Privacy policy.
Short version: I only collect what you choose to send me, I use it to reply and to work with you, and I never sell it or use it for ads.
fig. 00 · at a glance
- CollectedYour briefOnly what you send: name, email and your project, by form or email.
- Tracking cookies0Cookieless visit stats only. No ads, no social pixels. See the cookie policy.
- Sold or shared for adsNeverYour data is used to reply to you and to run our work together.
- Your rightsAny timeAccess, correct, delete or export your data with one email.
Who is responsible
I am. This is a one-person studio, so the person who reads your brief is the same person responsible for your data.
The data controller is Pierpaolo Gorelli (Pier Gorelli), freelance web and AI developer:
Calle Carteros 7646017 Valencia, Spain
me@piergorelli.com
This policy covers piergorelli.com and the conversations that start from it (form, email, calls). It follows the EU General Data Protection Regulation (GDPR) and the Spanish data protection law (LOPDGDD).
What I collect
What you type into the contact form or write in an email, plus the technical data any web server needs to deliver a page.
Data you give me
- Contact form (“brief”): your name and email (required), and optionally your agency or company, what you need, your timeline, your message and whether you want an NDA first.
- Email and calls: whatever you choose to share when you write to me or when we talk.
- If we work together: the billing details needed for quotes, contracts and invoices.
Please don't send special category data (health, beliefs and so on). I don't need it and I don't process it.
Data collected automatically
When you load a page, the hosting provider (Netlify) receives the technical data every browser sends: IP address, browser and device type, requested page, referring page, date and time. It is used to deliver the site, keep it secure and fix errors. I don't use it to identify or profile you.
A cookieless counter (Umami) records anonymous page views: page, referring site, browser, device type and country. Your IP address is used only to work out the country and is not stored.
Your theme and accent choice are saved in your own browser and never reach me. Details are in the cookie policy.
Why, and on what legal basis
To answer you, to prepare and run a project, and to meet my legal obligations as a business.
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Reply to your brief or email and set up a call | Your consent (form checkbox) and steps you asked for before a contract, 6(1)(a) and 6(1)(b) |
| Quote, contract and deliver a project | Performance of a contract, 6(1)(b) |
| Invoices, tax and accounting records | Legal obligation, 6(1)(c) |
| Keep the site online, secure and free of spam | Legitimate interest, 6(1)(f) |
| Count visits anonymously to see which pages are useful | Legitimate interest, 6(1)(f) |
No automated decisions or profiling are made about you. I won't add you to a newsletter or send you marketing emails.
Transfers outside the EU
Netlify and Umami are US companies, so some data may be processed in the United States.
These transfers rely on the safeguards the GDPR requires: the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework. You can ask me for details of the safeguards in place.
How long I keep it
No longer than needed, then it is deleted.
- Briefs and emails that don't become a project: up to 24 months after our last contact, so I have the context if you come back. Ask and I delete them sooner.
- Client data: for the duration of the project, then as long as Spanish tax and commercial law requires (currently up to six years for invoices and accounting records).
- Server logs: kept by Netlify for a short period for security and troubleshooting.
How it is protected
HTTPS everywhere, few tools, and access limited to me.
The site is served only over HTTPS and no one else has access to form submissions, my mailbox or project files. No online system is 100% secure, but I keep the number of places your data lives as small as possible.
Your rights
Your data stays yours. One email is enough to use any of these rights, free of charge.
- Access: know whether I hold data about you and get a copy.
- Rectification: correct anything inaccurate or incomplete.
- Erasure: have your data deleted when it is no longer needed.
- Restriction: ask me to pause the processing.
- Portability: receive your data in a common, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: at any time, without affecting what happened before.
Write to me@piergorelli.com. I reply within one month at the latest, usually within a couple of days. If you think your data has been handled unlawfully, you can also complain to the Spanish Data Protection Agency (AEPD) or to the authority in your country.
Minors
This site is for businesses and professionals. I don't knowingly collect data from anyone under 18. If you think a minor has sent me personal data, tell me and I will delete it.
Changes to this policy
When the site or the tools behind it change, this page changes too. The date at the top always shows the latest revision. If a change affects how I use data you already sent me, I will let you know by email.
Contact
For anything about your data: me@piergorelli.com, or by post to Pierpaolo Gorelli, Calle Carteros 76, 46017 Valencia, Spain.