Legal

Privacy Policy

Last updated: June 2026

This Privacy Policy explains how personal data is processed when you use manuelcastro.bio (the "Site") and, in particular, when you contact me through the contact form or by email. It is provided in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Spanish data-protection law.

What data I collect

• Contact form / email: your name, email address and the content of your message.
• Technical data: the Site is static and sets no analytics or advertising cookies. Standard server logs may be retained by the hosting provider for security and operation.

Why I process it and the legal basis

• To respond to your enquiry and discuss a possible engagement — legal basis: your consent (Art. 6(1)(a) GDPR), given via the consent checkbox, and/or steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

I will not use your data for automated decision-making, profiling, or marketing, and I will not sell it.

Who receives the data

If the contact form is connected to a form-handling provider (Formspree), your submission is processed by that provider acting as a data processor on my behalf; otherwise the form opens your own email client and your message is sent directly to me by email. Email is hosted by my email provider. These providers may process data outside the EEA under appropriate safeguards (e.g. EU Standard Contractual Clauses). No data is transferred to other third parties.

How long I keep it

I keep your data only as long as necessary to handle your enquiry and any resulting professional relationship, and thereafter for the period required to meet legal obligations. You may ask for deletion at any time.

Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, to data portability, and to withdraw consent at any time (without affecting prior processing). To exercise any of these, email manuel@manuelcastro.bio.

If you believe your data-protection rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es).

Changes

This policy may be updated to reflect changes to the Site or legal requirements. The "last updated" date above will always indicate the current version.