Privacy policy
Updated on 30 October 2026
This notice explains how I process personal data when you visit Iñigo López Callejo’s website, send an enquiry and, if you choose to, receive communications about my content and services.
Controller and contact
Iñigo López Callejo, self-employed professional, is the controller. Email: hola [at] lopezcallejo [dot] com. Postal contact and tax identification are in the legal notice.
Browsing and technical diagnostics
The hosting service processes connection information, such as IP addresses and request data, to deliver pages and maintain security and availability. Cloudflare also supplies Network Error Logging (NEL) instructions that allow compatible browsers to report connection failures. This serves the legitimate interest of operating a reliable, secure website. I do not use these diagnostics for marketing or decisions about individuals.
The observed reporting instruction lasts seven days in the browser. This is not a personal-data retention period. Technical data are processed as necessary to provide and protect the service and handle incidents under provider terms. See Cloudflare’s NEL information or contact hola [at] lopezcallejo [dot] com for details.
Data and purposes
Enquiries collect your name, professional email and organisation (required), and optionally your needs. Form source, available campaign references and submission identifiers support enquiry management. Avoid unnecessary sensitive data or information about other people.
Enquiries are handled to take precontractual steps you request, where applicable (GDPR Article 6(1)(b)), or to maintain a professional relationship with the organisation you represent under legitimate interests (Article 6(1)(f)). Legal duties and rights requests are handled under Article 6(1)(c).
Marketing emails about leadership, team development and services require the relevant permission. This form asks for optional consent (Article 6(1)(a)); refusal does not affect your enquiry. An enquiry does not automatically subscribe you. Leaving a later checkbox empty does not itself withdraw earlier permission. You can withdraw consent by email or through the unsubscribe mechanism in each communication. Where authorised, the response, date, notice text and evidence reference are retained.
Retention
Enquiries are kept as long as necessary for their purpose. Enquiries not leading to a contract receive a manual review 36 months after the last meaningful contact. This is neither automatic deletion nor a minimum retention period. Continued retention requires a documented purpose, lawful basis and next review; unnecessary data are erased, anonymised or restricted as applicable. Rights requests are considered when received. Contractual and statutory retention duties may apply if a service is purchased. Marketing records are reviewed periodically and retained until permission is withdrawn or their purpose ends. Minimum restricted evidence and suppression records may remain where needed to respect objections or address liabilities.
Service providers and international transfers
The enquiry process uses Tally for forms and Attio for commercial contact management, Cloudflare Workers for hosting, and Microsoft 365 for email. Providers process data to deliver these services under applicable terms. Information may also be disclosed to meet legal obligations. Your data are not sold.
Providers or subprocessors may process data outside the EEA. Their published terms include mechanisms such as European Commission standard contractual clauses or applicable adequacy decisions. The relevant mechanism depends on the provider, contracting entity and destination. See the provider agreements linked in the Spanish privacy policy, or request details by email.
Your rights
You can request access, correction, erasure, restriction, objection and portability where applicable, and withdraw consent without affecting prior lawful processing. Contact hola [at] lopezcallejo [dot] com. Additional identification is requested only when reasonably necessary, not routinely a copy of your identity document. You may complain to the Spanish Data Protection Agency (AEPD).
Automated decisions and browsing
The enquiry process automates administrative recording and follow-up; commercial assessment and responses remain personal. No solely automated decisions with legal or similarly significant effects are planned. Tally forms use random identifiers in browser local storage. The purposes and retention periods described by Tally support are explained in the cookie policy. This notice will be updated when processing changes; any required new consent will be requested before the relevant processing.