Privacy policy

Last updated: 21 October 2026

This is a translation for convenience. The Spanish version is the legally binding one.

This page explains what personal data is processed when you visit artyrico.com or get in touch, why, on what legal basis, for how long, and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Controller

  • Controller: Arty Rico
  • Address: Barcelona, Spain
  • Contact: artyricoo@gmail.com

2. What data is processed

  • Contact form: your name, e-mail, brand or business (optional), the service you’re interested in, your message, and your confirmation that you’ve read this policy. Fields marked * are required: without them I can’t reply.
  • E-mail: whatever you include if you write directly to artyricoo@gmail.com.
  • Browsing: to serve the site, the hosting provider processes your IP address and technical data (browser, page requested, date and time) to deliver the page and protect it from abuse.
  • Analytics, only if you accept it: Google Analytics 4 collects usage data (pages viewed, time spent, device, approximate location) through online identifiers. Google does not log or store the IP addresses of EU users.
  • In your browser: your language and your cookie choice are stored only on your device (local storage) and aren’t sent to anyone.
  • Instagram: the site only links to the @artyrico profile and embeds nothing from Instagram. If you follow the link, Meta processes your data under its own policy.

3. Purposes and legal bases

  • Answering your request and preparing a quote: steps taken at your request before a contract (art. 6(1)(b) GDPR); for general questions, the legitimate interest in replying to people who write (art. 6(1)(f) GDPR).
  • Doing the work if you hire me: performance of the contract (art. 6(1)(b) GDPR); invoicing and tax and accounting duties: legal obligation (art. 6(1)(c) GDPR).
  • Serving the site and keeping it secure: legitimate interest (art. 6(1)(f) GDPR).
  • Audience measurement with Google Analytics: your consent (art. 6(1)(a) GDPR and art. 22.2 LSSI-CE), which you can withdraw at any time under “Cookie settings”.

No automated decisions or profiling with legal effects on you take place, and you won’t get marketing messages you didn’t ask for.

4. How long it’s kept

  • Requests that don’t lead to a project: up to 12 months after the last contact, then deleted.
  • Clients: for as long as we work together and afterwards for the periods the law requires (for example 4 years for tax purposes under Spain’s General Tax Law 58/2003 and 6 years for accounting records under article 30 of the Commercial Code, where it applies).
  • Copies held by Web3Forms: for the period the provider sets for the account (30 days on the free plan, according to the provider).
  • Google Analytics data: the retention period set in the property, 14 months at most.

5. Recipients and processors

Data is never sold or passed on to third parties, unless the law requires it (for example, to the Spanish tax authority). These providers process data on the controller’s behalf:

  • Web3Forms (Web3Creative, India; servers in the US): receives the form and forwards it by e-mail.
  • Google (Google Ireland Ltd. / Google LLC): e-mail (Gmail) and, only with your consent, Google Analytics 4.
  • Cloudflare, Inc. (US): website hosting and content delivery network.

The fonts are served from this domain, so the site doesn’t send your IP address to Google Fonts.

6. International transfers

Google LLC and Cloudflare, Inc. are certified under the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and also apply standard contractual clauses. Web3Forms processes data in the US and from India, which has no adequacy decision: that transfer relies on the provider’s data processing agreement and is in any case necessary to handle the request you send yourself (art. 49(1)(b) GDPR). If you’d rather avoid it, e-mail artyricoo@gmail.com directly.

7. Your rights

You can ask for access, rectification, erasure, objection, restriction of processing and portability, withdraw any consent you gave at any time, and not be subject to automated individual decisions. Write to artyricoo@gmail.com saying which right you’re exercising; if your identity is unclear, you may be asked to confirm it. You’ll get an answer within one month.

If you think your rights haven’t been respected, you can complain to the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

8. Children

The site isn’t aimed at children under 14. If you are under 14, don’t send your data: ask a parent or guardian to get in touch (art. 7 LOPDGDD).

9. Security

The site only works over an encrypted connection (HTTPS), and access to the messages received is limited to the controller.

10. Changes

This policy may be updated when the services or the law change. The date of the last update is shown at the top of the page.

Let's talk

I reply within 24 hours.

Book a call →