Privacy policy
Last updated:
This policy explains what data is handled when you visit bcerron.com or write to me through the contact form, and what you can do about it.
Who is responsible
Pedro Benito, owner of bcerron.com. Write to me at info@bcerron.com about anything regarding your data.
My other details as owner are in the legal notice.
What the contact form collects
- Your name, your email and, if you give it, your company.
- The message you write, the page you send it from, its language and the date.
- Your IP address is not stored in the database. To limit repeated sending, only an irreversible hash of it is kept, deleted after about a day.
- The Cloudflare Turnstile check, which confirms you are not a bot from technical details of your browser.
Visit statistics
To know which pages are read I use Umami, an analytics tool that uses no cookies, stores nothing in your browser and collects no personal data. It loads from this site’s own domain and only on the public pages of bcerron.com.
It records the page visited, the page you came from, the language, the type of browser, operating system and device, the screen size and the approximate country, region and city. It also counts a few actions: downloading the résumé, sending the form and clicking the email or LinkedIn link.
Your IP address is only used on the spot to work out the country and an anonymous visit identifier that changes periodically; it is not stored and cannot identify you. This data is not used to build profiles or matched with anything else.
Technical browsing data
As on any website, your browser sends technical data when you visit (IP address, browser, page requested). Cloudflare, which hosts the site, uses it to serve the site and protect it from attacks, without my keeping it.
What I use it for
- The form details, only to read your message and reply. When you send it you get an automatic reply that just confirms it arrived, without a copy of your message.
- The statistics, to learn which content is of interest and improve the site.
- I do not send advertising, build profiles or share your data with anyone.
Legal basis
- Your consent, given when you send the form, to use your details to reply to you. You can withdraw it at any time.
- My legitimate interest in protecting the form and the site from spam and abuse (the Turnstile check and the sending limit).
- My legitimate interest in knowing, in aggregate and without identifying anyone, how the site is used.
How long I keep it
- Messages are kept while the conversation lasts. Archived messages and those marked as spam are kept for 12 months at most. You can ask me to delete yours sooner at any time.
- Umami keeps the statistics for 6 months. To keep the history, I export that same data, with no personal data, to my own database (Supabase, in Frankfurt).
Who else handles it
I use these providers, who handle the data only on my behalf and for what is stated:
- Supabase: the database where messages and the statistics history are stored, hosted in Frankfurt (European Union). It may keep request logs with technical metadata.
- Postmark (ActiveCampaign, United States): sends the email notice of each message and the automatic reply, and keeps the content and metadata of those emails for 45 days. The notice, with a copy of your message, also reaches my mailbox.
- Cloudflare (United States): hosts the site and provides the form’s Turnstile check.
- Umami (Umami Software, United States): the visit statistics. It has servers in the United States and in the European Union and does not say which ones hold each site’s data.
International transfers
Postmark, Cloudflare and Umami are United States providers, so the data may be handled there. Transfers of data outside the European Union rely on the European Commission’s standard contractual clauses and, where the provider has joined it, on the EU-U.S. Data Privacy Framework.
Cookies
The site only stores in your browser what it needs to work and your language and theme preferences; the analytics uses no cookies. The details are in the cookie policy.
Your rights
You can ask for access to, correction or deletion of your data, object to or restrict its processing, and request its portability, by writing to info@bcerron.com. I answer within one month at most.
If you think I have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Changes to this policy
If what the site does with your data changes, I will update this page and its last-updated date.