Skip to content

Legal document

Privacy policy

Data controller: Nicolás Wunjo Kamin Javierre, tax ID 70959335B, Calle Chueca, 3, 5F, 18004 Granada. Email: hola@erigoestudio.com.

The contact form on the home page sends nothing to any server of ours: it composes the message and you open it in WhatsApp or your mail app. Until you hit send in your own application, nothing about you has reached us. The one exception is the brief form, which does store what you send, and has its own section below.

If you write to us

What you send us: your name, your email, your web address and whatever you write in the message. We use it to reply and, if it goes ahead, to prepare a quote. If you have not written to us and we still hold data about you, that is explained below, under “If we called you or left you a letter”.

The legal basis is article 6.1(b) GDPR: pre-contractual steps taken at your own request. You don't have to tick any box for us to reply.

Writing to us does not put you on any mailing list. If we ever launch a newsletter, opting in will be a separate and deliberate act.

If you send us the brief

The /brief page is the only one on this site whose form sends data to a server of ours. What it asks for — your business, your website if you have one, what you need, the timeline, a rough budget, your email and, only if you want us to call, your phone — is stored in our database (Supabase, listed among the providers below, with servers in the European Union) so we can assess your request and reply. The legal basis is the same as above: article 6.1(b) GDPR, pre-contractual steps at your request. It is not used for advertising, not shared with anyone, and deleted within the periods in the next section.

How long we keep it

Until your enquiry is resolved. If we don't end up working together, one year at most. If you hire us, for the length of the relationship and then the statutory periods: six years commercial, four years tax.

Who else sees it

Every provider that may see any data, whether from the form or from our own work:

With each of them, the data processing terms published by that provider and accepted when we signed up apply, under article 28 GDPR. We do not sell or pass your data to anyone else, and we don't use what you send us for anything other than replying to you.

If we called you or left you a letter

This part is not about the form: it's about you if you run a business in Granada whose website we measured and whom we approached without you having contacted us first. You did not give us your data, so here is where it came from and what we do with it.

Where it comes from. Public sources: the OpenStreetMap collaborative map (data © OpenStreetMap contributors, ODbL) and your own business website, where the phone number or address is published there. We do not buy data from anyone or take it from any sold list.

What we hold. The business name, its sector, address, phone and email where published, the website address and the venue coordinates. Plus the result of measuring that website: how long it takes to load and what slows it down. None of this is private information: it is what anyone visiting your site can see.

What for. To offer you our web design and performance services, and nothing else. The legal basis is the legitimate interest of article 6.1(f) GDPR, which here the law presumes in our favour: article 19 of Organic Law 3/2018 presumes lawful the processing of data of sole traders and professionals when treated in that capacity and not as private individuals, which is exactly what we do. Our interest is finding clients for a small studio; yours is not receiving offers you did not ask for. So we stick to your professional activity, we do not use anything from your private life, and we stop the moment you tell us to.

How we contact you, and how we don't. By phone or in person, always saying who we are and why we are calling. We do not send unsolicited commercial email or messages: article 21 of the LSSI forbids it and we do not do it, even where we have your email because it is published on your site. And we call nobody without having checked the Spanish Robinson List first: it is a precondition of every round, not a one-off formality.

How long we keep it. One year from our last contact with you. If you tell us no, we keep only what is needed not to bother you again — your business name, plus your phone number or website address, whichever we have — with the date, and we stop using the rest.

Who else sees it. We do not share or sell it. The working list stays on our own machines, here in Granada. There is one exception and we state it: internal notes about a specific business may end up in our private work repository, hosted by GitHub (United States, under EU standard contractual clauses). It is private and no outsider sees it, but it is a provider outside the European Union and you are entitled to know.

If you ask us to delete, we remove it from the working list and from our notes. An honest caveat about that repository: it keeps history, so an old note may remain there even once we stop using it. If you ask, we purge it from the history too; and in the meantime it is used for nothing.

We make no automated decision about you with legal effects. Your site is measured by a program, but deciding whether to call you and what to say is done by a person.

You can object, and it is the easiest thing here. Say so on the phone when we call, or write to hola@erigoestudio.com with your business name. You do not have to explain why. We take you off the list and do not call again. You can also ask what data we hold, have it corrected or deleted, and complain to the Spanish Data Protection Agency at aepd.es.

Your rights

Access, rectification, erasure, restriction, objection and portability. Write to hola@erigoestudio.com and we reply within one month. If you think we've handled it badly, you can complain to the Spanish Data Protection Agency at aepd.es.

Last reviewed: 25 September 2026