Privacy policy

Last updated: 16 October 2026

This policy explains what personal data this site collects, why, and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.

Data controller

Owner: Iván Curto Romero

Location: Barcelona, España

Email: ivan@ivancurto.com

What data is processed

Only what you choose to send through the contact form or by email: name, email address and the content of your message.

This site uses no analytics or advertising tools and does not profile visitors.

Purpose and legal basis

To answer your enquiry and, where relevant, prepare a proposal. The legal basis is your consent when you send the message and steps taken at your request before entering into a contract (GDPR art. 6.1.a and 6.1.b).

Retention

Data is kept for as long as the conversation or professional relationship lasts and then for any legally required period. You can ask for it to be deleted at any time.

Recipients and processors

Data is not shared with third parties unless the law requires it. Netlify, Inc. (hosting) and Resend (delivery of the form email) act as processors. Both may process data outside the European Economic Area under appropriate safeguards such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to ivan@ivancurto.com. If you believe your data has not been handled properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Contact

Contact form

Send the goal, the timing and the business problem behind it. I will answer with a practical direction.

ivan@ivancurto.com