HOME

WORK

SOCIAL

ABOUT

CONTACT

PRIVACY POLICY

Last updated: 3 September 2026

1. Data controller

The controller responsible for personal data processed through this website is:

2. Scope of this policy

This Privacy Policy explains how personal data is collected and processed when you visit the website, submit its contact form or choose to load content embedded from Vimeo or Instagram.

3. Personal data processed

Depending on how you use the website, the following categories of data may be processed:

Contact form data

  • first name;

  • last name;

  • category selected in the form;

  • email address; and

  • the content of your message and any other information you voluntarily include in it.

Please do not submit confidential information or special categories of personal data through the free-text field unless this is strictly necessary.

Technical and security data

When you access the website, the hosting platform and its infrastructure providers may process limited technical information required to deliver and protect the service, such as IP address, browser and device information, timestamps, request logs, and security or anti-abuse signals.

External media data

If you consent to loading embedded Vimeo or Instagram content, the relevant provider may receive technical and interaction data, including your IP address, device or browser identifiers, cookie or similar-technology information, and information about how you interact with that content. Those providers may process the data for their own purposes under their respective privacy policies.

4. Purposes and legal bases

Personal data may be processed for the following purposes:

PurposeLegal basisTo receive, manage and respond to messages submitted through the contact formYour consent under Article 6(1)(a) GDPR. Where your message requests a quote, collaboration or professional service, processing may also be necessary to take steps at your request before entering into a contract under Article 6(1)(b) GDPR.To operate, deliver and protect the website and prevent spam, abuse or security incidentsThe legitimate interest in maintaining a secure and functional website under Article 6(1)(f) GDPR.To load embedded Vimeo or Instagram contentYour prior consent under Article 6(1)(a) GDPR and applicable rules on cookies and similar technologies.To comply with legal obligations or respond to lawful requests from public authoritiesArticle 6(1)(c) GDPR.To establish, exercise or defend legal claimsThe legitimate interest described in Article 6(1)(f) GDPR.

The website does not use personal data submitted through the contact form to send newsletters or unrelated marketing communications. It does not use automated decision-making or profiling that produces legal or similarly significant effects.

5. Required information

Fields marked as required must be completed for the form to be submitted and the enquiry to be handled. Other fields are voluntary. If the information needed to reply is not provided, it may not be possible to respond to your request.

6. Retention periods

Contact-form data will be retained only for as long as necessary to manage and respond to the enquiry and, ordinarily, for no longer than twelve months after the last meaningful communication.

Data may be retained for a longer period where:

  • a professional or contractual relationship is established, in which case the information will be retained for the periods required by applicable contractual, accounting and tax legislation;

  • retention is required by law or by a competent authority; or

  • the information is necessary to establish, exercise or defend legal claims for the applicable limitation period.

Technical and security information is retained in accordance with the necessary security purpose and the retention schedules applied by the relevant service providers. Consent records and preferences may be retained for the period required to demonstrate compliance and remember your choices.

7. Recipients and service providers

Personal data is not sold.

Access may be given only where necessary to:

  • Framer B.V., which provides the website publishing, hosting and native form infrastructure and processes website visitor and form data on behalf of the controller;

  • Framer’s authorised infrastructure, hosting, security and anti-abuse subprocessors;

  • Vimeo, when you choose to load embedded Vimeo content;

  • Meta / Instagram, when you choose to load embedded Instagram content;

  • professional advisers where necessary and subject to confidentiality obligations; and

  • courts, regulators, law-enforcement bodies or other public authorities where disclosure is legally required.

Vimeo and Meta may act as independent controllers for processing performed through their respective platforms. Their subsequent processing is governed by their own policies.

8. International data transfers

Some technology providers or their subprocessors may process data outside the European Economic Area, including in the United States. Where required, such transfers must be covered by a valid safeguard under Chapter V GDPR, such as an adequacy decision, participation in the EU–US Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses together with any necessary supplementary measures.

Further information is available in the providers’ policies:

9. Your rights

Subject to the conditions established by applicable law, you may exercise the following rights:

  • Access: obtain confirmation as to whether your personal data is being processed and receive a copy.

  • Rectification: correct inaccurate or incomplete data.

  • Erasure: request deletion where the data is no longer necessary or another legal ground applies.

  • Restriction: request that processing be limited in the circumstances provided by law.

  • Objection: object to processing based on legitimate interests for reasons relating to your particular situation.

  • Data portability: receive data you provided in a structured, commonly used and machine-readable format where the legal requirements are met.

  • Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise a right, email info@javierzarzabardet.com, indicate the right you wish to exercise and provide the information reasonably necessary to identify your request. Additional information may be requested only where reasonably necessary to verify identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through www.aepd.es.

10. Security

Appropriate technical and organisational measures are applied to protect personal data against unauthorised access, loss, alteration or disclosure, taking into account the nature of the data, the available technology and the risks involved. However, no internet-based system can be guaranteed to be completely secure.

11. Children

The website and its professional contact form are not directed at children under fourteen years of age. Children under fourteen must not submit personal data without the authorisation of a parent or legal guardian.

12. Third-party websites and content

This policy does not govern processing carried out independently by third-party websites or platforms reached through links or embedded content. Please review the relevant provider’s privacy information before interacting with those services.

13. Changes to this policy

This Privacy Policy may be updated when the website, its processing activities or applicable legislation changes. The current version and its latest update date will always be published on this page.

14. Contact

For any question regarding this Privacy Policy or the processing of personal data, contact info@javierzarzabardet.com.

PRIVACY POLICY

Last updated: 3 September 2026

1. Data controller

The controller responsible for personal data processed through this website is:

2. Scope of this policy

This Privacy Policy explains how personal data is collected and processed when you visit the website, submit its contact form or choose to load content embedded from Vimeo or Instagram.

3. Personal data processed

Depending on how you use the website, the following categories of data may be processed:

Contact form data

  • first name;

  • last name;

  • category selected in the form;

  • email address; and

  • the content of your message and any other information you voluntarily include in it.

Please do not submit confidential information or special categories of personal data through the free-text field unless this is strictly necessary.

Technical and security data

When you access the website, the hosting platform and its infrastructure providers may process limited technical information required to deliver and protect the service, such as IP address, browser and device information, timestamps, request logs, and security or anti-abuse signals.

External media data

If you consent to loading embedded Vimeo or Instagram content, the relevant provider may receive technical and interaction data, including your IP address, device or browser identifiers, cookie or similar-technology information, and information about how you interact with that content. Those providers may process the data for their own purposes under their respective privacy policies.

4. Purposes and legal bases

Personal data may be processed for the following purposes:

PurposeLegal basisTo receive, manage and respond to messages submitted through the contact formYour consent under Article 6(1)(a) GDPR. Where your message requests a quote, collaboration or professional service, processing may also be necessary to take steps at your request before entering into a contract under Article 6(1)(b) GDPR.To operate, deliver and protect the website and prevent spam, abuse or security incidentsThe legitimate interest in maintaining a secure and functional website under Article 6(1)(f) GDPR.To load embedded Vimeo or Instagram contentYour prior consent under Article 6(1)(a) GDPR and applicable rules on cookies and similar technologies.To comply with legal obligations or respond to lawful requests from public authoritiesArticle 6(1)(c) GDPR.To establish, exercise or defend legal claimsThe legitimate interest described in Article 6(1)(f) GDPR.

The website does not use personal data submitted through the contact form to send newsletters or unrelated marketing communications. It does not use automated decision-making or profiling that produces legal or similarly significant effects.

5. Required information

Fields marked as required must be completed for the form to be submitted and the enquiry to be handled. Other fields are voluntary. If the information needed to reply is not provided, it may not be possible to respond to your request.

6. Retention periods

Contact-form data will be retained only for as long as necessary to manage and respond to the enquiry and, ordinarily, for no longer than twelve months after the last meaningful communication.

Data may be retained for a longer period where:

  • a professional or contractual relationship is established, in which case the information will be retained for the periods required by applicable contractual, accounting and tax legislation;

  • retention is required by law or by a competent authority; or

  • the information is necessary to establish, exercise or defend legal claims for the applicable limitation period.

