Privacy policy
Which personal data eloicotonat.com processes, why, and how to exercise your rights, under the General Data Protection Regulation (GDPR) and Spanish data protection law.
Last updated: 8 October 2026
Controller
Eloi Cotonat Donat · Barcelona (Spain). Contact: hola (at) eloicotonat (dot) com.
What data and why
Contact form: name, email, project type and the message you write. Used only to reply to your enquiry and, if you ask, to prepare a proposal.
Direct email: whatever data you include in your email, for the same purpose.
There are no user accounts, newsletters or marketing emails, and data is not used for profiling.
Legal basis
Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) when you write about a project, and legitimate interest in replying to any other enquiry (Art. 6(1)(f) GDPR). The form's anti-spam check relies on the legitimate interest in protecting the site and your message from automated abuse (Art. 6(1)(f) GDPR).
How long
For as long as the conversation lasts and, if we don't end up working together, for up to 12 months. If there is a project, for the duration of the professional relationship and any legally required periods (e.g. tax).
Who else is involved
Web3Forms: the service that receives the form and forwards it to me by email.
hCaptcha (Intuition Machines, Inc.): checks that whoever sends the form or asks to see my email is a person and not a bot. It only loads on the contact page, once you start filling in the form or press «Show email», and receives technical data from your browser and the interaction (such as your IP address) for that check. Its policy: hcaptcha.com/privacy.
Vercel Inc.: site hosting. Like any server, it logs technical visit data (such as IP addresses) to serve and protect the site.
My email provider, where messages are received and stored.
Some of these providers may process data outside the European Economic Area, with the safeguards provided by the GDPR (such as the EU-US Data Privacy Framework or standard contractual clauses). I do not share your data with anyone else unless legally required.
No analytics
This site carries no analytics tool at all: visits and behaviour are not measured. Only the technical log the hosting keeps in order to serve the site remains.
Cookies and local storage
This site does not set cookies of its own. If you start filling in the contact form or ask to see the email, hCaptcha may use its own, needed for its anti-spam check. Beyond that, it stores in your browser (localStorage and sessionStorage) only your light or dark theme preference and two technical flags to avoid repeating the intro animation and to keep your scroll position when switching language. They never leave your device.
Your rights
You can request access, rectification, erasure, objection, restriction of processing or portability of your data by writing to hola (at) eloicotonat (dot) com.
If you believe they have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).