Privacy and Data Protection Policy
Last updated: 9 October 2026 · Under the EU General Data Protection Regulation (GDPR 2016/679)
Data controller
The controller responsible for personal data collected through this website is Gorka Fernández Torrico.
NIF 51207437-F. Bo Alceda 149B, Corvera de Toranzo, 39680 Cantabria, Spain.
Purpose and legal basis for processing
We process the information you provide through our diagnostic and contact forms for the following purposes:
Diagnostics and preparation of commercial proposals
To assess your project's technical requirements and provide a tailored diagnostic and estimate.
Legal basis: pre-contractual steps taken at your request (Article 6(1)(b) GDPR).Sending requested case studies
We use the email address submitted through the case-study form solely to send the four requested resources and handle delivery issues. This does not subscribe you to a newsletter or recurring marketing.
Legal basis: your consent (Article 6(1)(a) GDPR).Contact and operational follow-up
To respond to communications about development, technical consulting, booking integrations, or the engagement of services.
Legal basis: consent and mutual legitimate interests.Legal and administrative compliance
Tax, accounting, and document management if development or consulting services are formally engaged.
Legal basis: compliance with applicable legal obligations (Article 6(1)(c) GDPR).Google Analytics 4
With your consent (Article 6(1)(a) GDPR), we use Google Analytics 4, provided by Google Ireland Limited and Google LLC, to measure visits and actions such as assessment requests, requested resources and contact clicks. It uses pseudonymous browser identifiers, device information and usage data; these are not fully anonymous data. We do not send form answers, email addresses, phone numbers, names, private identifiers, or URL query parameters and fragments to Analytics.
Google also receives technical connection information, including the IP address used to derive approximate location. According to Google's documentation, GA4 does not log or store individual IP addresses.
Google scripts, analytics cookies and measurement requests are blocked until you accept analytics. Advertising consent remains denied; we do not enable advertising, remarketing or Google signals. Rejecting analytics does not prevent you from using the website or its forms.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguish browsers | 365 days |
| _ga_DSK6R87XWP | Maintain session state | 365 days |
These are first-party cookies on this site's domain. We configure a 31,536,000-second lifetime (365 days), without renewing expiry on each visit. Browser restrictions can shorten this period. Cookie lifetime is different from Google's retention of collected reports and events.
You can accept, reject, save individual preferences or withdraw analytics consent using Cookie settings in the footer. Withdrawal stops measurement, deletes this site's GA cookies and reloads the page to remove the loaded Google code. It does not undo previously lawful processing. We store only the choice, version and date in solai-cookie-consent (localStorage), valid for 180 days; after expiry we ask again with analytics blocked.
Google may process data outside the European Economic Area, including in the United States. Google's terms describe the applicable transfer safeguards, including the EU–US Data Privacy Framework where applicable and standard contractual clauses. See the provider's current information:
Data retention and security
We retain the data you provide for as long as necessary to respond to your enquiry or provide the relevant service, and for any further period required by law to address potential liabilities.
For one-off delivery of case studies, your email address is used to send the resources and is retained only in the provider's technical logs for as long as needed to ensure delivery, security, and issue resolution. Gorka Fernández Torrico does not add it to marketing lists through this process.
We apply appropriate technical and organisational security measures to prevent unauthorised access, loss, or improper alteration of information.
Processors and international transfers
Gorka Fernández Torrico does not sell or share data with third parties for commercial purposes. To operate our platform, we use cloud infrastructure, automation, and email providers that meet the privacy and security standards required by the European Union.
- Vercel: secure hosting and execution of the website and its forms.
- Brevo (Sendinblue): SMTP infrastructure used to deliver requested emails.
Where a provider processes data outside the European Economic Area, safeguards under the GDPR apply, including standard contractual clauses where required.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time by sending a written request with a copy of an identity document to: