Privacy Policy

1. Data controller

The data controller is Javier María García Cuevas, operating commercially as EVERINIT (trade name), with tax ID 05339650Q and registered address at Rúa Carmen Conde, 3, A Coruña (Galiza), Spain.

For any privacy request, contact [email protected].

2. Data we process

We may collect the following categories of data:

• Contact data you provide (name, email, and optional meeting note).
• Scheduling data linked to booked meetings.
• Web analytics data, always subject to consent where required.
• Cookie consent preferences.

All data is provided directly by you; we do not obtain data from external sources or third parties.

3. Purposes and legal bases (GDPR art. 6)

• Handle contact requests: legal basis art. 6(1)(b) GDPR (pre-contractual steps at your request).
• Manage meeting bookings and scheduling: legal basis art. 6(1)(b) GDPR.
• Website analytics (Google Analytics): legal basis art. 6(1)(a) GDPR (consent). You can manage your consent at any time via the cookie settings page.
• Site security, abuse prevention, and legal defense: legal basis art. 6(1)(f) GDPR (legitimate interest).
• Compliance with legal obligations: legal basis art. 6(1)(c) GDPR.

4. Retention periods

• Contact requests: up to 12 months from last interaction.
• Booking/scheduling data: up to 24 months after the meeting, unless a longer legal period applies.
• Analytics data: according to GA4 retention settings. Standard GA4 properties typically allow 2 or 14 months for user/event data, configurable in Google Analytics.
• Cookie preferences: until you change your choice or clear browser data.

5. Recipients and processors

We do not sell personal data. We use service providers that may process data on our behalf, including:

• Cloudflare (site and booking-worker infrastructure/security).
• Google Calendar (booking and scheduling operations).
• Google Analytics (site analytics, consent-based).

6. International data transfers

Some providers (especially Google and potentially Cloudflare services) may involve transfers outside the EEA. Where applicable, these transfers rely on mechanisms recognized under EU law, such as Standard Contractual Clauses or other valid transfer tools.

7. Your rights

You may request access, rectification, deletion, objection, restriction, portability of your data, and the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, contact us at [email protected]. We will respond within one month of receiving your request (extendable to three months for complex cases).

To withdraw your consent to analytics cookies, you can do so directly from the cookie settings page.

You also have the right to lodge a complaint with the Spanish supervisory authority (AEPD): www.aepd.es (opens in new tab).

8. Automated decision-making and profiling

We do not carry out automated individual decision-making or profiling that produces legal or similarly significant effects, as referred to in GDPR art. 22.

9. Data Protection Officer

A formal Data Protection Officer (DPO) has not been appointed at this time, as it is not currently required for the controller’s present activity scope.

10. Policy updates

We may update this policy to reflect legal, technical, or business changes. We will post the latest revision date on this page.