Privacy policy
This page explains what data I collect, why I use it and who I share it with — with particular attention to the AI diagnostic, where your text is processed by an external tool.
Last updated: June 2026.- Data controller
- Andrés Herrera (self-employed professional), Spanish tax ID X5300601K, Barcelona (Spain). Contact: hola@andresdiegoherrera.com.
- What data I process and when
-
- AI diagnostic: your name or company, email address and the text you write about your challenge.
- Contact and sessions: the information you provide so I can reply (name, email and message).
- Browsing: anonymous analytics data, only if you accept cookies (see below).
- Purpose
- To generate the initial diagnostic reading and send it by email; respond to contact or session requests; and, if you consent, measure in aggregate how the website is used so I can improve it.
- Legal basis
- Your consent (when ticking the diagnostic box and accepting analytics cookies) and taking pre-contractual steps at your request when you contact me about working together. You may withdraw consent at any time.
- The artificial intelligence diagnostic
- The text you submit through the diagnostic is processed through the OpenAI API (OpenAI, L.L.C., based in the United States) solely to generate your reading. This involves an international transfer of data outside the European Economic Area, covered by the safeguards offered by the provider (Standard Contractual Clauses).
- According to OpenAI’s API policy, this text is not used to train its models and may be retained for up to approximately 30 days for abuse monitoring before deletion. Even so, do not include confidential or sensitive information that you do not want to share with an external tool.
- Who I share data with (processors)
-
I do not sell your data. To provide the service I rely on providers acting as data processors:
- OpenAI — processing diagnostic text (see the section above).
- Email / hosting provider — sending and delivering emails and hosting the website.
- Google Analytics — usage measurement, only with your consent.
- Adobe Fonts (Typekit) — delivery of web fonts.
- Retention
- Diagnostic and contact data are retained for a maximum of 12 months, unless the relationship leads to an engagement (in which case they are kept for its duration and according to legal obligations) or you request earlier deletion. Analytics data are governed by the Google Analytics configuration.
- Your rights
- You may exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by writing to hola@andresdiegoherrera.com. If you believe they have not been properly addressed, you may complain to the Spanish Data Protection Agency (aepd.es).
- Cookies
- The website does not use analytics cookies until you accept them in the relevant notice. You can change your choice through the “cookies” link in the footer of the home page.
Note: do not include confidential information that you do not wish to share. This is a baseline privacy policy and should be reviewed by a professional before it is finalised, particularly the controller’s tax details and retention periods.