Technical and security information is retained in accordance with the necessary security purpose and the retention schedules applied by the relevant service providers. Consent records and preferences may be retained for the period required to demonstrate compliance and remember your choices.

7. Recipients and service providers

Personal data is not sold.

Access may be given only where necessary to:

  • Framer B.V., which provides the website publishing, hosting and native form infrastructure and processes website visitor and form data on behalf of the controller;

  • Framer’s authorised infrastructure, hosting, security and anti-abuse subprocessors;

  • Vimeo, when you choose to load embedded Vimeo content;

  • Meta / Instagram, when you choose to load embedded Instagram content;

  • professional advisers where necessary and subject to confidentiality obligations; and

  • courts, regulators, law-enforcement bodies or other public authorities where disclosure is legally required.

Vimeo and Meta may act as independent controllers for processing performed through their respective platforms. Their subsequent processing is governed by their own policies.

8. International data transfers

Some technology providers or their subprocessors may process data outside the European Economic Area, including in the United States. Where required, such transfers must be covered by a valid safeguard under Chapter V GDPR, such as an adequacy decision, participation in the EU–US Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses together with any necessary supplementary measures.

Further information is available in the providers’ policies:

9. Your rights

Subject to the conditions established by applicable law, you may exercise the following rights:

  • Access: obtain confirmation as to whether your personal data is being processed and receive a copy.

  • Rectification: correct inaccurate or incomplete data.

  • Erasure: request deletion where the data is no longer necessary or another legal ground applies.

  • Restriction: request that processing be limited in the circumstances provided by law.

  • Objection: object to processing based on legitimate interests for reasons relating to your particular situation.

  • Data portability: receive data you provided in a structured, commonly used and machine-readable format where the legal requirements are met.

  • Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise a right, email info@javierzarzabardet.com, indicate the right you wish to exercise and provide the information reasonably necessary to identify your request. Additional information may be requested only where reasonably necessary to verify identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through www.aepd.es.

10. Security

Appropriate technical and organisational measures are applied to protect personal data against unauthorised access, loss, alteration or disclosure, taking into account the nature of the data, the available technology and the risks involved. However, no internet-based system can be guaranteed to be completely secure.

11. Children

The website and its professional contact form are not directed at children under fourteen years of age. Children under fourteen must not submit personal data without the authorisation of a parent or legal guardian.

12. Third-party websites and content

This policy does not govern processing carried out independently by third-party websites or platforms reached through links or embedded content. Please review the relevant provider’s privacy information before interacting with those services.

13. Changes to this policy

This Privacy Policy may be updated when the website, its processing activities or applicable legislation changes. The current version and its latest update date will always be published on this page.

14. Contact

For any question regarding this Privacy Policy or the processing of personal data, contact info@javierzarzabardet.com.

PRIVACY POLICY

Last updated: 3 September 2026

1. Data controller

The controller responsible for personal data processed through this website is:

2. Scope of this policy

This Privacy Policy explains how personal data is collected and processed when you visit the website, submit its contact form or choose to load content embedded from Vimeo or Instagram.

3. Personal data processed

Depending on how you use the website, the following categories of data may be processed:

Contact form data

  • first name;

  • last name;

  • category selected in the form;

  • email address; and

  • the content of your message and any other information you voluntarily include in it.

Please do not submit confidential information or special categories of personal data through the free-text field unless this is strictly necessary.

Technical and security data

When you access the website, the hosting platform and its infrastructure providers may process limited technical information required to deliver and protect the service, such as IP address, browser and device information, timestamps, request logs, and security or anti-abuse signals.

External media data

If you consent to loading embedded Vimeo or Instagram content, the relevant provider may receive technical and interaction data, including your IP address, device or browser identifiers, cookie or similar-technology information, and information about how you interact with that content. Those providers may process the data for their own purposes under their respective privacy policies.

