Privacy and cookies

Who is responsible

The data controller is Bruno Ramalho (Cifra.cx), Avenida de la Hispanidad 82, 06450 Quintana de la Serena (Badajoz), Spain. Email: contact@cifra.cx.

What we collect

• Contact form: your name, email address, company (optional), your message and the language of the page. The form also records when it was opened and has a hidden field, both used only to filter automated spam.
• Emails you send us directly: your address and whatever you choose to write.
• Technical data: your IP address and basic browser information are processed by our hosting provider to deliver and protect the site. When you send the form, your IP address is also kept for up to 10 minutes to limit repeated submissions.

We do not use analytics, advertising or tracking tools, and we do not build profiles or make automated decisions about you.

Why we use it, and on what legal basis

• To reply to your enquiry and, if you ask, to prepare a proposal: steps taken at your request before a possible contract (GDPR article 6.1.b) and our legitimate interest in answering business enquiries (article 6.1.f).
• To keep the site and the form secure and free of spam: our legitimate interest (article 6.1.f).
• If you become a client, to keep the records the law requires, such as invoices: legal obligation (article 6.1.c).

How long we keep it

• Enquiries that do not lead to work: up to 24 months, then deleted.
• Client records: for as long as Spanish tax and commercial law requires.
• Rate limiting data: deleted automatically within 10 minutes.

Who receives it

We do not sell or rent your data, or share it for advertising. We use a small number of service providers who process it on our behalf and under contract:

• Cloudflare: hosting, content delivery and security for this website.
• Resend: delivers the contact form messages to our inbox.
• Google (Google Workspace): our email inbox.

Some of these providers are based in the United States or may process data outside the European Economic Area. In those cases the transfer relies on the European Commission adequacy decision for the EU-US Data Privacy Framework, where the provider is certified, or on the Standard Contractual Clauses approved by the Commission.

Cookies

This website does not set cookies for analytics, advertising or tracking, and it does not store anything in your browser. Fonts and the film are served from our own domain, so no third party sees your visit through them.

Our hosting provider, Cloudflare, may set a strictly necessary security cookie to tell people and malicious bots apart. Strictly necessary cookies do not need consent, which is why this site shows no cookie banner.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to us at contact@cifra.cx. We reply within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es), or to the authority in the EU country where you live.

Security

The site is served only over encrypted connections (HTTPS). Access to the messages you send is limited to the owner.

Children

This site is aimed at businesses and is not directed at people under 14.

Changes

We may update this policy. The date at the top shows the latest version.