Privacy and cookies policy

1. Data controller

• Data controller: Joan Sanfeliu Vilarrasa, a sole proprietor operating under the trade name Sanfeliu
• NIF: 79279716G
• Address: Barcelona, Spain
• Contact: me@joansanfeliu.com

2. What data is processed and where it comes from

Data is processed in the following cases:

• Fit questionnaire. Your answers (what the company does, its size, its systems, the process, the goal, who decides and when) and your contact details: name, company, email address and, if you provide it, phone number. While you answer, your browser saves a draft so that you don’t have to start over, and deletes it when you finish. When you finish, your answers and contact details are passed to Cal.com so that they are pre-filled in the call booking; if you choose to send them by email, your email program opens with the text already written.
• Booking a call. Your name, email address, notes and the time slot you choose, which Cal.com manages.
• Email. Whatever you write to me@joansanfeliu.com and any data you include in it.
• Business relationship. The contact details and the record of conversations with prospective clients and with clients are kept in the Owner’s own CRM.
• Professional contacts from public sources. The Owner may collect, from company websites, commercial registers or public professional profiles, the name, job title and professional contact details of people who work at companies that may be interested in the Owner’s services, for the sole purpose of contacting the company.
• Website visits. The analytics service receives the page address, the page title, the screen size, the language and the referring page, without cookies or persistent identifiers.
• Technical logs. The hosting service logs the IP address, the browser and the time of requests, for security purposes.

3. Purposes and legal basis

• Assessing the fit, managing the call, responding to your inquiry and, where applicable, preparing a quote. Basis: pre-contractual measures at your request (art. 6.1.b GDPR).
• Managing the relationship with clients: contract, invoicing and support. Basis: performance of the contract (art. 6.1.b GDPR) and compliance with legal tax and commercial obligations (art. 6.1.c GDPR).
• Contacting companies using professional contact details. Basis: legitimate interest in maintaining relations with the company you work for (art. 6.1.f GDPR and art. 19 of the LOPDGDD). No commercial communications are sent by email without prior consent, and you may object to this processing at any time.
• Understanding, in aggregate, how the website is used, and protecting it. Basis: legitimate interest (art. 6.1.f GDPR).

4. Cookies and browser storage

This website does not install first-party, advertising or analytics cookies. The analytics service counts visits without cookies.

The fit questionnaire saves a draft of your answers in your browser’s local storage while you fill it in. This is necessary to provide the service you have requested, and the draft is deleted when you finish.

The Cal.com calendar loads when you finish the questionnaire or when you open a booking link. At that point Cal.com sets, from its own domain, the technical cookies it needs in order to work (security and session), and it is governed by its own policy.

5. Recipients and international transfers

Data is not sold or disclosed for advertising purposes. Only the following providers are involved, acting as data processors:

• Amazon Web Services EMEA SARL: hosting of the website (Ireland) and of the CRM (Paris), in the European Union.
• Cal.com, Inc.: calendar and call booking. It processes data in the United States, under the standard contractual clauses approved by the European Commission.
• Umami Software, Inc.: analytics without cookies, under standard contractual clauses.
• Google: email for me@joansanfeliu.com. Google LLC is certified under the EU-U.S. Data Privacy Framework.
• Holded Technologies, S.L.: client invoicing.

Data may also be disclosed to the tax authorities and other public authorities where there is a legal obligation to do so.

6. Retention period

• Fit questionnaires, bookings and inquiries that do not lead to an engagement: up to two years from the last contact.
• Professional contacts from public sources: up to two years from collection if no relationship is established, or until you object.
• Clients: for as long as the relationship lasts and, afterwards, for the statutory periods, which are six years for commercial and tax records.
• Questionnaire draft: only in your browser, until you finish it.

Analytics data is aggregated and does not allow anyone to be identified.

7. Your rights

You may exercise the rights of access, rectification, erasure, objection, restriction and portability by writing to me@joansanfeliu.com and stating which right you wish to exercise. If your data was obtained from public sources, you are informed of this policy the first time the Owner contacts you, and you may object to the processing at that moment or whenever you wish.

If you believe that the processing does not comply with the applicable regulations, you may file a complaint with the Spanish Data Protection Agency (AEPD, aepd.es).