Privacy
Privacy policy
This notice explains how personal data is handled on ivanlopezmartinez.com. It is intended to be clear and factual; the site does not request clinical records through its contact or account forms.
1. Data controller
Iván López Martínez
Contact: info@ivanlopezmartinez.com
Website: ivanlopezmartinez.com
2. Data and purposes
- Professional enquiries: name, email, role, organisation, interest, message and campaign source, used only to answer and manage the enquiry.
- Protocol accounts: email, name, profession, country and protocol/source metadata, used to create the account, secure access and understand which resources are useful.
- Analytics: pseudonymous device and usage data is sent to Google Analytics only after consent.
- Security: limited request data is processed to prevent abuse. For valid contact attempts, a one-way hash derived from the source IP and submission timestamps is retained for no more than ten minutes for rate limiting; the raw address is not written to that control file.
3. Legal bases
Consent is used for optional analytics and account registration. Enquiries are processed to take steps requested by the sender before a possible professional engagement. Essential security and delivery processing is based on the legitimate interest in operating a safe website.
4. Providers and transfers
- Hostinger: website and email hosting, including delivery of professional enquiries.
- Supabase: account authentication and private protocol delivery.
- Google Analytics: aggregate usage measurement only after an affirmative choice.
These providers process only the data needed for their stated function under their contractual and privacy terms. Where processing occurs outside the European Economic Area, the provider's applicable transfer mechanism, such as standard contractual clauses or an adequacy framework, is used. Provider details are available in the cookie policy and on request.
5. Retention
- Enquiries: while the enquiry or resulting professional relationship is active. If no engagement follows, the enquiry is scheduled for deletion no later than 12 months after the last substantive contact, unless a legal obligation or the establishment, exercise or defence of a claim requires longer retention.
- Protocol accounts: until the account holder requests deletion or the service is withdrawn. No automatic deletion based solely on inactivity is currently claimed.
- Consent and analytics: the choice remains in the browser until changed or cleared. Analytics cookies are removed when consent is withdrawn where the browser permits it; Google Analytics data follows the retention setting of the property.
- Abuse controls: the contact-form rate-limit record described above expires after ten minutes. Infrastructure security logs follow the documented periods of the relevant hosting provider.
6. Your rights
You may request access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time, by emailing info@ivanlopezmartinez.com. Identity may be verified before fulfilling a request. Requests are answered without undue delay and normally within one month. You may also complain to your competent data-protection authority; in Spain, this is the AEPD.
7. Health data and minors
Do not send medical records, diagnostic images or other sensitive health information through the public forms. The site and protocol account service are not directed at children.
8. Automated decisions
No solely automated decision with legal or similarly significant effects is made from the data collected by this website.
9. Changes
This notice will be updated when the processing or providers change. The current date is shown at the top.