← Back

(Legal)

Privacy policy

Last updated: 6 October 2026

1. Data controller

The person responsible for processing your data is:

  • Owner: Lander Laraudogoitia
  • Tax ID (NIF): 79174566X
  • Address: Kale, Arraun Kalea, 1, 48620 Plentzia, Bizkaia
  • Email: lander.laraudo@gmail.com

2. What data I process

This website is a portfolio. It has no forms, user accounts or shop, so you don't need to give any data to browse it.

I only process personal data in these cases:

  • When you contact me by email or WhatsApp: your name, email address or phone number, the content of your message and any other information you choose to include.
  • Technical visit data: like any web server, the hosting provider automatically logs data such as your IP address, browser type, date and time and the page requested. This is used only to keep the site running and protect it from attacks; I don't use it to identify you or build profiles.

Please don't send especially sensitive data (health, beliefs, etc.) through these channels.

3. What I use your data for

  • Replying to your enquiries and messages.
  • Preparing quotes and proposals if you ask for them.
  • Managing the project and our professional relationship if we work together (communication, invoicing).
  • Keeping the website secure and working.

I don't send advertising or newsletters, and I don't make automated decisions about you.

4. Legal basis

  • Your consent (Art. 6.1.a GDPR), when you contact me on your own initiative.
  • Pre-contractual steps or the performance of a contract (Art. 6.1.b GDPR), when you request a quote or we work together.
  • Compliance with legal obligations (Art. 6.1.c GDPR), such as tax obligations.
  • Legitimate interest (Art. 6.1.f GDPR) in keeping the website secure, for technical visit data.

5. How long I keep it

  • Enquiry messages: for as long as needed to answer them and, at most, one year if no professional relationship follows.
  • If we work together: for the duration of the relationship and then for the periods required by law (for example, tax and commercial law).
  • Hosting technical logs: for the limited period set by the provider.

6. Who it is shared with

I don't sell or pass on your data to third parties unless legally required. To run the website and communicate, I use the following providers, who may access data only to provide their service to me:

  • Vercel Inc. (USA): website hosting.
  • Google LLC (USA): email service (Gmail).
  • WhatsApp Ireland Ltd. (Meta): if you choose to contact me via WhatsApp. In that case, WhatsApp also processes your data under its own privacy policy.

7. International transfers

Some of these providers may process data outside the European Economic Area. They do so with the safeguards required by the GDPR: the EU-US Data Privacy Framework, under which these companies are certified, or the Standard Contractual Clauses approved by the European Commission.

8. Your rights

At any time you can exercise your rights of:

  • Access to your data.
  • Rectification of inaccurate data.
  • Erasure of your data.
  • Objection to and restriction of processing.
  • Data portability.
  • Withdrawing your consent, without affecting processing carried out before.

To do so, email me at lander.laraudo@gmail.com stating which right you wish to exercise. I will reply within one month at the latest.

If you believe your data has not been handled properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Security

The website is always served over an encrypted connection (HTTPS), and I apply reasonable technical and organisational measures to protect your data against loss, unauthorised access or misuse.

10. Changes to this policy

I may update this policy if the website or the law changes. The date of the last update is shown at the top of the page.

More information on cookies in the cookie policy.