Privacy Policy

1. Data controller

Eduardo Rodríguez Ávila (the «Controller»), based in Mexico City, Mexico, is the controller of the personal data collected through this website (eravila.dev).

2. Personal data we collect

We only collect the data you choose to provide through the contact form:

• Required: name and email address.
• Optional: company or institution, country, phone, reason for contact, and the content of your message.

We do not collect sensitive data and do not use profiling or advertising tools. The only analytics we use is aggregate and cookieless, and does not identify you (see §5 and §10). We do not sell or share your data with third parties for commercial purposes.

Providing this data is voluntary: if you choose not to, we simply won't be able to respond to your message.

3. Purposes

Your data is processed for the sole purpose of:

• Responding to your message or contact request.
• Following up on a potential professional collaboration initiated by you.

Both purposes are based on your consent, given when you submit the form. We carry out no further processing without your authorization.

4. Legal basis

Processing is based on your consent, given when you voluntarily submit the form, and on the legitimate interest of responding to the communication you initiated (Article 6 GDPR; consent under Mexico's LFPDPPP).

5. Processors and third parties

To operate the form and the site we rely on the following providers:

• Web3Forms — processes the form submission and forwards it to the Controller's email. Its servers are hosted on AWS (United States), encrypted at rest.
• hCaptcha — anti-spam verification (distinguishing humans from bots) embedded in the form.
• Cloudflare and Railway — content delivery network and hosting; they may process technical data (such as your IP address) for security and content delivery.
• Cloudflare Web Analytics — aggregate, cookieless audience analytics. It measures visits and page views anonymously; it uses no cookies, does not track you across sites or build profiles, and stores no data that identifies you.

6. International transfers

Because some of these providers operate from the United States, submitting the form may transfer your data outside your country of residence. We only use providers that state they apply adequate security and compliance measures.

7. Retention period

The Controller keeps your message for as long as needed to handle your request and, where applicable, follow up on the professional relationship. In the Web3Forms processor, submissions are kept temporarily —currently 30 days after submission, per its plan— and then deleted automatically. The applicable period is always the one stated in the Web3Forms privacy policy at any given time.

8. Your rights

You may exercise at any time your rights of access, rectification, erasure, and objection, as well as restriction and portability under the GDPR, and withdraw your consent.

To exercise them, reach us through the contact form on this site. We will respond within the timeframes set by applicable law.

You also have the right to lodge a complaint with the competent authority: in Mexico, the Secretaría Anticorrupción y Buen Gobierno; in the European Union, the data protection supervisory authority of your country of residence.

9. Minors

This site and its contact form are aimed at a professional, adult audience. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us their data without the consent of a parent or guardian, contact us so we can delete it.

10. Cookies and storage

This site does not use tracking, analytics, or advertising cookies. The audience analytics we use (Cloudflare Web Analytics, see §5) runs without cookies and in aggregate. The site only uses:

• Browser local storage to remember your theme preference (light/dark) and reading position when switching languages — functional and non-identifying.
• Strictly necessary technical cookies that Cloudflare and hCaptcha may set for security reasons.

That is why we do not show a cookie consent banner.

11. Security

The site is served entirely over HTTPS with security headers and end-to-end certificate validation. Even so, no transmission over the internet is 100% infallible.

12. Changes to this policy

We may update this Privacy Policy. The current version is always the one published on this page, with its last-updated date at the top.