Privacy Policy

Last updated: 2 September 2026

This Privacy Policy explains how personal data is processed when you visit jorgeguardia.com or contact Jorge Guardia through this website.

1. Data Controller

The data controller is:

Jorge Guardia
Website: jorgeguardia.com
Email: contact.jorgeguardia@gmail.com

2. Personal Data Collected

Personal data is only collected when you voluntarily provide it through the contact form.

The contact form may collect:

• Your name
• Your email address
• The subject of your enquiry
• The content of your message

The website does not currently offer user registration, customer accounts, newsletters or online purchases.

3. Purpose of Processing

Personal data submitted through the contact form is used exclusively to:

• Respond to enquiries and messages.
• Handle requests relating to photographs, image licensing, commissioned work or collaborations.
• Communicate with people who contact Jorge Guardia through the website.

Your data will not be used for unrelated marketing purposes without your consent.

4. Legal Basis

The processing of personal data submitted through the contact form is based on your consent when you voluntarily send an enquiry.

Where your enquiry concerns a potential contractual relationship, such as image licensing or commissioned work, the processing may also be necessary in order to take steps at your request before entering into a contract.

5. Data Retention

Personal data will only be retained for as long as necessary to respond to your enquiry and manage any subsequent communication or relationship arising from it.

Data may be retained for longer where necessary to comply with applicable legal obligations or to establish, exercise or defend legal claims.

6. Anti-Spam Protection – Cloudflare Turnstile

This website uses Cloudflare Turnstile to protect the contact form against spam, bots and automated abuse.

Turnstile analyses technical signals from the visitor’s browser and environment in order to distinguish legitimate visitors from automated traffic.

According to Cloudflare, Turnstile processes only the information necessary to provide this security function and does not access, store or transmit the contents entered into the contact form.

Cloudflare may process technical information as a service provider in connection with this security functionality.

7. Sharing of Personal Data

Personal data is not sold or shared with third parties for advertising purposes.

Some information may be processed by service providers necessary for the operation and security of the website, including hosting, email and anti-spam/security providers.

Data may also be disclosed where required by law.

8. International Data Transfers

Some technology providers used by the website may process data outside the European Economic Area.

Where applicable, such transfers will be carried out using the safeguards required under applicable data protection legislation.

9. Your Rights

Under applicable data protection legislation, you may request:

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure of your personal data.
• Restriction of processing.
• Objection to processing where applicable.
• Data portability where applicable.
• Withdrawal of consent at any time where processing is based on consent.

The AEPD recognises these rights and states that requests to exercise them are generally free of charge.

To exercise your rights, contact:

contact.jorgeguardia@gmail.com

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) if you believe that your personal data has been processed unlawfully. The AEPD specifically requires controllers to inform users about the identity of the controller, purposes, legal basis, recipients/transfers and mechanisms for exercising their rights.

10. Automated Decision-Making

No automated decision-making or profiling is carried out using the personal data submitted through the contact form.

11. Website Analytics

We use Independent Analytics, a self-hosted analytics solution for WordPress, to understand how visitors use this website and to help us improve its content, usability and performance.
Independent Analytics does not use tracking cookies to monitor website visitors and does not send analytics data to external analytics providers. The collected analytics data is generated and stored locally in our WordPress database.
To distinguish visits and provide approximate geographic statistics, the visitor’s IP address is processed temporarily together with browser/device information. The IP address itself is not stored. Instead, a one-way hashed identifier is generated. Approximate location information, such as country, region or city, may also be recorded.
The information collected may include pages viewed, sessions, referral sources, device and browser information, approximate geographic location, and engagement metrics such as session duration and bounce rate.
We use this information solely for statistical purposes and to improve the website. It is not used for advertising, profiling across other websites, or cross-site tracking. Analytics data is retained for a maximum period of 24 months.

12. Changes to this Privacy Policy

This Privacy Policy may be updated where necessary to reflect changes to the website, the services used or applicable legal requirements.

The current version will always be available on this page.