Last updated October 31, 2026
Privacy Policy
Who is responsible for your data
- Owner
- Alexander Cillán Madsen
- Tax ID (NIF)
- 43188009N
- EU VAT ID
- ES43188009N
- Address
- Carrer de Jacint Verdaguer 35, 5A, 07004 Palma de Mallorca, Illes Balears, Spain
- hello@alexandercillan.com
- Website
- www.alexandercillan.com
For anything related to your data, write to hello@alexandercillan.com.
What data is collected and why
- When
- You send an email or a message on WhatsApp, Telegram or Discord
- What data
- Your name, contact details and whatever you include in the message
- Why
- To reply and, if you want, prepare a proposal
- Legal basis
- Steps you asked for before a contract (Art. 6.1.b GDPR)
- When
- You book a call through “Schedule a call” (Cal.com)
- What data
- Name, email, chosen time and any notes
- Why
- To schedule and hold the call
- Legal basis
- Steps you asked for before a contract (Art. 6.1.b GDPR)
- When
- We work together
- What data
- Contact, billing and project details
- Why
- To deliver the project and invoice it
- Legal basis
- Contract and legal obligations (Art. 6.1.b and 6.1.c GDPR)
- When
- You browse the website
- What data
- Anonymous statistics: pages, referrer, approximate location (city and country, from the connection), device type and browser. No cookies, no stored IP address
- Why
- To see which content is useful
- Legal basis
- Legitimate interest (Art. 6.1.f GDPR)
- When
- Any visit
- What data
- Technical logs kept briefly by the hosting provider, such as IP address and browser
- Why
- Security and preventing abuse
- Legal basis
- Legitimate interest (Art. 6.1.f GDPR)
How long data is kept
Enquiries are kept while they're being handled and deleted within 12 months if no project follows. If we work together, project and billing records are kept for as long as Spanish tax and commercial law requires (generally up to 6 years). Visit statistics hold no IP address and no identifier that lasts longer than a day, and are only looked at in aggregated form.
Who processes data on our behalf
- Cloudflare, Inc. (USA): website hosting and delivery.
- Supabase, Inc. (servers in Frankfurt, Germany): storage of the website's own anonymous visit statistics.
- Cal.com, Inc. (USA): call bookings, only if you use “Schedule a call”.
- Namecheap, Inc. (USA), Private Email service: email.
- WhatsApp (Meta), Telegram and Discord: only if you choose to contact us there. Their own privacy policies apply.
Your data is never sold or used for advertising.
International transfers
Some of these providers are based in the United States. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
Your rights
You can ask to access, correct or delete your data, object to or restrict how it's used, and get a copy in a portable format. Write to hello@alexandercillan.com.
If you think your rights haven't been respected, you can complain to the Spanish Data Protection Agency (aepd.es).
Changes
This policy may be updated. The date at the top always shows the current version.