This policy explains what personal data we collect when you use sintesi.studio, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Spanish Organic Law 3/2018 (LOPDGDD).
Short version: we collect as little as possible, we don't sell your data, and you can ask us to delete it at any time.
Data Controller
The data controller for this site is:
- Oriol Segarra Pol (trading as Síntesi)
- NIF: 45830466E
- Address: Av. Rosalía de Castro 2, 3-I, 15960 Ribeira, A Coruña, Spain
- Email: info@sintesi.studio
What we collect and why
- Newsletter signups. Email address and (optionally) first name. Purpose: send you the newsletter and occasional workshop announcements. Legal basis: your explicit consent (Art. 6(1)(a) GDPR). You can unsubscribe with one click from any email.
- Contact form submissions. Name, email, and the content of your message. Purpose: respond to your inquiry and, where applicable, take pre-contractual steps. Legal basis: pre-contractual measures at your request (Art. 6(1)(b) GDPR).
- Analytics. We use Umami, a privacy-friendly analytics tool that does not use cookies and does not identify individuals. We see aggregate page views and referrers only. Legal basis: legitimate interest in understanding site usage (Art. 6(1)(f) GDPR).
- Server logs. Our hosting provider and CDN (Vercel, Cloudflare) keep short-term technical logs that may include IP addresses, for security and debugging. Legal basis: legitimate interest in site security (Art. 6(1)(f) GDPR).
Recipients and processors
We rely on a small set of trusted processors who handle data on our behalf under GDPR-compliant data processing agreements. We do not sell or rent your data.
- Systeme.io (France, EU) — newsletter list management and email delivery. Privacy policy.
- Tally (EU) — contact form hosting and submission storage. Privacy info.
- Vercel Inc. (USA) — site hosting. International transfers are covered by Standard Contractual Clauses (SCCs) and Vercel's DPA.
- Cloudflare, Inc. (USA) — DNS, CDN, and security layer. Transfers covered by SCCs and Cloudflare's DPA.
- Notion Labs, Inc. (USA) — content management for blog posts and case studies. Notion does not receive your personal data; it stores published content we author.
International transfers
Some processors are based in the United States. These transfers rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework. You can request a copy of the relevant safeguards by emailing us.
How long we keep your data
- Newsletter subscribers: until you unsubscribe or ask us to delete your record.
- Contact form messages: up to 24 months, unless we're actively working with you or a legal obligation requires longer retention.
- Invoicing and tax records (for clients): 6 years, as required by Spanish tax law (Art. 30 Código de Comercio).
Your rights
Under GDPR and LOPDGDD you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting prior lawful processing
To exercise any of these rights, email info@sintesi.studio. We'll respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD).
Cookies
We don't use tracking, advertising, or analytics cookies. The site may set strictly technical cookies necessary for it to function (e.g. theme preference). Under Article 22.2 of the Spanish LSSI-CE and EDPB guidelines, no consent banner is required for these.
Security
We apply reasonable technical and organisational measures to protect your data — HTTPS everywhere, encrypted credentials, principle of least privilege, and trusted processors with their own security certifications.
Changes to this policy
If we change anything material, we'll update the date at the top and — for active newsletter subscribers — notify you in the next email.