Last updated: 20 July 2026

1. Who is responsible for your data

The controller of personal data processed through this website is Alex Florian, Calle Islas Cíes 25, 28035 Madrid, Spain. For privacy questions or requests, contact iamalexflorian@gmail.com.

2. Data we process and why

Contact and business enquiries

If you use the contact form or contact us directly, we process the information you provide, such as your name, email address, enquiry type and message, to respond to your request, discuss a potential engagement and maintain necessary business correspondence. The legal basis is taking steps at your request before entering into a contract and our legitimate interest in managing professional enquiries.

Website operation and security

Our hosting and security systems may process technical information such as IP address, browser and device information, requested URLs, timestamps and security logs. This is necessary to deliver the website, prevent abuse, troubleshoot problems and protect the service. The legal basis is our legitimate interest in operating a secure and reliable website.

Analytics and experience measurement

With your consent, we use Google Analytics 4 to understand how the website is found and used, and Microsoft Clarity to understand how visitors interact with pages through behavioural metrics, heatmaps and session replay. These services may process information about pages viewed, approximate location, device and browser characteristics, referral source, clicks, scrolling and other interactions with the site. Contact-form fields are masked and we do not intentionally send form contents or direct identifiers to these analytics services. You can accept, reject or change this choice through the cookie controls on the website. For more information about how Microsoft processes data, see the Microsoft Privacy Statement.

External services and links

The site links to or may load services operated by third parties, including YouTube, Calendly, Udemy and social networks. A YouTube player is loaded only after the relevant interaction and consent where required. If you follow an external link or use an external service, that provider processes data under its own privacy policy.

3. Cookies and consent

Necessary technologies are used to operate and secure the site. Optional analytics or third-party technologies are used only according to your consent choices. Details about the technologies, providers, purposes and retention periods are available in our Cookie Policy. You can withdraw consent at any time using the cookie preferences control.

4. Service providers and international transfers

We use providers that support hosting, website operation, security, analytics and scheduling. They process data only as needed to provide their services. Some providers may process data outside the European Economic Area. Where applicable, transfers are protected by an adequacy decision, standard contractual clauses or another lawful safeguard.

5. How long we keep data

We keep personal data only for as long as needed for the purpose for which it was collected and to meet legal obligations. Enquiry correspondence is retained while the request or potential engagement is active and afterwards only when reasonably necessary for follow-up, records or legal claims. Google Analytics event data is configured with a 14-month retention period. Microsoft Clarity retains playback data for 30 days and click and heatmap data for 9 months; sessions that are labelled or marked as favourites may also be retained for 9 months. Technical and security logs are retained according to operational and security needs.

6. Your rights

Depending on the circumstances, you may request access, rectification, erasure, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. To exercise a right, email iamalexflorian@gmail.com. We may need to verify your identity before acting on a request.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.

7. Children

This website and its professional services are not directed to children, and we do not knowingly collect personal data from children through the site.

8. Changes to this policy

We may update this policy when the website, providers or applicable requirements change. The current version and update date will always be published on this page.