Privacy Policy

1. Data controller

The person responsible for processing your data is David García. You can reach me at david@studioprime.co.

2. What I collect

Only anonymized pageview data via Google Analytics 4: which pages you view, your approximate location (city or region level, derived from a truncated IP — Google truncates IPs automatically in the EU), the device and browser you use, and how you found the site.

I do not run ads, do not use Google signals, do not collect user-provided data via form fields, and do not share this data with any third party other than Google. The four advertising-related Google Consent Mode v2 signals (ad_storage, ad_user_data, ad_personalization, and ads data redaction) are explicitly denied so Google can't repurpose your visit for advertising or remarketing.

3. Legal basis

Article 6(1)(f) GDPR — legitimate interest in understanding how visitors find and use a personal portfolio so I can keep improving it. The processing is low-risk: aggregated counts only, no cross-site tracking, no advertising profile.

4. Retention

Google Analytics 4 event and user data is retained for 14 months from your last visit, after which Google deletes it automatically.

5. Third-party processor

Google LLC (Google Tag Manager + Google Analytics 4) processes the analytics data on my behalf — GTM loads the GA4 tag, and GA4 sets the cookies. Data may be transferred to the United States under the EU-US Data Privacy Framework, of which Google is a certified participant. See Google's privacy policy and the Data Privacy Framework list.

6. Your rights

Under GDPR Articles 15–22, you have the right to:

• Access the data I hold about you (Art. 15).
• Rectification of inaccurate or incomplete data (Art. 16).
• Erasure ("right to be forgotten") (Art. 17).
• Restriction of processing (Art. 18).
• Portability in a machine-readable format (Art. 20).
• Object to processing based on legitimate interest (Art. 21).

To exercise any of these rights, or to opt out of analytics, write to david@studioprime.co. You can also block analytics yourself in your browser's cookie/privacy settings, or with an extension like uBlock Origin — the site keeps working normally.

7. Complaint to the supervisory authority

You have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or your local equivalent if you live in another EU country.

8. Changes

If I change what's collected, I'll update this page and the "Last updated" date above.