This policy explains what personal data is processed when you use this website or contact its owner, why, for how long, who else is involved, and what your rights are. It complies with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
The controller of your personal data is Tekke Voorham, self-employed professional (autónomo) based in Barcelona, Spain. Identification details are listed in the box on this page. For any privacy question or to exercise your rights, write to hi@tekkevoorham.com.
2. What data is processed, and why
When you use the contact form
- Data: your name, email address, company or website (optional), budget range, the message you write, the language of the page, and the fact that you accepted this policy.
- Purpose: to reply to your enquiry and, if you wish, to prepare a proposal or quote.
- Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and your consent, which you give by ticking the box (Article 6(1)(a) GDPR).
- The form also contains two invisible anti-spam checks (a hidden field and the time taken to fill in the form). They do not identify you.
When you email or send a WhatsApp message
- Data: your name, contact details and whatever you choose to include in your message.
- Purpose and legal basis: as for the contact form — to answer you and, where relevant, to prepare or perform a contract (Article 6(1)(b) GDPR).
- If you use WhatsApp, the conversation is also processed by WhatsApp Ireland Ltd. (Meta) under its own terms and privacy policy.
When you browse the website
- Technical data: to deliver the pages securely, the hosting provider processes technical data such as your IP address, browser type and the pages requested, in short-lived server logs. Legal basis: legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
- Analytics (only with your consent): if you accept analytics in the cookie banner, anonymous visit statistics are collected with Vercel Web Analytics — for example which pages are visited, the referring website, the country and the type of device. This tool does not use cookies, does not store IP addresses and does not track you across websites. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings” in the footer.
3. How long data is kept
- Enquiries that do not lead to a project: up to 12 months after the last contact, and then deleted.
- Enquiries that lead to a project: for the duration of the working relationship and afterwards for as long as legal obligations require (for example, 6 years for accounting records under the Spanish Commercial Code, and the limitation periods for tax purposes).
- Server logs: a few days to a few weeks, according to the hosting provider’s retention.
- Analytics data: aggregated, anonymous statistics only.
4. Who else processes your data
Your data is never sold or used for advertising. It is shared only with the following service providers, who act as processors on the owner’s behalf under data processing agreements:
| Provider | Role | Location and safeguards |
|---|---|---|
| Vercel Inc. | Website hosting, delivery and (with consent) Web Analytics | United States — EU Standard Contractual Clauses and the EU–US Data Privacy Framework |
| Resend (Plus Five Five, Inc.) | Delivering the contact form message to the owner’s inbox | United States — EU Standard Contractual Clauses |
| Apple Distribution International Ltd. (iCloud Mail) | Email hosting for hi@tekkevoorham.com | Ireland / EU, with Apple’s contractual safeguards for any transfers |
| WhatsApp Ireland Ltd. | Only if you choose to contact the owner via WhatsApp | Ireland / EU, under WhatsApp’s own privacy policy |
Data may also be disclosed where required by law, for example to tax authorities or courts.
5. International transfers
Some providers above are based in the United States. Transfers take place on the basis of the European Commission’s adequacy decision for the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses (Article 46 GDPR).
6. Your rights
You have the right to:
- access the personal data held about you;
- rectify inaccurate data or complete incomplete data;
- erase your data (“right to be forgotten”);
- restrict processing in certain circumstances;
- object to processing based on legitimate interest;
- data portability — receive your data in a structured, commonly used format;
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email hi@tekkevoorham.com with a description of your request. You will receive a reply within one month. If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of your EU country of residence.
7. Security
Reasonable technical and organisational measures are applied to protect your data: encrypted connections (HTTPS), access restricted to the owner, spam protection on the contact form, and providers that meet recognised security standards.
8. Other information
- The website is not directed at children under 14 and does not knowingly collect their data.
- No automated decision-making or profiling takes place.
- Providing your data is voluntary, but without a name, email address and message it is not possible to reply to an enquiry.
9. Changes to this policy
This policy may be updated to reflect changes in the website or the law. The date at the top shows when it was last changed.
If translations differ, the Spanish text prevails.