Privacy policy

[01]Controller: Pedro Mateo (ByteBalear).

[02]Contact details: bytebalear@gmail.com · Phone/WhatsApp: +34 685 825 254.

[03]No Data Protection Officer is required given the nature of the processing activities.

[01]Data provided directly via forms: name, email, phone, company information, goals, budget, preferred channels and free-text notes.

[02]Browsing data: IP address, device identifiers and aggregated analytics, only when consent has been granted through the cookie banner.

[01]Responding to enquiries, audit requests and proposals: consent (Art. 6.1.a GDPR) and pre-contractual measures (Art. 6.1.b GDPR).

[02]Sending updates, resources or promotional communications: explicit consent with opt-out available in every message.

[03]Aggregated analytics to improve the service: legitimate interest pursued by the controller, limited to anonymised data or subject to prior consent for analytics cookies.

[01]Third-party services involved: Airtable (lead capture), Google Workspace (email), Notion (project follow-up), Formspree (forms) and Vercel (hosting).

[02]Appropriate safeguards are in place through data processing agreements and, where applicable, Standard Contractual Clauses or Data Privacy Framework certification.

[01]Commercial data is kept while the relationship remains active or until the user requests deletion.

[02]Accounting and invoicing data is stored for the statutory periods required under Spanish tax regulations.

[03]Email threads and project notes are reviewed annually to remove outdated information.

[01]You may exercise your rights of access, rectification, erasure, objection, restriction and portability by emailing bytebalear@gmail.com.

[02]If you believe your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

[03]No automated individual decisions or profiling with legal effects are carried out.

[01]Technical measures include TLS encryption, role-based access, strong passwords and multi-factor authentication. Organisational measures include confidentiality agreements and documented procedures.

[02]Security incidents will be reported to users and the supervisory authority when legally required.

[01]Services are not targeted at individuals under 18. If we become aware of personal data belonging to a minor, we will delete it immediately.