Legal notice & privacy

1. Website owner

In compliance with Article 10 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), the identifying details of the owner of this website are provided below:

Owner

Miguel Ángel Quiroga Herrera

Website

quirogaherrera.com

Contact email

miguel@quirogaherrera.com

Purpose of the site

Professional portfolio of an informational and contact nature. No products or services are sold online.

2. Purpose and terms of use

This website is purely informational: it presents the owner's professional background and offers a contact channel. Access is free and requires no registration. By browsing it, you accept this legal notice as published at any given time.

You agree to use the site in accordance with the law, this notice and public order, refraining from using it for unlawful purposes or in ways that could damage, overload or impair the site or prevent its normal use by others.

3. Intellectual and industrial property

The contents of this site (texts, design, code, images and the owner's portrait) belong to Miguel Ángel Quiroga Herrera or are used with the corresponding authorisation, and are protected by intellectual and industrial property law. Their reproduction, distribution or transformation without the owner's express authorisation is prohibited, except for uses permitted by law.

4. Liability

The owner strives to keep the site's information correct and up to date, but does not guarantee the absence of errors or uninterrupted availability of the service. To the extent permitted by law, the owner is not liable for:

• Damages arising from improper use of the site by third parties.
• Interruptions, viruses or technical failures beyond the owner's control.
• The contents of external linked sites, which remain the responsibility of their own owners.

5. External links

This site may include links to third-party pages (for example, the owner's professional profile on LinkedIn). The owner neither controls nor assumes responsibility for the content, privacy policies or practices of those external sites; their inclusion does not imply any endorsement of their content.

6. Governing law and jurisdiction

This legal notice is governed by Spanish law. For the resolution of any dispute arising from access to or use of the site, the parties submit to the courts and tribunals designated by the applicable regulations.

1. Data controller

The controller of the personal data collected on this site is:

Controller

Miguel Ángel Quiroga Herrera

Contact email

miguel@quirogaherrera.com

Website

quirogaherrera.com

2. What data I process and why

I only process the data needed for the following purposes:

• Contact form: the data you provide (name, email address, subject and message) is used to handle and reply to your enquiry, including an automatic acknowledgement of receipt sent to your email.
• Form security: your IP address is processed temporarily to prevent abuse and mass sending (anti-spam control). It is not used to identify you or to build profiles.
• Audience measurement: aggregated, anonymous usage statistics (page views, country, device type) are collected to understand how the site is used and to improve it. This analytics does not use cookies and does not identify visitors individually.

The email and message fields are necessary to handle and reply to your enquiry; if you do not provide them, it cannot be processed. The name and subject fields are optional.

3. Legal basis for processing

• Handling your message: your request and the consent you give by submitting the form (Art. 6.1.a and 6.1.b GDPR).
• Anti-abuse security via the IP address: the owner's legitimate interest in protecting the site against fraudulent use (Art. 6.1.f GDPR).
• Aggregated audience measurement: the owner's legitimate interest in anonymously understanding how the site is used (Art. 6.1.f GDPR).

4. Retention periods

• Contact messages are kept in the owner's mailbox for as long as needed to handle your enquiry and maintain any resulting relationship; they are then deleted.
• Anti-abuse control data (IP) are temporary counters that expire automatically within a short period.
• Analytics data is aggregated and anonymous, so it cannot identify you.

5. Recipients and data processors

I do not transfer your data to third parties for their own purposes, nor do I sell it. To provide the service, the following providers act as data processors, solely on my instructions and under a contract in accordance with Art. 28 GDPR:

• Vercel Inc.: hosting of the website and execution of the function that processes the form.
• Google (Gmail / SMTP): transport and storage of the email through which I receive your message.
• Upstash: database that manages the anti-abuse control based on the IP address.

6. International transfers

Some of these providers may process data on servers located outside the European Economic Area. In such cases, the transfer is covered by appropriate safeguards under Articles 44 to 49 GDPR, such as adherence to the EU-US Data Privacy Framework or the signing of standard contractual clauses approved by the European Commission.

7. Your rights

You may exercise your data protection rights at any time by writing to miguel@quirogaherrera.com, stating the right you wish to exercise. Specifically, you have the right to:

• Access your personal data.
• Request the rectification of inaccurate data.
• Request its erasure when it is no longer necessary.
• Request the restriction of, or object to, its processing.
• Request the portability of the data you have provided.
• Withdraw at any time the consent given when submitting the form, without affecting the lawfulness of processing based on consent before its withdrawal.

If you believe the processing does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Cookies and analytics

This site is designed to respect your privacy, which is why it shows no cookie banner: it uses no advertising, tracking or third-party cookies. Specifically:

• Technical language cookie (NEXT_LOCALE): remembers the language you view so it does not ask you again on every visit. It is a first-party, functional cookie, exempt from consent under Article 22.2 of the LSSI and the AEPD cookie guidelines.
• Vercel analytics: measures site usage in an aggregated, anonymous way without installing any cookie or storing information on your device, so it does not require prior consent.

As no cookie or technology requiring consent is installed, no cookie notice is needed to browse the site.

9. Security

The site applies technical measures to protect your data, such as encryption of communications via HTTPS and a strict content security policy. No system is infallible, but reasonable measures are applied to safeguard the confidentiality and integrity of the information.

10. Minors

This site and its contact form are intended for adults. No data from minors is knowingly collected; if you are a minor's legal guardian and notice otherwise, please write to me so it can be deleted.

11. Changes to this policy

This policy may be updated to reflect legal or technical changes. The version in force is always the one published on this page, with its last-updated date shown above.