Privacy and personal data policy

1. Controller and scope

The data controller is Diego Fernando Martinez, an independent professional. Registered address: Carrera 73 # 20A-40, Medellín, Antioquia, Colombia. Email: diferez676@gmail.com. Phone: +57 304 274 9571. This policy applies to the portfolio and its contact form.

You may submit a privacy request through the portfolio form by selecting “Privacy request,” by email at diferez676@gmail.com, or by phone at +57 304 274 9571.

2. Data processed

• Data you submit: name, email address, optional company, project type, message, preferred language, and proof of authorization.
• Transient technical data: IP address used during the request-limiting window to prevent abuse. This portfolio does not store it with the message.
• Language preference: a first-party cookie named portfolio_locale and the local record that you dismissed the cookie notice.

3. Purposes and legal grounds

• Respond to your request, assess a potential engagement, and preserve conversation context.
• Protect the form against spam, fraud, and abusive use.
• Keep evidence of authorization and address legal duties or claims.
• The form relies on your prior, express, and informed consent. Site security also relies on the legitimate interest in protecting the service. Data is not used for advertising, mailing lists, profiling, or automated decisions.

4. Processors and international processing

The site uses Cloudflare infrastructure for hosting, security, and D1 message storage. When email delivery is enabled, Resend processes the message to deliver it to the controller. These providers may process information outside Colombia under their own security measures and commitments.

Personal data is not sold or shared with third parties for advertising. It is disclosed only when needed to provide the service, comply with law, or protect rights.

5. Retention

Messages and authorization evidence are retained for up to 12 months from receipt, unless they must be kept longer to comply with law, resolve a dispute, or exercise legal rights. They are then reasonably deleted or anonymized.

The IP used by the portfolio for request limiting remains in memory only for the one-minute technical window. The language cookie lasts up to 12 months or until you remove it.

6. Your rights

Use the channel in section 1 and identify your request, the right you wish to exercise, and information needed to verify your identity. Requests are handled within applicable legal deadlines; where the GDPR applies, normally within one month, subject to lawful extensions.

• Know, access, update, and correct your personal data.
• Request proof of authorization, learn how data was used, withdraw authorization, and request deletion where applicable.
• Object to or request restriction of processing where applicable.
• Complain to a competent supervisory authority, including Colombia's Superintendence of Industry and Commerce where applicable.

7. Sensitive data and children

The form does not request sensitive or financial data, credentials, secrets, or identity documents. Do not include them. The site is not directed to children and does not intentionally collect their data.

8. Security and changes

Validation, minimization, access control, encrypted transport, and request limiting are used. No system is infallible; relevant incidents will be handled under applicable obligations.

Material changes will be published here with a new update date and renewed consent will be requested when required.