1. Data controller
- Owner: Yohangel Andres Ramos Quiñones (trading name: Aguila Dev)
- Tax ID (NIF): 54949225V
- Address: Madrid, España
- Email: hola@aguila.dev
- Phone: +34 614 47 97 07
2. Data we process
- Contact form: name, email, what you want to build and your message.
- Email or phone communications: the data you share with us.
- Clients: contact and billing data needed to provide the service.
- Technical data: server logs (IP, browser, date, page) kept by our hosting provider for security.
3. Purposes and legal basis
- Answering your enquiry and preparing a proposal if you ask: your consent (art. 6.1.a GDPR).
- Providing contracted services: performance of a contract (art. 6.1.b).
- Legal accounting and tax obligations: legal obligation (art. 6.1.c).
- Site security: legitimate interest (art. 6.1.f).
4. Retention
- Enquiries that don’t lead to a contract: up to 12 months after the last contact.
- Clients: for the duration of the relationship and then the legal periods (6 years commercial, 4 years tax).
- Technical logs: the limited period set by the hosting provider.
5. Recipients and processors
We do not sell or share your data, except where required by law. We use processors under art. 28 GDPR agreements:
- Hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, EE. UU.
- Contact form emails: Resend (Plus Five Five, Inc.), EE. UU.
6. International transfers
Some providers are based in the United States. Transfers rely on appropriate safeguards: the EU-US Data Privacy Framework where the provider is certified or, otherwise, the European Commission’s standard contractual clauses.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability and withdraw consent at any time by emailing hola@aguila.dev. We reply within one month. We do not carry out automated decision-making or profiling.
You may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Minors
This site is not aimed at children under 14 and we do not knowingly process their data.
9. Security
We apply appropriate technical and organisational measures: HTTPS, restricted access, vetted providers and data minimisation.
10. Changes
We may update this policy; the current version and its date are always published here.