Reviewed: 22 September 2026
Who processes your data and how to get in touch
The controller for this personal website is Javier Concha López, working professionally as Javier Concha. This policy covers https://javierconcha.com. For privacy enquiries or to exercise your rights, write to email address.
It covers this website and enquiries addressed to its controller. SANTACONCHA has its own website and privacy information; following a link to the agency does not automatically send it your contact details.
Information you may provide
When you email me or contact a linked professional profile, you may provide your name, email address, phone number, company, role and the contents or attachments of your message. Please only send what is needed to explain your enquiry.
This website has no registration or promotional forms, user accounts or payment gateway. It does not include reCAPTCHA. Email buttons open your email application: a message is only sent when you choose to send it from that application.
Purposes and legal bases
If your message requests a proposal or service, the information is used to reply and, where appropriate, prepare or carry out the professional relationship, under Article 6(1)(b) of the General Data Protection Regulation (GDPR).
General professional enquiries may be handled on the basis of the legitimate interest in maintaining that communication, under Article 6(1)(f) GDPR, respecting your rights and the purpose of the enquiry. Applicable legal obligations are addressed under Article 6(1)(c).
Sending a message does not subscribe you to advertising or a mailing list. Any proposed additional use based on consent will be explained separately. You can withdraw consent without affecting processing carried out before withdrawal.
Technical browsing information
To serve the pages, the server receives technical information such as the IP address, request time, requested URL and browser information. The hosting service may generate logs needed to deliver the service, resolve incidents and protect it against abuse.
The website code does not include Google Analytics, Tag Manager, advertising pixels or session recording tools. Animations run in your browser without sending interaction data to an analytics system or building commercial profiles.
Fonts and links to external services
The Wix Madefor Display font is requested from Google Fonts. This request connects your browser to Google servers and communicates technical information, including your IP address. The absence of advertising cookies should not be confused with the absence of external connections. If the font is unavailable, the content remains readable with a fallback font.
LinkedIn, X and Instagram profiles and other linked websites are external services. This site uses links, not embedded social widgets. Their own policies also apply when you open them. Messages sent within a social network are also subject to that platform’s processing.
How long information is kept
Enquiry information is retained while needed to reply and manage follow-up. Where a professional relationship exists, the information necessary to fulfil it and address applicable legal obligations or related liabilities is retained.
When its purpose ends, information should be erased or, where required by law, restricted during the applicable periods. Different records have different purposes: a preliminary conversation is not the same as documentation for a contracted service.
Providers, recipients and transfers
Hosting and email providers may access information needed to deliver their services. When acting as processors, they must do so under the conditions and safeguards required by data protection law. Your data is not sold or disclosed for unrelated advertising.
If your enquiry requires a project to be handled by SANTACONCHA, you will be informed who will manage the service and what information is needed. Disclosures required by law may also apply.
International providers or platforms may involve processing outside the European Economic Area. Where relevant, the safeguards set out in Chapter V GDPR must apply. You can request information about the processing of your enquiry and applicable safeguards at email address.
Your rights
You can request access to your data and correction of inaccurate information. You can also request erasure or restriction, object to processing based on legitimate interests and request portability where its conditions are met. You can withdraw consent at any time where processing relies on it.
Write to email address, specify the right you wish to exercise and explain how the information can be located. Additional identity information will only be requested when necessary. Requests will be answered within the time limits set by the GDPR.
If you believe processing infringes your rights, you can lodge a complaint with the Spanish Data Protection Agency: aepd.es.
Accuracy, other people’s data and security
Please keep the information you share accurate and up to date. If you provide another person’s information, you must have a basis for sharing it and have informed them where required. Avoid sending sensitive information or unnecessary documents.
Access to communications should be limited to people who need to handle them. Safeguards must reflect the risks of processing; no Internet channel can promise absolute security.
Legislation, cookies and updates
This information is framed by Regulation (EU) 2016/679 and Spanish Organic Law 3/2018 on personal data protection and digital rights. Browser technologies are explained in the Cookie policy.
This policy will be updated when processing or services change. The review date identifies this version. For further information, contact email address.