Privacy policy.

1. Data controller

Guillem Navarro Vargas (hereinafter, Guillem Navarro)
Based in: Barcelona (España)
Email: info@guillemnavarro.com
Website: guillemnavarro.com
Qualification: Master's Degree in Industrial Engineering, awarded in Spain
Professional association: Col·legi d'Enginyers Industrials de Catalunya, membership number 21530
Code of conduct: the association's code of ethics

2. Data collected

This site processes only the data you provide or authorise:

• Contact form: name, email address, subject and the content of your message.
• Direct email: whatever data you include when writing to the contact address.
• Usage measurement, only if you accept it: page visited, language, device type, browser, operating system, screen width, time zone, referring domain and interaction events (reading depth, clicks on projects, filters and links, and time spent). Your IP address is not stored.
• CV download: the PDF document you generate yourself carries, in the footer and as a watermark, the IP address it was generated from and the date. The server does not store it: it travels back with you and lives only inside your copy, as a traceability measure against unauthorised distribution (legitimate interest, art. 6.1.f GDPR).

Visit measurement is handled by a system hosted on this same server, with no third party involved, and it only runs if you accept it in the notice shown when you arrive: until then no data is sent. It sets no cookies. To count unique visitors, the server uses your IP address and your browser identifier transiently: together with a salt that rotates every 24 hours it derives a daily identifier and then discards them, so the IP address is never stored and the identifier cannot recognise you from one day to the next or work out who you are. If your browser sends the "Do Not Track" or "Global Privacy Control" signal, nothing is recorded even if you accept. Everything else the site keeps in your browser (your theme, your choice about statistics and the interface state during your visit) is detailed in section 6.

3. Purpose and legal basis

Data is processed for the sole purpose of handling and answering your enquiry and, where applicable, managing the professional relationship arising from it.

The legal basis is your consent (art. 6.1.a GDPR) when submitting the form and, where the exchange leads to a contractual relationship, the performance of a contract or pre-contractual measures (art. 6.1.b GDPR).

Usage statistics rely on your consent (art. 6.1.a GDPR and art. 22.2 of the Spanish LSSI-CE), which you give or refuse in the notice on your first visit and can withdraw at any time via "Cookie settings" in the footer of every page. Withdrawing it does not affect what was already collected, which is never linked to your identity. The CV watermark relies on the legitimate interest described in section 2.

4. Retention

Data is kept for as long as necessary to answer your enquiry and, if it leads to a collaboration, for the duration of that collaboration and the statutory limitation periods. It is deleted thereafter.

Statistics records are kept on the server under the daily identifier described in section 2, which can no longer be related to you the following day, and are deleted automatically once they are 400 days old (about 13 months). Your choice about statistics is kept in your browser for 12 months; after that you are asked again.

5. Recipients

Data is not shared with third parties except where legally required. The following providers act as data processors for the operation of the site:

• Hostinger — hosting of the website and of the analytics database.
• Formspree, Inc. (United States) — processing and delivery of contact form messages.

International transfer. When you send the contact form, the data you type travels to Formspree, Inc.'s servers in the United States. Formspree states in its privacy policy that it takes steps to ensure your personal information continues to enjoy appropriate protection, but it does not claim to be certified under the EU-US Data Privacy Framework nor to have signed standard contractual clauses, so a level of protection equivalent to the European one cannot be guaranteed. The transfer relies on your explicit consent when sending the form after reading this information (art. 49.1.a GDPR). You can avoid it entirely by writing to me directly at info@guillemnavarro.com: email does not go through Formspree.

6. Cookies and similar technologies

This site installs no cookies at all: neither first-party nor third-party, neither advertising nor tracking. What it does use is the browser's local storage for a few technical preferences and, only if you accept it, a statistics beacon to its own server. The full list:

Name	Type	Purpose	Duration	Consent?
gnv-tema	localStorage (first-party)	Remembering the light or dark theme you chose.	Until you delete it.	No: a preference you requested (exempt, art. 22.2 LSSI-CE).
gnv-consentimiento	localStorage (first-party)	Storing your choice about statistics (accepted or declined) and the date you made it.	12 months.	No: needed to honour your choice (exempt).
gnv-arranque, gnv-modo, gnv-via	sessionStorage (first-party)	Interface state: whether you have already seen the contact page's start-up animation, the mode chosen in the form and the profile chosen on the home page.	For the visit only; cleared when the tab is closed.	No: technical, strictly necessary (exempt).
Statistics beacon	Request to the site's own server (/app/api/hit.php). Not a cookie: it stores nothing on your device.	Counting visits and learning which pages are read and how they are used (section 2).	Records deleted after 400 days.	Yes: only if you press "Accept".

None of this identifies anyone or goes to third parties: there is no advertising, no embedded social networks and no third-party tools measuring anything. The fonts and the portfolio's 3D library are served from this same domain.

You can change or withdraw your consent at any time, as easily as you gave it: press "Cookie settings" in the footer of any page or the button below, and the notice reappears showing your current choice. When you decline, measurement stops immediately.

You can also clear all storage from the browser itself: in Chrome, Edge and Firefox, under Settings → Privacy → Site data (or with F12 → Application/Storage, deleting the data for guillemnavarro.com); in Safari, under Preferences → Privacy → Manage Website Data. The site keeps working as before: it will only forget your theme and ask you about statistics again.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw your consent, by writing to info@guillemnavarro.com and stating which right you wish to exercise.

If you believe the processing of your data does not comply with the applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Security

Reasonable technical and organisational measures are in place to protect data against loss, unauthorised access or misuse. All communication with the site is encrypted over HTTPS.

9. Changes to this policy

This policy may be updated to reflect legal or technical changes. The date of the latest revision appears at the top of the document.