Privacy Policy

This policy explains how the personal data you provide through this website is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

1. Data controller

2. What data I collect and for what purpose

When you fill in the contact form on this website, I collect the data you provide me: your name, your business name, your email, your phone number (if you provide it) and the message you write about your project. I use this data solely to respond to your request, prepare a quote for you and contact you commercially about the service you are enquiring about. I do not use it to build advertising profiles, nor do I share it with third parties for commercial purposes.

In addition, if you accept the cookie banner on this website, analytics and advertising tools are activated that collect data about your browsing —IP address (truncated or pseudonymised), device and browser type, pages viewed, time spent, interactions with the page (mouse movements, scrolling, clicks) and, in the case of advertising, information on whether you reached the site through an ad— in order to measure site performance, understand how visitors use it, and measure/optimise advertising campaigns. These tools remain disabled by default and only load after your explicit consent. Details of each cookie are set out in the Cookie Policy.

3. Legal basis

Processing of the contact form is based on your consent, freely given when you submit it or when you contact me by email or WhatsApp (Art. 6(1)(a) GDPR), and on the application of pre-contractual measures at your request, when you ask me for a quote (Art. 6(1)(b) GDPR).

Processing for analytics purposes (Google Analytics 4, Microsoft Clarity) and for advertising/remarketing (Google Ads) is based exclusively on your prior, informed and revocable consent (Art. 6(1)(a) GDPR and Art. 22 of the Spanish LSSI-CE), given through the cookie banner. These tools do not run unless you accept, and you can withdraw your consent at any time from the Cookie Policy.

4. Retention

I retain the data from the form for as long as our communication lasts and, if we go on to work together, for the period legally required for tax and commercial obligations (generally, up to 6 years). If the relationship does not go ahead, I delete your data as soon as it is no longer necessary to handle your enquiry.

Data collected by Google Analytics 4 is retained, depending on its configuration, for 2 months at event level on Google's servers; the associated cookies (_ga, _ga_*) last up to 2 years in your browser. Google Ads cookies (_gcl_au, IDE) last between 90 days and 13 months. Microsoft Clarity cookies (_clck, _clsk, CLID) last between 1 day and 1 year. Full details are set out in the Cookie Policy.

5. Recipients and data processors

In order to provide the service and, where applicable, measure use of the website and my advertising campaigns, the following providers may access your data as data processors or recipients:

• Formspree, Inc. (United States) — data processor that handles submissions of this website's contact form.
• Google Ireland Limited / Google LLC — provides Google Analytics 4 (audience measurement and browsing behaviour) and Google Ads (conversion measurement and advertising remarketing), both active only if you accept the cookie banner. Depending on the service, Google acts here as a data processor or as an independent controller for processing arising from its own advertising policies.
• Google LLC — Search Console — a property-verification tag (meta tag google-site-verification) is used to confirm to Google that this site belongs to me. This tag does not install cookies or collect browsing data by itself; it only allows me to check in the Search Console dashboard how Google indexes the site.
• Microsoft Corporation — provides the Microsoft Clarity service (behaviour analysis through heatmaps and anonymised session recordings), active only if you accept the cookie banner.
• Meta Platforms Ireland Ltd. (WhatsApp) — if you contact me through the WhatsApp button on this website, the conversation is additionally governed by WhatsApp/Meta's privacy policy.

The Geist and Geist Mono typefaces on this website are served locally, from this same server: they do not connect to Google nor transmit your IP address to any third party.

I do not share your data with third parties for advertising purposes beyond those described here, nor do I sell it to anyone.

6. International transfers

The use of Formspree (contact form), Google (Analytics 4, Ads and Search Console), Microsoft (Clarity) and Meta (WhatsApp) may involve transfers of your data —or your IP address— outside the European Economic Area, specifically to the United States. These providers rely on safeguards recognised by the GDPR for this type of transfer, such as the EU Standard Contractual Clauses and/or their adherence to the EU-U.S. Data Privacy Framework (DPF), which require a level of protection equivalent to that of the EU. You can check each provider's DPF adherence status at dataprivacyframework.gov.

When I use Google Analytics 4 and Google Ads, I activate Google's Consent Mode v2: if you do not accept the cookie banner, Google receives only aggregated, non-identifying signals (no analytics or advertising cookies), never data that identifies you.

7. Your rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability (the equivalent of Spain's ARCO-POL rights), as well as withdraw your consent —including consent given for analytics or advertising, from the Cookie Policy— without affecting the lawfulness of processing prior to its withdrawal, by writing to contacto@carlosmorenodigital.com. If you believe your data has not been processed correctly, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), the competent supervisory authority in Spain (www.aepd.es).

8. Automated decisions

No automated decisions with legal effects are made, nor are profiles built from your data beyond the standard statistical and advertising segmentation of Google Analytics 4 and Google Ads, which is only activated with your consent and produces no legal effects and does not significantly affect you.

9. Cookies

This website uses technical cookies necessary for it to function and, only if you accept the cookie banner, analytics cookies (Google Analytics 4, Microsoft Clarity) and advertising cookies (Google Ads). Until you give your consent, these tools remain disabled and no analytics or advertising cookie is installed in your browser. You can view the full list of cookies, their owners, purposes and duration, and learn how to accept, reject or withdraw your consent, in the Cookie Policy.