4. Purposes and legal bases

Personal data may be processed for the following purposes:

PurposeLegal basisTo receive, manage and respond to messages submitted through the contact formYour consent under Article 6(1)(a) GDPR. Where your message requests a quote, collaboration or professional service, processing may also be necessary to take steps at your request before entering into a contract under Article 6(1)(b) GDPR.To operate, deliver and protect the website and prevent spam, abuse or security incidentsThe legitimate interest in maintaining a secure and functional website under Article 6(1)(f) GDPR.To load embedded Vimeo or Instagram contentYour prior consent under Article 6(1)(a) GDPR and applicable rules on cookies and similar technologies.To comply with legal obligations or respond to lawful requests from public authoritiesArticle 6(1)(c) GDPR.To establish, exercise or defend legal claimsThe legitimate interest described in Article 6(1)(f) GDPR.

The website does not use personal data submitted through the contact form to send newsletters or unrelated marketing communications. It does not use automated decision-making or profiling that produces legal or similarly significant effects.

5. Required information

Fields marked as required must be completed for the form to be submitted and the enquiry to be handled. Other fields are voluntary. If the information needed to reply is not provided, it may not be possible to respond to your request.

6. Retention periods

Contact-form data will be retained only for as long as necessary to manage and respond to the enquiry and, ordinarily, for no longer than twelve months after the last meaningful communication.

Data may be retained for a longer period where:

  • a professional or contractual relationship is established, in which case the information will be retained for the periods required by applicable contractual, accounting and tax legislation;

  • retention is required by law or by a competent authority; or

  • the information is necessary to establish, exercise or defend legal claims for the applicable limitation period.

Technical and security information is retained in accordance with the necessary security purpose and the retention schedules applied by the relevant service providers. Consent records and preferences may be retained for the period required to demonstrate compliance and remember your choices.

7. Recipients and service providers

Personal data is not sold.

Access may be given only where necessary to:

  • Framer B.V., which provides the website publishing, hosting and native form infrastructure and processes website visitor and form data on behalf of the controller;

  • Framer’s authorised infrastructure, hosting, security and anti-abuse subprocessors;

  • Vimeo, when you choose to load embedded Vimeo content;

  • Meta / Instagram, when you choose to load embedded Instagram content;

  • professional advisers where necessary and subject to confidentiality obligations; and

  • courts, regulators, law-enforcement bodies or other public authorities where disclosure is legally required.

Vimeo and Meta may act as independent controllers for processing performed through their respective platforms. Their subsequent processing is governed by their own policies.

8. International data transfers

Some technology providers or their subprocessors may process data outside the European Economic Area, including in the United States. Where required, such transfers must be covered by a valid safeguard under Chapter V GDPR, such as an adequacy decision, participation in the EU–US Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses together with any necessary supplementary measures.

Further information is available in the providers’ policies:

9. Your rights

Subject to the conditions established by applicable law, you may exercise the following rights:

  • Access: obtain confirmation as to whether your personal data is being processed and receive a copy.

  • Rectification: correct inaccurate or incomplete data.

  • Erasure: request deletion where the data is no longer necessary or another legal ground applies.

  • Restriction: request that processing be limited in the circumstances provided by law.

  • Objection: object to processing based on legitimate interests for reasons relating to your particular situation.

  • Data portability: receive data you provided in a structured, commonly used and machine-readable format where the legal requirements are met.

  • Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise a right, email info@javierzarzabardet.com, indicate the right you wish to exercise and provide the information reasonably necessary to identify your request. Additional information may be requested only where reasonably necessary to verify identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through www.aepd.es.

10. Security

Appropriate technical and organisational measures are applied to protect personal data against unauthorised access, loss, alteration or disclosure, taking into account the nature of the data, the available technology and the risks involved. However, no internet-based system can be guaranteed to be completely secure.

11. Children

The website and its professional contact form are not directed at children under fourteen years of age. Children under fourteen must not submit personal data without the authorisation of a parent or legal guardian.

12. Third-party websites and content

This policy does not govern processing carried out independently by third-party websites or platforms reached through links or embedded content. Please review the relevant provider’s privacy information before interacting with those services.

13. Changes to this policy

This Privacy Policy may be updated when the website, its processing activities or applicable legislation changes. The current version and its latest update date will always be published on this page.

14. Contact

For any question regarding this Privacy Policy or the processing of personal data, contact info@javierzarzabardet.com.