Privacy Policy
Last updated 12 September 2026 · Also available: Cookie Policy · Legal Notice
On this page
1. Data controller
Hugo Veiga, self-employed professional registered in Spain. Business address: C. Buenos Aires, 10, Entr. 4a, 08029 Barcelona, Spain. Email: hola@veiga.dev.
I am the controller of the personal data described in this policy.
2. Contact form data
When you write to me through the contact form, I process the following data:
| DATA | PURPOSE | LEGAL BASIS |
|---|---|---|
| First and last name | Addressing you properly in my reply | Art. 6(1)(b) GDPR — pre-contractual steps at your request |
| Email address | Replying to your enquiry | Art. 6(1)(b) GDPR — pre-contractual steps at your request |
| Message content | Understanding what you need and, where relevant, preparing a proposal | Art. 6(1)(b) GDPR — pre-contractual steps at your request |
| IP address and browser data | Spam filtering by the provider that processes the form | Art. 6(1)(f) GDPR — legitimate interest in protecting the inbox from automated submissions |
First and last name
Email address
Message content
IP address and browser data
3. Whether the data is required
Your name, email address and message are required in order to reply to you. Without them I cannot answer your enquiry.
I do not use your data for advertising, I do not sell it or share it with third parties for marketing purposes, and no automated decision-making or profiling is carried out on it.
4. Testimonials published on this site
Some pages publish client testimonials showing the person's name, role and their company's name or logo. The legal basis is the consent of the person giving the testimonial (art. 6(1)(a) GDPR), obtained expressly before publication.
That consent can be withdrawn at any time by writing to hola@veiga.dev, and the testimonial will be removed from the site. Testimonials stay published for as long as consent remains in place.
5. Site usage statistics
This site uses Cloudflare Web Analytics to understand which pages are visited and how well they perform. It sets no cookies, stores nothing in your browser and does not fingerprint it. Cloudflare records the page viewed, the referring site, the browser and operating system type and the country; the IP address serves only to work out the country and is not kept with the statistics.
The legal basis is my legitimate interest (art. 6(1)(f) GDPR) in knowing how the site is used and keeping it running well. Cloudflare acts as a processor under article 28 GDPR, and the data reaches me only as aggregate figures.
6. Retention periods
Enquiries that do not lead to a project are deleted 12 months after the last contact.
If we do end up working together, the related documentation is kept for 6 years, in line with article 30 of the Spanish Commercial Code and the limitation period in article 66 of the Spanish General Tax Act.
7. Data processors
I do not sell or disclose your data to third parties. The only parties with access are the providers that keep this site running — web hosting, usage statistics, contact-form processing and email — acting solely to deliver that function and bound by a data processing agreement under article 28 GDPR.
Some of them process data outside the European Economic Area, under the EU-U.S. Data Privacy Framework or Standard Contractual Clauses. You can ask me for the identity of each provider and a copy of those safeguards by writing to hola@veiga.dev.
8. Rights of the data subject
You can exercise your rights of access, rectification, erasure, restriction of processing, portability and objection by writing to hola@veiga.dev. Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
I will respond within one month, extendable by a further two months for complex requests, under article 12(3) GDPR.
If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.