Back

Privacy & Terms

Privacy Policy

This Privacy Policy outlines how personal data may be collected, used, and protected when you visit juanmenguiano.com (hereinafter, “the Website”). The Owner of this Website is committed to safeguarding the privacy of users and complying with all relevant data protection legislation, including the ES General Data Protection Regulation (ES GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for processing personal data through this Website is the Owner of the domain juanmenguiano.com, referred to in this policy as “the Owner”. For any queries or concerns relating to this policy, users may contact the Owner through the channels made available on the Website.

2. Data Collected

The Website is intended as a professional portfolio and does not actively collect personal data through contact forms, subscriptions, comments, or direct input fields. However, certain data may be collected automatically through technical means, as detailed below.

2.1 Automatically Collected Data

When users access the Website, certain technical and usage data may be collected automatically through cookies and similar technologies. This may include:

  • IP address (partially anonymised)
  • Browser type and version
  • Operating system
  • Pages visited and time spent on each
  • Referring websites
  • Device information

This data is collected anonymously and is used exclusively for statistical analysis and Website optimisation.

3. Analytics

The Website uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC. GA4 collects anonymised usage data to help the Owner understand user behaviour and improve Website performance. IP anonymisation is enabled by default, and no personally identifiable information is processed.

Google acts as a data processor under the UK GDPR, and appropriate safeguards are in place through Standard Contractual Clauses (SCCs) and other compliance measures.

4. Legal Basis for Processing

The legal basis for the processing of technical and usage data is the legitimate interest of the Owner in monitoring and improving the Website, ensuring functionality and security, and understanding user interaction, in accordance with Article 6(1)(f) of the UK GDPR.

5. Private Access Area

The Website may contain a restricted area accessible only to authorised users. In such cases, basic access credentials may be required (e.g., username and password). Any personal data associated with access to this area will be processed solely for the purpose of authentication and content access control, and will not be shared or disclosed to third parties.

Users granted access to restricted content are strictly prohibited from downloading, sharing, or redistributing such material without prior written consent from the Owner.

6. Data Sharing and Transfers

No personal data is shared with third parties for marketing or profiling purposes. Any third-party tools used (e.g., Google Analytics) operate under data processing agreements and in compliance with applicable data protection legislation. Data may be transferred outside the UK, subject to adequate safeguards as required by law.

7. Data Retention

Data collected through analytics tools is retained in an anonymised format for a period deemed necessary to fulfil the purposes outlined in this policy, typically no longer than 26 months, unless a shorter retention period is configured.

8. Data Subject Rights

Under the UK GDPR, users have the following rights regarding their personal data, even when data is collected indirectly or in an anonymised form:

  • The right to access personal data held by the controller
  • The right to rectification of inaccurate data
  • The right to erasure (“right to be forgotten”) under certain conditions
  • The right to restrict processing
  • The right to object to processing based on legitimate interests
  • The right to lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact the Owner via the details provided on the Website.

9. Data Security

Appropriate technical and organisational measures have been implemented to protect the integrity, confidentiality, and availability of any personal data processed through the Website. These measures include access controls, data minimisation practices, and secure configurations.

10. Policy Updates

This Privacy Policy may be updated from time to time to reflect legal, technical, or business changes. Users are encouraged to consult this page periodically to remain informed about how their data is handled.