Skip to content

Privacy policy

How Cristian.code processes your personal data, in accordance with the GDPR and Spanish Organic Law 3/2018 (LOPDGDD).

Last updated: October 17, 2026

On this page
  1. 1. Data controller
  2. 2. What data we process, why and on what legal basis
  3. 3. How long we keep your data
  4. 4. Who we share your data with
  5. 5. International transfers
  6. 6. Your rights
  7. 7. Minors
  8. 8. Security
  9. 9. Changes to this policy

1.Data controller

The controller of your personal data is:

No data protection officer has been appointed because it is not mandatory for this activity.

  • Identity: Cristian Alejandro Arroyave (Tax ID Y9757185R)
  • Address: Carrer Camí Vell de València, 23, 03570 Villajoyosa (Alicante)
  • Privacy contact: alejomultimedia18@gmail.com

2.What data we process, why and on what legal basis

We process only the data needed for each purpose:

  • User account. Data: name, username, email, phone (optional) and password, which is stored as a hash and never in plain text. If you sign in with Google, we receive your name, email and profile picture. Purpose: creating and managing your account. Basis: performance of the relationship you request when registering (Art. 6.1.b GDPR).
  • Contact. If you write to us on WhatsApp, we process your number, profile name and the content of your message. Purpose: answering your enquiry or quote request. Basis: pre-contractual measures at your request (Art. 6.1.b GDPR).
  • Security and operation. Data: IP address, browser and session data. Purpose: keeping your session, preventing abuse and limiting login attempts. Basis: legitimate interest in the security of the Site (Art. 6.1.f GDPR).
  • Visit analytics, only if you accept analytics cookies. Data: an anonymous browser identifier (first-party cookie), the IP address of your first visit, device type, language, referring page and pages visited. Purpose: counting visits and visitors and knowing how many people are online. With your consent, Google Analytics is also used, without advertising features. Basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time.

3.How long we keep your data

User account: while you keep it and, after you close it, blocked for the limitation periods of possible liabilities.

Sessions: up to 30 days from last activity.

Own analytics: we keep visit records for 3 months and then delete them, along with the data of visitors inactive in that period. If you withdraw your consent, we stop recording new visits.

WhatsApp contact: the time needed to answer your enquiry and, if there is a contractual relationship, the applicable legal periods.

Google Analytics: according to the retention periods set in the measurement property.

4.Who we share your data with

We do not sell your data. We only share it with providers who process it on our behalf, under the processing agreement required by Article 28 GDPR, or with anyone the law requires:

  • Hosting and infrastructure providers of the Site and its database.
  • Google: Google Analytics (only with your consent) and, if you choose that method, Sign in with Google.
  • WhatsApp (Meta): if you choose to contact us on WhatsApp, the service is governed by its own terms.
  • Public authorities, judges and courts, where there is a legal obligation.

5.International transfers

Some providers, such as Google, may process data outside the European Economic Area. In that case, the transfer relies on GDPR safeguards, such as the adequacy decision for the EU-US Data Privacy Framework or standard contractual clauses.

6.Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time without affecting the lawfulness of earlier processing.

If you believe your data is not being processed properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

  • Write to alejomultimedia18@gmail.com stating the right you are exercising and proving your identity.
  • We reply within one month at most (Art. 12 GDPR).
  • You can edit your account data from your profile.

7.Minors

The Site is not aimed at children under 14. To register you must be at least 14 years old (Art. 7 LOPDGDD). If we detect data of a minor without the necessary authorisation, we will delete it.

8.Security

We apply appropriate technical and organisational measures: hashed passwords, encrypted connections (HTTPS), role-based access and attempt limits. If a security breach occurs that poses a risk to your rights, we will notify the AEPD and, where appropriate, you.

9.Changes to this policy

We may update this policy to reflect legal or Site changes. The current version is the one published here, with its update date.