Back to home

Privacy Policy

Last updated: February 2026

In compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you about the processing of your personal data.

1. Data Controller

  • Identity: Javier Velásquez Rojas
  • Address: C. Severo Ochoa, 11 1a, planta Oficina 2, Madrid, Spain
  • Contact email: hola@javiervr.com

2. Data We Collect

We collect the following personal data through the forms available on this website:

2.1. Contact form

  • Full name
  • Email address
  • Phone number (including country code)
  • Company name (optional)
  • Description of the need or project
  • Estimated budget (optional)

2.2. Interactive chat (virtual assistant)

  • Name
  • Email address
  • Content of messages sent during the conversation

3. Purpose of Processing

We process your personal data for the following purposes:

  • Inquiry management: To respond to information requests you send us through the contact forms or chat.
  • Commercial management: To prepare proposals and quotes related to our AI, automation, and digital transformation services.
  • Communications: To send you information about our services, provided you have given your prior consent.

4. Legal Basis for Processing

The legal basis for processing your data is:

  • Consent of the data subject (Art. 6.1.a GDPR): By submitting a form or starting a conversation in the chat, you give your explicit consent for the processing of your data for the stated purposes.
  • Legitimate interest (Art. 6.1.f GDPR): To manage the business relationship and respond to your requests.
  • Performance of a contract (Art. 6.1.b GDPR): When data is provided in the context of a contracted service.

5. Data Recipients

Your data may be shared with the following data processors:

  • Web3Forms: Form processing service used to receive data from the contact form. Web3Forms Privacy Policy.
  • OpenAI: Artificial intelligence provider used in the interactive chat to generate responses. Messages sent in the chat are processed through their servers. OpenAI Privacy Policy.
  • Vercel: Hosting platform where the website is deployed. Vercel Privacy Policy.
  • Sanity.io: CMS used to manage the blog content. Sanity Privacy Policy.

No international data transfers outside the European Economic Area (EEA) will be made except to providers that have adequate safeguards in place (European Commission Standard Contractual Clauses or equivalent mechanisms).

6. Data Retention Period

  • Contact data and inquiries: These will be retained as long as there is a mutual interest in maintaining the business relationship, and subsequently for the legally established period to address any potential liabilities.
  • Chat data: Chat messages are not stored persistently on our servers. They are processed in real time and are not retained once the session ends.

7. Rights of the Data Subject

In accordance with the GDPR, you may exercise the following rights:

  • Access: To know what personal data we hold about you.
  • Rectification: To request the correction of inaccurate data.
  • Erasure: To request the deletion of your data when it is no longer necessary.
  • Restriction: To request that the processing of your data be restricted under certain circumstances.
  • Portability: To receive your data in a structured, commonly used format.
  • Objection: To object to the processing of your data on grounds relating to your particular situation.
  • Withdrawal of consent: To withdraw your consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

To exercise these rights, send an email to hola@javiervr.com indicating the right you wish to exercise and attaching a copy of your identification document.

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es — if you believe your rights have not been properly addressed.

8. Security Measures

We have implemented the necessary technical and organizational measures to ensure the security of your personal data, including:

  • Encrypted connections via HTTPS/TLS.
  • Restricted access to data by authorized personnel only.
  • Use of providers with recognized security certifications.

9. Minors

This website is not intended for individuals under 16 years of age. If you are under 16, you must not provide us with any personal data. If we discover that we have collected data from a minor without the consent of their parents or guardians, we will proceed to delete it immediately.

10. Modifications

We reserve the right to update this Privacy Policy at any time. The date of the last update is indicated at the top of this page. We recommend reviewing it periodically.