1. Data Controller
The data controller for this website is Enrique Tortosa, operating under the trade name holycrap.studio. For any enquiries regarding your personal data, please contact us at info@enriquetortosa.com.
2. Data We Collect
We may collect the following personal data when you interact with this website:
- Name, email address, and phone number (when you contact us via the contact form or email).
- Technical data such as IP address, browser type, device information, and browsing behaviour (collected automatically through cookies and server logs).
3. Purpose & Legal Basis
Your data is processed for the following purposes under the EU General Data Protection Regulation (GDPR):
- Contractual necessity — to respond to your enquiries and manage potential business relationships.
- Legitimate interest — to improve our website, analyse usage patterns, and ensure security.
- Consent — for any marketing communications, which you may withdraw at any time.
4. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes described above, or as required by applicable law. Contact enquiries are retained for a maximum of 24 months unless an ongoing business relationship is established.
5. Data Sharing
We do not sell your personal data. Data may be shared with trusted third-party service providers (e.g., hosting, analytics) who process data on our behalf under appropriate data processing agreements compliant with GDPR Article 28.
6. International Transfers
Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
7. Your Rights
Under GDPR, you have the right to:
- Access, rectify, or erase your personal data.
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time.
- Lodge a complaint with a supervisory authority (in Spain: Agencia Española de Protección de Datos).
To exercise any of these rights, contact us at info@enriquetortosa.com.
8. Updates
This policy may be updated periodically. The latest version will always be available on this website. Last updated: May 2026.
