Last updated October 31, 2026

Privacy Policy

Who is responsible for your data

Owner
Alexander Cillán Madsen
Tax ID (NIF)
43188009N
EU VAT ID
ES43188009N
Address
Carrer de Jacint Verdaguer 35, 5A, 07004 Palma de Mallorca, Illes Balears, Spain
Email
hello@alexandercillan.com
Website
www.alexandercillan.com

For anything related to your data, write to hello@alexandercillan.com.

What data is collected and why

When
You send an email or a message on WhatsApp, Telegram or Discord
What data
Your name, contact details and whatever you include in the message
Why
To reply and, if you want, prepare a proposal
Legal basis
Steps you asked for before a contract (Art. 6.1.b GDPR)
When
You book a call through “Schedule a call” (Cal.com)
What data
Name, email, chosen time and any notes
Why
To schedule and hold the call
Legal basis
Steps you asked for before a contract (Art. 6.1.b GDPR)
When
We work together
What data
Contact, billing and project details
Why
To deliver the project and invoice it
Legal basis
Contract and legal obligations (Art. 6.1.b and 6.1.c GDPR)
When
You browse the website
What data
Anonymous statistics: pages, referrer, approximate location (city and country, from the connection), device type and browser. No cookies, no stored IP address
Why
To see which content is useful
Legal basis
Legitimate interest (Art. 6.1.f GDPR)
When
Any visit
What data
Technical logs kept briefly by the hosting provider, such as IP address and browser
Why
Security and preventing abuse
Legal basis
Legitimate interest (Art. 6.1.f GDPR)

How long data is kept

Enquiries are kept while they're being handled and deleted within 12 months if no project follows. If we work together, project and billing records are kept for as long as Spanish tax and commercial law requires (generally up to 6 years). Visit statistics hold no IP address and no identifier that lasts longer than a day, and are only looked at in aggregated form.

Who processes data on our behalf

  • Cloudflare, Inc. (USA): website hosting and delivery.
  • Supabase, Inc. (servers in Frankfurt, Germany): storage of the website's own anonymous visit statistics.
  • Cal.com, Inc. (USA): call bookings, only if you use “Schedule a call”.
  • Namecheap, Inc. (USA), Private Email service: email.
  • WhatsApp (Meta), Telegram and Discord: only if you choose to contact us there. Their own privacy policies apply.

Your data is never sold or used for advertising.

International transfers

Some of these providers are based in the United States. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

Your rights

You can ask to access, correct or delete your data, object to or restrict how it's used, and get a copy in a portable format. Write to hello@alexandercillan.com.

If you think your rights haven't been respected, you can complain to the Spanish Data Protection Agency (aepd.es).

Changes

This policy may be updated. The date at the top always shows the current version.