 6(1)(f)).
- To comply with applicable legal obligations, where they arise (Article 6(1)(c)).
Sending an email does not subscribe the sender to marketing communications or authorise unsolicited advertising.
4. Voluntary nature and consequences
Providing data by email is voluntary. If the minimum information needed to understand and answer an enquiry is not provided, it may not be possible to respond. Senders should ensure that the information is appropriate and must not include third-party data without a lawful basis.
5. Recipients and service providers
Messages are managed through Gmail, a Google service. The account currently used is a consumer Gmail account. Google states that it does not offer a Data Processing Agreement (DPA) for consumer versions of Gmail and does not act as a data processor for those services; Google may therefore process certain data under its own terms and privacy policy, for its own purposes and in its own capacity. See Google’s Privacy Policy and Google’s DPA information. The website is hosted and distributed through Cloudflare Pages and Cloudflare infrastructure. This version also requests the DM Sans and Manrope typefaces from Google Fonts, so the browser connects to Google servers to download those resources; Google may receive technical connection data, such as the IP address and browser information, under its terms and privacy policy. The service terms, Cloudflare Data Processing Addendum and applicable subprocessor list for the account should be reviewed. See Cloudflare’s DPA.
6. International transfers
Use of international technology providers may involve access to or processing of data outside the European Economic Area. The existence, destination and legal mechanism for any transfer must be checked against the current Google and Cloudflare terms and the actual account configuration. Where applicable, adequacy decisions or safeguards under Chapter V GDPR will be relied upon. No absence of transfers is claimed without verifying the actual contracts and data flows.
7. Retention periods
Messages will be kept for as long as necessary to handle the communication and any reasonable follow-up. They may subsequently be restricted for the limitation periods applicable to potential liabilities and deleted when no longer necessary. No single fixed period is stated because it depends on the nature of each communication. The controller must apply review and effective deletion criteria in Gmail.
8. Data subject rights
Individuals may exercise their rights of access, rectification, erasure, objection, restriction and, where applicable, portability by emailing ceutinex@gmail.com, stating the right they wish to exercise and providing only the information strictly necessary to verify identity. A complaint may also be lodged with the Spanish Data Protection Agency (www.aepd.es). Requests will be handled within GDPR time limits.
9. Security
Reasonable technical and organisational measures will be applied in light of the nature of the data and available resources, including account protection, access control and configuration reviews. No internet-connected system can guarantee absolute security. Appropriate safeguards should be enabled in Google and Cloudflare accounts, including multi-factor authentication.
10. Children
The website is not specifically directed at children and does not deliberately request their data. If information about a child is received without a lawful basis, reasonable steps will be taken to delete or otherwise handle it in accordance with applicable law.
11. Updates
This policy may be amended when processing activities, providers, website functions or legal requirements change. The current version will be available on this page with its update date.