• Controller: Miguel Ángel Peña ("Mike Colangelo")
• Tax ID: PENDING
• Address: PENDING
• Contact: info@mikecolangelo.dev

No data protection officer has been appointed, as none of the cases in article 37 GDPR apply.

This site has no forms, uses no analytics and collects no data automatically while browsing. Personal data is processed only when the individual chooses to make contact.

• Contact by email, WhatsApp or social media: the data the person provides (name, email address or phone number and the content of the message), in order to answer the enquiry and, where appropriate, prepare a proposal. Legal basis: pre-contractual measures at the request of the data subject (art. 6.1.b GDPR) and legitimate interest in replying (art. 6.1.f GDPR).
• Booking a call: name, email address, time slot and any data provided when booking, in order to manage the video call and send the confirmation and reminders. Legal basis: pre-contractual measures (art. 6.1.b GDPR).
• Provision of contracted services: identification and billing data required to carry out the engagement and to meet tax and accounting obligations. Legal basis: performance of a contract (art. 6.1.b) and compliance with legal obligations (art. 6.1.c).

No automated decision-making or profiling takes place. No special categories of data are processed.

Communications that do not lead to a professional relationship are kept for as long as needed to answer the enquiry and for up to one year afterwards, unless earlier deletion is requested.

Client data is kept for the duration of the relationship and, afterwards, for the applicable statutory limitation periods: six years for commercial and accounting records (Spanish Commercial Code) and four years for tax obligations (General Tax Act).

Data is not shared with third parties except where legally required. Some providers do act as data processors, under a contract compliant with article 28 GDPR:

• The hosting provider of the server running the site and the booking calendar.
• The professional email provider, used to receive and answer messages.
• Messaging platforms and social networks, only where the individual chooses that channel; in that case the processing is also governed by the platform’s own terms.

The booking calendar is a self-hosted instance on the owner’s server: booking data is not shared with an external calendar service.

No international data transfers outside the European Economic Area take place. Should they become necessary, prior notice will be given and they will rely on the safeguards in chapter V GDPR.

Anyone may exercise the following rights free of charge by writing to info@mikecolangelo.dev with adequate identification:

• Access to their personal data.
• Rectification of inaccurate data.
• Erasure of data that is no longer necessary.
• Restriction of processing in the cases provided for.
• Objection to processing based on legitimate interest.
• Portability of the data provided.

Requests are answered within one month at the latest. If the reply is not satisfactory, there is a right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD).

The site is served entirely over HTTPS. Technical and organisational measures proportionate to the risk are applied: restricted server access, credential encryption, backups and component updates.