GDPR — Data Protection Information

Last updated: May 2026

1. Your rights as a data subject

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access: obtain confirmation of whether we process your data and, if so, access it.
  • Rectification: request correction of inaccurate or incomplete data.
  • Erasure (right to be forgotten): request deletion of your data when, among other circumstances, it is no longer needed for the purpose for which it was collected.
  • Portability: receive your data in a structured, commonly used format to transmit it to another controller.
  • Restriction of processing: request that processing be restricted in certain circumstances.
  • Objection: object to processing based on legitimate interest.

2. How to exercise your rights

To exercise any of the above rights, email info@nunovalencia.com stating:

  • Your full name
  • The right you wish to exercise
  • A copy of your identity document (to verify your identity)

We will respond within a maximum of 30 calendar days. For particularly complex or numerous requests, this period may be extended by a further 2 months, with notification within the first 30 days.

3. Data we process

We only process data provided through the contact form: name, email address, and an optional project description. We do not process special category data.

4. Data Protection Officer (DPO)

Nuno Valencia is not required to designate a Data Protection Officer (DPO) under Article 37 GDPR, as the organisation does not carry out large-scale processing of sensitive data or activities requiring such designation. For any data protection queries, please contact info@nunovalencia.com directly.

5. International transfers

No transfers of personal data outside the European Economic Area (EEA) take place. All data is processed and stored on infrastructure located within the EEA.

6. Supervisory authority

If you consider that processing of your data infringes GDPR, you have the right to lodge a complaint with the competent supervisory authority in your country of residence or with the Spanish data protection authority (AEPD).