Privacy policy

Controller: [[NOMBRE O RAZÓN SOCIAL]]

Tax ID: [[NIF/CIF]]

Address: [[DIRECCIÓN COMPLETA]]

Contact: hola@daroscode.es

Only what you voluntarily provide in the contact form: name, email, company (optional), phone number (optional, if you’d rather I call you), budget range and your message.

If you fill in the quote form, also the answers you write about your project: what you do, what you need, deadlines, references and the rest of the questionnaire, along with your phone number and current website if you provide them.

If you tick the box in the first step, I also save the quote form while it is still half finished, so that you can pick it up later. Without that box ticked, what you type never leaves your browser until you press send.

For technical and security reasons I log the IP address and submission time, solely to limit abuse of the forms. I keep it truncated, so that it identifies the network and not the device. The one exception is the signing of a contract, where the full IP is kept because it is part of the evidence: see below.

When you hire me I create an account in your name on your portal (daroscode.es/cliente) with the minimum needed to write to you and know who you are: name and email address. There is no password: you get in from a link I email you, which works once and expires. I store a cryptographic fingerprint of that link, never the link itself.

When you accept a contract I record, as evidence of that acceptance, the date and time, the account it was accepted from, the full IP address, the browser used and a copy of that account’s name and email at that moment. The IP is deliberately not truncated here: truncated, it would stop serving the only purpose it is kept for, which is showing who accepted what and when.

If I send you a form, I keep what you answer, including what you leave half finished, so that you can carry on another day.

If you leave me material, I keep the files and notes you upload. Files are stored outside the public part of the server and are only downloaded with your session open or mine: no public address leads to them.

I also keep an internal history of what happens on your project — what was sent, what was accepted, what was uploaded and when — which I use to know where it stands.

The legal basis is the performance of the contract between us (article 6.1.b GDPR). For evidence of a contract’s acceptance, also the legitimate interest of both parties in being able to prove what was agreed, and compliance with my legal retention obligations (articles 6.1.c and 6.1.f).

All of it is kept for the duration of the relationship and, afterwards, for the tax and commercial limitation periods that require me to keep it. Evidence of a signature is kept for as long as the contract can have effect.

Material removed from view is permanently deleted from the server after thirty days. Technical logs, after ninety.

If at any point you want a copy of everything in your portal, or want me to delete it as far as the law allows, write to hola@daroscode.es.

Before proposing anything, I may send you a questionnaire about your business. It opens from a personal link, with no password, and I save your answers as you go, including unfinished ones, so you can pick up another day or on another device. I keep a cryptographic fingerprint of the link, never the link itself.

While you fill it in, your browser keeps a copy of anything that has not reached the server yet (if your connection drops, for example) so it can upload it as soon as possible. That copy never leaves your device.

The legal basis is taking pre-contractual steps at your request (Article 6(1)(b) GDPR). Answers are deleted twenty-four months after you send them, or after you last touched them if you never send them.

To answer your enquiry and, where appropriate, prepare a quote.

If you allowed me to save your half-finished quote, to keep it so you can carry on where you left off, and to send you one single reminder email if you abandon it, with a link to resume and another to tell me to stop writing. Never more than one reminder per quote.

I do not send unsolicited marketing and I do not share your data with third parties for advertising.

The consent you give by submitting the form, and the legitimate interest in responding to commercial enquiries.

For saving the half-finished quote and its reminder, the specific consent you give by ticking that box, together with the performance of pre-contractual steps taken at your request (article 6.1.b GDPR). You may withdraw it at any time using the link in the email itself or by writing to me.

Quotes left half finished and never sent are deleted after thirty days.

Enquiries that do not lead to a contract are kept for a maximum of twelve months.

If the enquiry leads to a contractual relationship, data is kept for its duration and the statutory tax and commercial retention periods.

Technical security logs and submission backups are kept for a maximum of ninety days.

I do not share data with third parties except where legally required.

The site is hosted by Hostinger International Ltd., acting as data processor with servers in the European Union.

This site uses no tracking or advertising cookies, so it shows no consent banner.

The client portal does use one strictly necessary cookie, exempt from consent: the session one, which keeps you identified while you browse and disappears when you close the browser. It cannot be used to follow you across other sites.

I measure how many people reach each page and which buttons get clicked, with a cookieless counter of my own. I do not store your IP address, your browser, the time, or any identifier: I simply add one to a per-day counter. There is no way to tell whether you are the same person as yesterday, or to reconstruct where you have been, and that is a deliberate trade-off.

The data never leaves my server and is not shared with anyone.

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@daroscode.es with proof of identity.

If you believe the processing does not comply with regulations, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).