Privacy Policy

This Privacy Policy explains how Lex Sánchez collects and uses personal data on lexsantor.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

Data controller

The controller of your personal data is Lex Sánchez, tax ID [NIF], with registered address at [Postal address], Spain. You can reach the controller at hello@lexsantor.com.

What data is collected

The website only collects personal data that you provide voluntarily through the contact form, together with the technical data generated by your visit.

  • Contact form: full name, email address, website (optional), the service you are interested in and the message you write.
  • Technical data: IP address, browser type, device, pages visited and timestamps, collected by the hosting provider in its server logs for security purposes.

Purpose and legal basis

  • Responding to your enquiry and, where applicable, preparing a proposal. Legal basis: your consent (Art. 6.1.a GDPR) and the steps needed to enter into a contract at your request (Art. 6.1.b GDPR).
  • Keeping the website secure and available. Legal basis: the controller's legitimate interest (Art. 6.1.f GDPR).
  • Complying with legal obligations that may apply to the controller (Art. 6.1.c GDPR).

How long data is kept

Contact form data is kept for as long as necessary to handle your enquiry and any resulting business relationship, and afterwards for the period required to meet legal obligations or defend against claims. Technical logs are kept by the hosting provider for a limited time according to its own retention policy.

Recipients and processors

Your data is not sold or shared with third parties for their own purposes. The following providers process data on behalf of the controller under data processing agreements:

  • FormSubmit (formsubmit.co): delivers the messages sent through the contact form to the controller's mailbox.
  • Google LLC (Gmail): the mailbox where enquiries are received and answered.
  • Loading, S.L. (loading.es): hosting for the website, including server logs.
  • Google LLC (Google Fonts): the typefaces used on the site are loaded from Google servers, which receive your IP address to serve the files.

International transfers

Some of the providers listed above are established in the United States. Transfers are covered by the EU-US Data Privacy Framework where the provider is certified, or otherwise by the Standard Contractual Clauses approved by the European Commission.

Your rights

You may exercise your rights of access, rectification, erasure, restriction of processing, data portability and objection at any time by writing to hello@lexsantor.com. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Security

Appropriate technical and organisational measures are applied to protect your data against unauthorised access, loss or alteration. The website is served exclusively over HTTPS.

Changes to this policy

This policy may be updated to reflect legal or operational changes. The date at the top of the page indicates the current version.