Legal information

Privacy policy

Last updated: 2 October 2026

This is an English translation provided for convenience. In case of any discrepancy, the Spanish version prevails.

In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD, Spanish Organic Law on the Protection of Personal Data and the Guarantee of Digital Rights), express, precise and unequivocal information is provided on the processing of the personal data collected through this website.

1. Data controller

  • Controller: Ricardo Martínez Benzal
  • NIF (tax ID): 48656275M
  • Address: 30100 Campus Universitario, Murcia, España
  • Email: ricardobenzalia@gmail.com
  • Website: https://ricardobenzalia.com

2. Data we process and its source

The following data, collected through the forms on the site, is processed:

  • Name and surname(s)
  • Contact email
  • Phone number
  • Company and role (optional)
  • Information about your project and timescales

All data comes exclusively from the data subject. No data is obtained from external sources. The User guarantees that the data provided is true and accurate, and undertakes to notify any changes to it.

3. Purposes of the processing

  • To manage and respond to the requests for information received.
  • To assess the feasibility of the project and process the admission request.
  • To manage the contractual relationship and the provision of the service, should the project be accepted.
  • To ensure the security of the website and prevent abusive or fraudulent use.

The data is not used to send unsolicited commercial communications.

4. Legal basis

  • Consent of the data subject (Art. 6(1)(a) GDPR), given expressly by ticking the checkbox when submitting any form. Its withdrawal does not affect the lawfulness of the processing carried out beforehand.
  • Application of pre-contractual measures at the request of the data subject and, where applicable, performance of the contract (Art. 6(1)(b) GDPR), for the assessment and provision of the service.
  • Legitimate interest of the controller (Art. 6(1)(f) GDPR) in ensuring the security of the site and limiting the number of requests per user, following the corresponding balancing against the rights and freedoms of the data subjects.
  • Compliance with legal obligations (Art. 6(1)(c) GDPR) in tax, accounting and commercial matters.

5. Retention periods

The data is kept for as long as the relationship with the data subject continues and as long as its erasure is not requested and consent is not withdrawn. Specifically:

  • Requests that do not lead to a contract: erased once the enquiry has been dealt with and the limitation period for any legal actions arising from it has expired.
  • Contractual relationships: for the duration of the contract and, thereafter, for the periods required by tax and commercial legislation, of up to six years.

6. Recipients and data processors

No data is disclosed to third parties except where there is a legal obligation or a formal request from the competent authorities. To provide the service, the following data processors are used, with whom the corresponding contracts have been entered into in accordance with Article 28 GDPR:

  • Email provider: sending and receiving the communications generated by the forms.
  • Web hosting provider: hosting the site and running its server functions.

7. International transfers

Some of the providers listed in the previous section are established in the United States, so international transfers of data outside the European Economic Area take place. These transfers are covered by the appropriate safeguards provided for in Chapter V of the GDPR: the Adequacy Decision on the EU-US Data Privacy Framework and, failing that, the Standard Contractual Clauses approved by the European Commission, together with any supplementary measures that may be necessary.

8. Automated decision-making and profiling

No automated decisions are taken that produce legal effects concerning the data subject or similarly significantly affect them. Each project is always assessed by a person. Under no circumstances are profiles created using data of minors.

9. Rights of the data subject

In relation to the processing of your personal data, you have the right to:

  • Confirmation: obtain confirmation as to whether or not your data is being processed.
  • Access: know the purposes of the processing, the categories of data processed, the possible recipients, the retention period and the source of the data.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request the deletion of your data when it is no longer necessary for the purposes described or there is no legal basis for processing it.
  • Objection: object to the processing on grounds relating to your particular situation, unless there are compelling legitimate grounds that prevent this.
  • Restriction: request the restriction of processing, in which case the data will be kept only for the exercise or defence of claims.
  • Portability: receive your data in a structured, commonly used and machine-readable format, or have it transmitted to another controller where technically feasible.
  • Not to be subject to automated decisions, including profiling.
  • Withdraw your consent at any time, as easily as it was given.

These rights may be exercised free of charge, except in the cases provided for by law, by sending a request to ricardobenzalia@gmail.com, together with proof of the requester's identity.

If you consider that the processing does not comply with the regulations, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD, the Spanish Data Protection Agency, www.aepd.es) or with the competent supervisory authority, and you may also bring the matter before the courts.

10. Security measures

Appropriate technical and organisational measures are applied to ensure a level of security appropriate to the risk, assessing the threats and impacts of each processing operation and periodically reviewing their effectiveness. These measures make it possible to demonstrate compliance with the principles of purpose limitation, storage limitation, data minimisation, and integrity and confidentiality.

11. Changes to this policy

This policy may be amended to adapt it to legislative developments or to changes in the services offered. Any amendments will be published on this page, stating the date of the last update.