Privacy policy

Política de privacidad · Last updated: 18 October 2026

Protecting your personal data matters to me. This privacy policy explains what data is processed when you visit this website or contact me, why, and what rights you have. It is based on the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. Who is responsible for your data

2. Visiting this website

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you open the website, the hosting provider automatically processes technical data that your browser sends, such as your IP address, the date and time of access, the page requested, and your browser and operating system. This is necessary to deliver the website securely and reliably.

• Legal basis: legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR).
• Retention: server logs are kept by the hosting provider for a short period only and then deleted.
• Transfer outside the EU: Netlify may process data in the USA. Netlify is certified under the EU–US Data Privacy Framework and also uses the EU Standard Contractual Clauses for international transfers.

3. No cookies, no tracking

This website does not use cookies, analytics or tracking tools, and it does not load fonts, maps or other content from third-party servers.

4. Contacting me by email

If you send me an email, for example to ask a question or to be notified when sessions start, I process the data you provide: usually your name, email address and the content of your message.

• Purpose: to answer your request and, if you ask for it, to let you know when the first sessions and dates are available.
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and, for notifications about upcoming sessions, your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by sending a short email; this does not affect the lawfulness of processing before withdrawal.
• Retention: I keep your data only as long as needed to handle your request. If you asked to be notified, I keep your email address until I have informed you about the sessions or until you withdraw your consent, whichever comes first, and then delete it, unless legal obligations require longer storage.
• Email provider: my email account is provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google may process data in countries outside the EU, including the USA, on the basis of the EU–US Data Privacy Framework and the EU Standard Contractual Clauses.

I do not sell your data or share it with third parties for advertising purposes.

5. Your rights

You have the right to:

• access the personal data I hold about you (Art. 15 GDPR);
• have inaccurate data corrected (Art. 16 GDPR);
• have your data deleted (Art. 17 GDPR);
• restrict the processing of your data (Art. 18 GDPR);
• receive your data in a portable format (Art. 20 GDPR);
• object to processing based on legitimate interest (Art. 21 GDPR);
• withdraw your consent at any time (Art. 7(3) GDPR).

To exercise any of these rights, simply email palmtreepalette@gmail.com.

You also have the right to lodge a complaint with a data protection supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.

6. Is providing data required?

You can visit this website without providing any personal data yourself. If you want to contact me, I need at least your email address to be able to reply.

7. Changes to this policy

I may update this privacy policy if the website or the legal requirements change. The current version is always available on this page.