Privacy policy
Last updated: 3 September 2026
This is a translation provided for convenience. The Spanish version is the legally binding one and prevails in case of any discrepancy: Política de privacidad.
1. Data controller
Iñigo Becerril Oriol, acting in a personal capacity.
Contact for privacy matters:
privacidad@inigobecerril.com
This is a personal website, not a company site. No products or services are sold through it. You can also exercise your rights using the contact form, writing “Privacy” in your message.
2. What data is processed
- Contact form: name, email, company (optional) and the text of your enquiry.
- The IBO assistant: the text of the messages you write in the chat, along with the date, device type and the page you arrived from.
- Technical data: IP address and request data, processed transiently to apply usage limits and protect the site against abuse.
No special categories of data are requested. Please do not include confidential, sensitive or non-disclosure-bound information in the chat or the form.
3. Purposes and legal basis
- Answering your professional enquiry and assessing a possible collaboration. Legal basis: your consent, which you give explicitly in the form (Art. 6.1.a GDPR), and pre-contractual measures (Art. 6.1.b GDPR).
- Generating the assistant’s replies. Legal basis: your implied consent when starting the conversation, and the legitimate interest in providing information about professional activity (Art. 6.1.f GDPR).
- Storing assistant conversations in order to understand what people ask, measure whether the assistant is useful and improve it. Legal basis: legitimate interest (Art. 6.1.f GDPR). A notice is shown next to the chat before you type anything.
- Site security (usage limits, bot protection, error logging). Legal basis: legitimate interest (Art. 6.1.f GDPR).
4. Retention
- Form messages are kept for as long as the professional relationship or interest lasts and, after that, for the applicable statutory limitation periods.
- Assistant conversations are stored on the server for a maximum of 12 months and are deleted automatically once that period ends. They are not linked to your name or your IP address: the IP is stored as a hashed value that cannot be reversed.
- The visible conversation thread also lives in your browser, in the tab’s memory (sessionStorage), and disappears when you close it or press “Restart”.
- Usage-limit counters store a derived, non-reversible value and expire automatically within 24 hours at most.
5. Recipients and processors
The following providers are used to run this service:
- Piensa Solutions (Spain): website hosting and the database where conversations are stored.
- Anthropic PBC (USA): generation of the assistant’s replies. It receives the text of your chat messages. Anthropic does not use content sent through its API to train its models.
- Cloudflare, Inc. (USA/EU): bot protection for the form (Turnstile) and, where applicable, website protection and delivery.
- Google Ireland Ltd. / Google LLC: recording the contact in Google Sheets and sending the notification email.
Data is not shared with third parties for commercial purposes, and no profiling with legal effects is carried out.
6. International transfers
Some of the providers above may process data outside the European Economic Area. In those cases, transfers rely on the Standard Contractual Clauses approved by the European Commission and on the supplementary measures each provider documents in its data processing terms.
7. Cookies and local storage
This site does not install analytics, advertising or tracking cookies, and does not use Google Analytics.
- sessionStorage: used to keep the conversation thread with the assistant while the tab is open. It is technical storage necessary for the functionality you request, and it is not shared with anyone.
- Cloudflare Turnstile: may use its own technical storage to tell people from bots when the form is submitted. It is strictly necessary for the security of the service.
8. Automated decisions
The assistant makes no decisions with legal effects concerning you. It generates informative answers and, when it detects possible professional interest, suggests using the contact form. Nothing else.
9. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand.
To do so, write to privacidad@inigobecerril.com or use the contact form writing “Privacy”. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
10. Security
The site is always served over HTTPS and applies security headers, per-IP usage limits and validation of incoming data. None of the credentials of the services used are accessible from the browser.