Privacy Policy

Who processes your data

Jordi Riba Corrons, NIF 47100257Y, with an address in Maians (08255) and contact email address hola@jordiriba.com.

This policy explains what data is collected on this website, why it is collected, and how long it is retained. It has been drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

What is collected and why

Contact form

• Data: your name, email address, telephone number, and the message you write.

• Purpose: to reply to you.

• Legal basis: your consent when submitting the form.

• Retention: for the duration of the conversation and for up to one year afterwards, so that the context can be retrieved.

Skin test

The test can be completed without providing any personal data. Upon completion, the resulting skin type, score, language, and date are stored anonymously. This information cannot be used to identify anyone and helps determine which types of users visit the website. The legal basis is the website owner's legitimate interest in understanding how the website is used.

The answers you select are temporarily stored in your own browser so that you can continue the test if you leave it unfinished. They are deleted when you complete it and never leave your device.

Receiving the result by email

• Data: your email address, test result, and language.

• Purpose: to send you the analysis and, if you have agreed, advice on habits and personal care.

• Legal basis: your explicit consent. The exact wording you agreed to and the date are stored.

• Retention: until you unsubscribe.

To unsubscribe, reply to any email with the word UNSUBSCRIBE or write to hola@jordiriba.com. This is processed manually, without asking for an explanation.

Blog comments

• Data: your name, email address, and comment.

• Purpose: to publish it after review and to reply to it.

• Legal basis: your consent.

• Retention: for as long as the post remains published.

The email address of anyone who leaves a comment is never published.

Who else has access

The data is neither sold nor disclosed to third parties. It is only accessed by the providers required for the website to operate, who act as data processors:

• Vercel — website hosting and image storage.

• Neon — database.

• Rackspace — email service.

Some of these providers may process data outside the European Union. In such cases, they do so under the standard contractual clauses approved by the European Commission or equivalent data-transfer frameworks.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction, and data portability at any time, as well as withdraw any consent you have given.

Simply write to hola@jordiriba.com explaining what you would like. You will receive a reply as soon as possible and always within one month.

If you believe your data has not been processed correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

The website always operates over an encrypted connection (HTTPS). Access to the administration panel is password-protected, and passwords are stored in encrypted form so that no one can read them, not even the website owner.

Children

This website is not intended for children under the age of 14 and does not knowingly collect their data.

Changes

If the way data is processed changes, this policy will be updated on this page.