1. Data controller
The controller of your personal data is:
- Owner
- Renso Bautista
- Location
- Ecuador
- rensotwo@gmail.com
- Phone
- +593 98 662 5631
- Website
- rensotwo.com
This policy has been written in accordance with Ecuador’s Organic Law on Personal Data Protection (LOPDP) and, since I offer services to clients in the European Union, also in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
2. What data I collect
Data you provide in the forms
When you fill in a contact form I may collect:
- Name.
- Email address.
- Company or project (optional).
- The service you need and the address of your current website (optional).
- The message you write.
- The page of this website from which you sent the form.
- Whether or not you agree to receive email communications.
Please do not include sensitive data in your message (health, beliefs, bank details, etc.), as it is not needed to handle your inquiry.
Technical data
To protect the forms from automated submissions I use Cloudflare Turnstile, which analyzes technical data from your browser and connection (such as your IP address) to verify that you are a person. The server that hosts the website may also log basic technical data about visits (IP address, browser, date and requested page) for security and operational reasons.
If you accept analytics cookies, Google Analytics collects aggregated browsing data (pages visited, country, device, source of the visit and form submissions). If you do not accept them, no such data is collected. More details in the cookie policy.
3. What I use your data for
- Replying to your inquiry and, if you ask for it, preparing a proposal or quote for your project.
- Managing our professional relationship if we end up working together.
- Sending you news and content by email about WordPress and my services, only if you ticked the corresponding box. You can unsubscribe at any time using the link included in every email or by writing to me.
- Protecting the website from spam, abuse and automated submissions.
- Analyzing how the website is used, in aggregate, to improve it, only if you accept analytics cookies.
I do not make decisions based solely on automated processing that produce legal effects on you.
4. Legal basis
- Replying to your inquiry and preparing a proposal: taking pre-contractual steps at your request and, where applicable, performing the service contract.
- Email communications: your consent, which you give freely by ticking the box (it is not ticked by default and is not required to send the form). You can withdraw it whenever you want without affecting the lawfulness of prior processing.
- Website security: my legitimate interest in protecting the site and the forms from abuse.
- Analytics: your consent, which you give by accepting analytics cookies and can withdraw from “Cookie settings” in the footer.
5. How long I keep it
- Inquiries: as long as needed to handle them. If we do not end up working together, I keep them for a maximum of two years in case we resume the conversation, unless you ask me to delete them sooner.
- Clients: for the duration of the professional relationship and, afterwards, for the periods required by applicable tax and accounting regulations.
- Email communications: until you unsubscribe or withdraw your consent.
- Technical security data: for the time strictly necessary to fulfil its purpose.
6. Who I share it with
I do not sell or transfer your data to third parties. To provide the service I use providers that process data on my behalf (data processors), with whom the corresponding data processing agreement is in place:
- Brevo (Sendinblue SAS, France): receives the forms, sends me the email notification and stores the contacts and, where applicable, the mailing list. Brevo’s privacy policy.
- Cloudflare, Inc. (United States): anti-spam verification of the forms through Turnstile. Cloudflare’s privacy policy.
- Google Ireland Limited (Ireland): website usage analysis through Google Analytics, only if you accept analytics cookies. Google’s privacy policy.
- Hostinger International Ltd. (Cyprus): web hosting; stores the website files and processes visits and form submissions.
I may also disclose data to public authorities when there is a legal obligation to do so.
7. International transfers
Some providers may process data outside your country. When data is transferred outside the European Economic Area or Ecuador, it is done with the safeguards provided by law, such as adequacy decisions (for example, the EU-U.S. Data Privacy Framework in the case of Cloudflare) or standard contractual clauses approved by the European Commission.
8. Your rights
You can exercise the following rights over your data at any time:
- Access: find out which of your data I process.
- Rectification and updating: correct inaccurate or incomplete data.
- Erasure: ask me to delete your data.
- Objection: object to a specific processing activity.
- Suspension or restriction of processing.
- Portability: receive your data in a structured format.
- Withdraw your consent to email communications.
To exercise them, email me at rensotwo@gmail.com stating the right you want to exercise. I will reply within the legal deadlines. If needed to verify your identity, I may ask you for additional information.
If you believe I have not handled your request properly, you can file a complaint with Ecuador’s Superintendence of Personal Data Protection or, if you live in the European Union, with the supervisory authority of your country (in Spain, the Spanish Data Protection Agency).
9. Security
I apply reasonable technical and organizational measures to protect your data: the website runs over an encrypted connection (HTTPS), the forms are protected from automated submissions, access keys to the services are stored privately on the server and access to the data is restricted.
10. Minors
The services on this website are aimed at professionals and companies. I do not knowingly collect data from people under 18. If you are a minor, please do not send your data through the forms.
11. Changes to this policy
I may update this policy to reflect changes to the website, the services or the law. The date of the last update appears at the top of the page.