Skip to content

Privacy policy

Updated

This site has no newsletter and no user accounts; its only interactive features are the contact form and the free SSR/SEO auditor, both described below. Most visits generate no processing beyond the technical logs any web server produces and a cookieless usage measurement. What follows sets out exactly what is processed, why, and what you can do about it.

This is a courtesy translation. In the event of any discrepancy, the Spanish version prevails.

1. Data controller

  • Registered name: Magnetic Multi S.L.
  • Tax ID (CIF): B21996293
  • Registered address: Plza Roumaldo Alvargonzalez Lanquine SN, Planta -1, A5; 33207, Gijón, España
  • Email: guille.igmu@gmail.com

2. What data is processed, and why

Connection data

When you visit the site, the hosting provider automatically logs your IP address, browser type, the date and time of the request and the page requested.

  • Purpose: serving the site, keeping it available and detecting abuse or security incidents.
  • Legal basis: legitimate interest (art. 6(1)(f) GDPR) in operating the site securely.

Usage analytics

The site measures visits with Umami, a cookieless analytics tool. It records the page visited, the referring page, the language, the device type, the country and performance metrics for the page itself, such as how long it takes to load. No cookie or identifier is placed on your device, and your IP address is not stored: it is used transiently to derive the country and to generate a non-reversible session identifier. There is no cross-site tracking and no way to link that data to a specific person.

  • Purpose: knowing which content is useful and spotting navigation errors.
  • Legal basis: legitimate interest (art. 6(1)(f) GDPR) in understanding how the site is used, through the least intrusive measurement available for that purpose.

SSR/SEO auditor

The free SSR/SEO analysis tool analyses the public URL you type in. To provide the service, that URL is sent to a self-managed server which visits the site in question, computes the report and takes two screenshots of that website. The report and screenshots are kept in memory for around ten minutes, so you can reload or share the result, and are then discarded. Your IP address is used transiently, also in memory only, to limit the number of analyses per user and prevent abuse; it is not written to disk or associated with the report.

The analysed URL is also recorded as an event in the analytics described above, under the same conditions: no cookies, and no way to link it to you.

  • Purpose: running the analysis you request, protecting the service from abuse, and knowing how much the tool is used and on what kind of sites.
  • Legal basis: provision of the functionality you request (art. 6(1)(b) GDPR) for the analysis; legitimate interest (art. 6(1)(f) GDPR) for usage limits and measurement.

Contact form

If you write through the contact form, your name, email address, message and, if you choose one, the service you are interested in are processed. The message reaches the controller by email and you receive an automatic acknowledgement. Both emails are sent through Brevo, a European transactional email provider acting as processor.

Spam protection is our own and uses no cookies or third-party services: an invisible trap field, a submission-time check and a per-IP submission limit, where the IP address is used transiently and is not stored with the message.

  • Purpose: replying to your message and, where relevant, preparing for possible work together.
  • Legal basis: steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR) for business enquiries; legitimate interest in handling messages received (art. 6(1)(f) GDPR) otherwise.

Booking a call

The button to book a call takes you to Cal.com, an external service. If you book, you provide your name, email address, chosen slot and whatever you write in the free text field there.

  • Purpose: arranging the call and preparing for possible work together.
  • Legal basis: steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR).

Email

If you write to the published address, your address and the content of your message are processed.

  • Purpose: replying to you.
  • Legal basis: legitimate interest in handling messages received, or pre-contractual steps where the message is a business enquiry.

There is no profiling, no automated decision-making and no advertising profile is built. The analytics described above is aggregate: it counts visits, it does not recognise you.

3. How long data is kept

  • Connection data: the hosting provider's log retention period, in the order of months.
  • Analytics: statistics are kept in aggregate form for as long as the site uses the tool. Since neither your IP nor any device identifier is stored, there is no individual record to erase.
  • SSR/SEO auditor: reports and screenshots live in memory for around ten minutes and are discarded on their own; no individual record remains, only the aggregate analytics event.
  • Call bookings: for the duration of the relationship and then for the applicable statutory limitation periods.
  • Emails and form messages: for as long as they are relevant to the relationship, and then for the applicable statutory periods.

4. Recipients

Data is neither sold nor shared with third parties for commercial purposes. Only the providers needed to run the site are involved:

  • The hosting provider (currently Vercel Inc.), which processes connection data.
  • The self-managed server's provider (currently euronodes, with infrastructure in the European Union), where both the auditor's analyses and the site's analytics run. The analytics is self-hosted: measurement data is not shared with any external analytics vendor.
  • Brevo (Sendinblue SAS, based in the European Union), which sends the contact form's emails.
  • Cal.com, when you book a call.

Some of them may be located outside the European Economic Area; where that is the case, the transfer relies on the safeguards set out in Chapter V of the GDPR. Each processes data under its own privacy policy, available on its website.

5. Your rights

You may at any time exercise your rights of access, rectification, erasure, portability, objection and restriction of processing, and withdraw your consent where processing is based on it.

To exercise them, write to guille.igmu@gmail.com stating which right you wish to exercise. You do not need to attach a copy of your ID: further information will only be requested if there are reasonable doubts as to your identity, as the GDPR provides.

You will receive a reply within one month, extendable to two in complex cases.

If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).

6. Security

The site is served exclusively over an encrypted connection (HTTPS), with headers that prevent it being embedded in other sites, restrict the information sent to third parties as you browse, and disable access to camera, microphone and geolocation. No measure guarantees absolute invulnerability, but these reduce the attack surface.

7. Cookies

This site uses a single technical cookie, which remembers the language. The analytics uses no cookies and stores nothing in your browser, so there are no analytics or third-party cookies, which is why no consent banner is shown. Details are in the cookie policy.

8. Changes to this policy

This policy will be updated whenever the processing described here changes, for instance if a new feature that processes data is added. The date of the last revision appears at the top of this page.