Privacy Policy

1. Controller

Semen Kurtsov — MakeMeSites
NIE/NIF: Y9784779H
Psj Buenos Aires 20, 17310 Lloret de Mar, Girona, Spain
info@makemesites.com

Semen Kurtsov, a self-employed professional trading as MakeMeSites, is the controller of personal data processed through this website. This policy covers website enquiries under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. Data we process

The enquiry forms collect your name and email (required), telephone and message (optional). Please do not include sensitive information. Hosting and email infrastructure process technical information such as IP addresses, timestamps, requested pages and delivery metadata. The contact endpoint uses short-lived, hashed IP counters to limit abuse. Browser storage remembers your cookie choice.

3. Purposes and legal bases

We use enquiries to answer your questions and prepare a proposal or take steps towards a contract at your request (Article 6(1)(b) GDPR). For other correspondence, our legitimate interest in answering communications applies (Article 6(1)(f)). Security and abuse prevention rely on our legitimate interest in protecting the website and mail service (Article 6(1)(f)). Contract administration relies on Article 6(1)(b); legally required tax and accounting records rely on Article 6(1)(c). Submitting an enquiry does not subscribe you to marketing.

Providing data is voluntary. Without a name and valid email we cannot process the form or reply. There is no automated decision-making or profiling producing legal or similarly significant effects.

4. Retention

Enquiry correspondence is retained while the enquiry is being handled and for up to 12 months after the last exchange unless a contract, legal obligation or concrete dispute requires longer retention. Contract and accounting documents are retained for applicable statutory periods. Access to records retained solely for legal obligations or claims is restricted.

Abuse counters use 10-minute windows and expired files are removed by subsequent form requests after 20 minutes. Hosting and email logs and backup retention depend on the configured provider services; contact us for the current applicable periods. Cookie choices expire after 180 days and are replaced when you choose again; expired browser records are ignored and can also be deleted in browser settings.

5. Recipients and international processing

Enquiries are delivered to our business mailbox. Hosting, email and technical support providers may process information on our behalf. Authorities may receive data where required by law. Provider processing that falls under Article 28 GDPR requires appropriate contractual arrangements. We do not sell enquiry information or use it for advertising.

Adobe Fonts is requested directly from Adobe infrastructure to display licensed fonts. The font integration serves our legitimate interest in displaying the website with licensed typography (Article 6(1)(f) GDPR). Adobe receives technical request information including your IP address; see our Cookie Policy and Adobe’s privacy information. External links only connect to their respective services when followed.

Hosting, email and Adobe infrastructure may process information outside the EEA. Where GDPR Chapter V applies, the relevant transfer must have an applicable adequacy decision or other lawful safeguard, such as standard contractual clauses. Contact us for provider identities, processing locations and information about applicable safeguards.

6. Your rights

You may request access, rectification, erasure, restriction and, where applicable, portability of your data. You may object to processing based on legitimate interests on grounds relating to your situation. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing. Write to info@makemesites.com. We may request proportionate information to verify your identity.

We normally respond within one month. Where legally permitted because of complexity or number of requests, this may be extended by two further months, with notice during the first month. You can complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

7. Security and updates

We use validation, restricted mail headers and abuse controls for the enquiry endpoint. No internet transmission is entirely risk-free. Changes to purposes, providers or tracking must be reflected in this policy and, where needed, communicated before the new processing begins.