AURÉLIO PAZ DA LUZ

Privacy policy

Updated 30 October 2026. This notice explains how personal data is handled through aureliopaz.com and communications about professional opportunities. The controller is based in Spain.

1. Controller and contact

Aurélio Paz da Luz, an independent professional, is the data controller. Address: Rúa do Escultor Asorey, 12, 15704 Santiago de Compostela, A Coruña, Spain. For privacy inquiries or to exercise your rights, email [email protected]. This professional website does not provide public user accounts, a shop or an applicant tracking portal.

2. Information collected

• Professional inquiries: your name, work email, company or agency, role offered, working arrangement, role location, optional job link and message. This information comes from the person who submits the form or contacts me directly.
• Correspondence: email address, telephone number and message content when you choose email or WhatsApp.
• Operation and security: infrastructure providers may process IP addresses, timestamps, requested URLs, browser information and technical identifiers needed to operate and protect the service.
• Optional measurement: if you accept, the Google tag configured through Site Kit may process browsing and device information and identifiers for website measurement.
• Language and location: an explicit language choice is remembered for up to 180 days. If you click “Use my location” and allow the browser request, coordinates are compared with a locally hosted map on your device to suggest a language. This feature neither sends coordinates to this website’s server nor stores them. Your browser may use its own location service.

Please do not include special category data, identity documents or other people’s CVs in your message or job link.

3. Purposes and legal bases

• Assessing and replying to opportunities: requested pre-contractual steps where applicable (Article 6(1)(b) GDPR), or the legitimate interest in managing professional inquiries from company and recruitment representatives (Article 6(1)(f)). That interest is to assess and respond to communications relevant to my professional activity. You may object where the law permits.
• Acknowledging your submission: confirming that the website processed the form as part of the communication you requested. This is not a marketing subscription.
• Operating and protecting the website: legitimate interests in security, abuse prevention and service operation, and compliance with legal duties where applicable.
• Remembering your language and cookie choices: providing the functionality you request and respecting your preferences.
• Optional Google measurement: your prior consent, which you can withdraw through “Cookie preferences” in the footer.
• Keeping relevant correspondence: legitimate interests in managing professional relationships and establishing, exercising or defending legal claims.

The privacy checkbox confirms that you have read this information. It does not authorize marketing or replace the legal bases above. The form is not used to make automated decisions producing legal or similarly significant effects about visitors.

4. Required information

Fields marked with * are required to identify the sender, understand the opportunity and reply. Without them the form cannot be submitted. The role location and job link are optional. You may email me instead of using the form.

5. Recipients and services

The controller and providers involved in hosting, email delivery and website protection process data as needed for their services. These include Hostinger, Cloudflare and the email operators involved in correspondence. WordPress and GenerateBlocks Pro run on the website’s infrastructure. Valid form submissions are temporarily stored in the administration panel and emailed to me; an acknowledgment is also sent to the address supplied.

Google receives measurement data only if you accept the optional Google tag. Opening WhatsApp, LinkedIn or a portfolio link takes you to an external service with its own privacy terms. The profile photographs are served from this website’s media library. Personal data is not sold and the form is not configured as a marketing mailing list.

6. International transfers

Infrastructure, email and measurement services may involve processing outside the European Economic Area. The email provider chosen by a correspondent may also affect where a message is processed. Any transfer must meet the requirements of Chapter V GDPR, using an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses and any necessary additional measures. You can request details of the providers and applicable safeguards at [email protected]. Accepting measurement cookies does not replace legally required transfer safeguards. No provider-specific contractual guarantee is made by this notice.

7. Retention

The form module uses its native retention limit of 180 days and up to 500 stored submissions per form. Email correspondence is separate: it is kept while a conversation remains active and, as a general retention rule, for up to 24 months after the last contact for follow-up. Information may be retained longer when required by law or needed for legal claims. Reviewing email retention is the controller’s responsibility; it is not automated by the form’s cleanup.

Language and cookie preference cookies expire after 180 days. Security logs and backups follow providers’ operational retention cycles. Optional Google technology has its own configured lifetimes. See the Cookie policy for withdrawal and cookie removal.

8. Your rights and complaints

Subject to the conditions and limits in the GDPR, you may request access, rectification, erasure, restriction, portability and object to processing. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. Send your request to [email protected]. Additional identity information will only be requested where necessary and proportionate.

You may complain to the Spanish Data Protection Agency (AEPD). Within the EU/EEA, the GDPR also permits a complaint to the competent supervisory authority for your habitual residence, workplace or the alleged infringement, where applicable. You may also contact a competent EU/EEA supervisory authority where applicable. If a U.S. state privacy law applies to this processing, rights and complaint channels under that law remain available. Send a request to [email protected] so it can be assessed under the applicable rules.

9. Applicable context, security and updates

The EU GDPR and Spanish data protection rules apply to this Spain-based activity. This U.S. English edition does not establish the controller in the United States or remove GDPR protections. U.S. state privacy laws, including the California CCPA/CPRA, have their own scope and business thresholds. The language of this page or a visit from the United States alone does not establish that a particular state law applies. Additional mandatory rights will be assessed on the actual processing and statutory criteria.

The website uses HTTPS, access controls and infrastructure security measures, but no system or email service is risk-free. Do not send sensitive information. This notice will be reviewed when relevant services, processing or legal requirements change.

10. Comments and external content

On blog articles, name, email address and comment text are required. WordPress also records the date, IP address and browser details to manage discussion and prevent abuse. The Website field is not shown; a value sent manually is discarded.

Every comment requires manual approval. A previously approved author is not approved automatically again. Once approved, the name and comment text may be public; the email address, IP address and browser details are not displayed with the article.

Participation is voluntary. Processing to moderate and maintain a safe discussion relies on the controller’s legitimate interest, subject to the controller’s review. Comments are kept while the article and discussion remain available and relevant; when they no longer are, they will be reviewed for deletion or anonymization unless a justified legal need applies. The rights described above continue to apply.

The optional form checkbox lets WordPress save name and email in cookies for future comments. Videos and other third-party content load only after you choose to load them; the provider may then receive technical data and set its own cookies. An alternative link is provided. Your Google measurement choice is separate.