Skip to content
Bernardo Gándara

Privacy policy

Last updated: October 11, 2026

On this page I explain what personal data I collect through this website, what I use it for and what rights you have. I do so in accordance with the European Union General Data Protection Regulation (GDPR), Spanish data protection law and, where applicable, Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.

1. Data controller

2. What data I collect and why

Contact form. When you write to me, I collect your name, your email, your company name (optional), the reason for your inquiry and your message. I use them only to read your inquiry, reply and, if we agree, prepare a proposal. I do not use them to send you advertising.

Visit statistics. If you accept it in the cookie banner, I use Google Analytics to learn, in aggregate, how many people visit the website, from which countries and what content they read. This helps me improve the website and the articles. Details are in the Cookie policy.

Security. Like any website, the server logs technical data such as the IP address to protect the site against attacks and unauthorized access.

3. Legal basis

  • Contact form: your consent, given by ticking the box before sending your message.
  • Statistics: your consent in the cookie banner. You can withdraw it at any time.
  • Security: the legitimate interest in keeping the website protected.

4. How long I keep your data

I keep form messages for as long as needed to handle your inquiry and for no more than two years after our last contact, unless we start a professional relationship. In that case they will be kept for as long as it lasts and for the periods required by law. You can ask me to delete them earlier at any time.

5. Who it is shared with

I do not sell or transfer your data to anyone. Only the providers I need to run the website can access it, always under contract and with safeguards:

  • SERED, the web hosting company whose servers store the website and the form messages.
  • Google (Google Analytics), only if you accept statistics cookies. Google may process data outside the European Union, with the safeguards of the EU-US Data Privacy Framework and standard contractual clauses.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability (in Mexico, ARCO rights) at any time, and withdraw your consent. To do so, write to contacto [arroba] bernardogandara [punto] com stating which right you wish to exercise. I will reply within the legal deadline.

If you believe your data has not been handled properly, you can file a complaint with the data protection authority in your country. In Spain, this is the Spanish Data Protection Agency (www.aepd.es).

7. Minors

This website is not aimed at people under 18 and I do not knowingly collect their data.

8. Changes to this policy

If I change the way I process data, I will update this page and indicate the date of the last change.