Legal information
Legal notice
This site presents Rico’s work and professional services in software architecture, application security and automation. The code review is a fictional example. The site takes no orders and processes no payments.
The Spanish notice lists the site operator’s full name, NIE, postal address and professional email address. It also links to the operator’s Fiverr profile.
Privacy notice
Read the Spanish privacy notice
The site operator is responsible for processing personal data. The operator’s name and contact details are listed in the Spanish legal notice.
When you load a page, the server receives your IP address and the request data it needs to deliver the content. This version has no forms. No access log is kept. Neither the reverse proxy (Traefik), which accepts the HTTPS connections, nor the web server (NGINX) logs page visits.
Only the error logs of the web server and the proxy are stored. They can contain the IP address, the date and time, the requested address and other technical data of the request that caused the error. They are used only to find and fix errors and to protect the security of the site. The legal basis is the legitimate interest in running the website securely and without faults (Article 6(1)(f) of the GDPR). The logs rotate automatically by size: at most 2 MB for the web server and at most 150 MB for the proxy. When that limit is reached, the oldest entries are deleted. The web server log is also deleted whenever a new version of the site is published.
Contact by email is voluntary. If you write to the address in the legal notice, the operator uses your email address, message and any details you provide to answer your inquiry. To reply, the operator needs your email address and enough information to understand your inquiry.
Where processing is necessary to take steps you requested before entering into a contract, such as preparing a quote, the legal basis is Article 6(1)(b) of the GDPR. For other inquiries, the legal basis is the operator’s legitimate interest in handling professional correspondence under Article 6(1)(f).
Inquiries that do not lead to an assignment are deleted 12 months after the last message. Correspondence about an assignment is kept for as long as tax retention periods require.
The site is hosted on a server of Hetzner Online GmbH in its Falkenstein data centre in Germany. The email address in the legal notice is managed by Proton AG in Switzerland as the email provider. If you get in touch through Fiverr, Fiverr International Ltd. in Tel Aviv, Israel, processes the data you provide on the platform as an independent controller under its own privacy policy.
Switzerland and Israel are outside the European Economic Area. The European Commission has recognised that both countries provide an adequate level of data protection. The transfers to Proton and Fiverr are based on these adequacy decisions (Article 45 of the GDPR). For its own transfers from the EEA to other countries, such as the United States, Fiverr states in its privacy policy that it uses EU standard contractual clauses and explains how to request a copy of those safeguards. There are no other transfers outside the EEA.
You can ask to access, correct or erase your personal data or restrict its processing. Where applicable, you can object to processing or request data portability. To exercise your rights, use the contact details in the legal notice. You can also lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD).