Privacy policy
Information on personal data processing under GDPR and applicable Spanish law.
Last updated: 17 June 2026.
1. Data controller
Controller: Guli (Barcelona, Spain). Before final publication, the site owner must complete and validate: name or company name, tax ID (NIF/CIF), professional address and registry details, where applicable.
2. Categories of data processed
Identifying and contact details provided in the form.
Business and project details requested in order to prepare a proposal.
Basic technical browsing data for security and operation.
3. Purposes and legal basis
Responding to requests and preparing proposals: taking pre-contractual steps at the data subject's request (Art. 6(1)(b) GDPR).
Meeting legal obligations: compliance with legal obligations where applicable (Art. 6(1)(c) GDPR).
Site security and abuse prevention: legitimate interest (Art. 6(1)(f) GDPR), with proportionate measures.
Commercial communications: only where specific, separate consent exists (Art. 6(1)(a) GDPR).
4. Recipients and processors
Data may be processed by technology providers necessary to deliver the service (for example hosting, infrastructure and site management tools). The project currently indicates use of infrastructure on Vercel. The owner must complete and keep up to date the final list of providers with their location and international transfer safeguards.
5. International transfers
If a provider processes data outside the European Economic Area, appropriate safeguards will apply in accordance with Articles 44 et seq. of the GDPR (for example standard contractual clauses).
6. Data retention
Enquiries that do not convert into a client: limited period for follow-up and legal defence.
Contractual relationship: for the duration of the relationship and applicable legal periods.
Commercial communications: until consent is withdrawn.
Technical security logs: limited and proportionate period.
7. Data subject rights
You may exercise the rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent where that is the legal basis. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
8. Mandatory nature of the data
Fields marked as mandatory in the form are required in order to handle the request. If they are not provided, it may not be possible to respond to the enquiry correctly.
9. Automated decisions
No automated decisions with legal effects on users are taken in the current site configuration.
For information on cookies and storage, see the Cookie policy.
Need help?
If you have questions about our policies or want to talk about your business, we're here to help.