Last updated: 22.08.26
Privacy policy
Who is responsible for your data
Nicolas Zauner, an individual based in Spain, running this site for personal and professional presentation purposes. Contact: nicolas.zauner@iese.net.
This site is not a commercial offering. Nothing is sold here.
What data I collect
Contact form: your name, your email address, the content of your message, and the time you submitted it, including the timestamp of your consent.
Direct email: whatever you choose to include when you write to me.
Technical data: my hosting provider automatically processes standard server log data such as IP address, browser type, and time of request, in order to deliver the site and protect it against abuse. I do not use this data to identify visitors.
I do not collect any special category data and I ask you not to send any.
Why I process it, and on what legal basis
To read and reply to your message. Legal basis: your consent, Article 6(1)(a) GDPR, given when you tick the box on the contact form. If you email me directly, the basis is my legitimate interest in responding to correspondence addressed to me, Article 6(1)(f) GDPR.
To keep the site available and secure. Legal basis: legitimate interest, Article 6(1)(f) GDPR.
You are not obliged to provide any data. Without a name, message, and email address I cannot reply.
Who else has access
Contact form submissions are stored in a database hosted by Supabase, acting as my processor under a data processing agreement, in the EU (Frankfurt) region. The site is hosted by Lovable, also acting as a processor.
I do not share your data with anyone else. I do not sell it, and I do not use it for advertising or profiling.
Where data is processed outside the European Economic Area, the transfer is covered by the European Commission’s standard contractual clauses.
How long I keep it
Contact form submissions and email correspondence: up to 24 months after our last exchange, then deleted. If you ask me to delete them sooner, I will, unless I am legally required to keep them.
Server logs: kept for the short retention period set by my hosting provider.
Cookies and tracking
This site uses no analytics, no tracking pixels, no advertising cookies, and no social media plugins. Only cookies strictly necessary for the site to function may be set, which under Article 22.2 LSSI-CE do not require your consent. There is no cookie banner because there is nothing to consent to.
Automated decisions
None. No profiling, no automated decision-making.
Your rights
Under the GDPR and the Spanish LOPDGDD you can ask me to give you a copy of your data, correct it, delete it, restrict how I use it, or transfer it to you in a portable format. You can object to processing based on legitimate interest, and you can withdraw your consent at any time, which does not affect anything done before you withdrew it.
Write to nicolas.zauner@iese.net and I will respond within one month.
If you think I have handled your data badly, you can complain to the Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.
Security
Data is transmitted over HTTPS and stored in a database with access restricted to me. No system is perfectly secure, but I take reasonable measures to protect what you send me.
Children
This site is not aimed at children. If you are under 14, please do not send me personal data through this site.
Changes
If I change how the site handles data, I will update this page and the date at the top.