Privacy policy
Your data isn’t a collectible. We only process what’s needed to run this website and to help you.
Updated 4 November 2026. This is a courtesy translation: if it differs from the Spanish version, the Spanish version prevails.
1. Data controller
| Item | Details |
|---|---|
| Controller | Pablo Fernández Piña (trading as elFen23SOFT) |
| Tax ID (NIF) | 72.042.657-X |
| Address | Calle Fernando de los Ríos, 70, 39006 Santander, Cantabria, Spain |
| Privacy contact | elfen23soft@gmail.com |
We have not appointed a data protection officer. You can send any privacy enquiry to the email address above.
2. What it applies to
This policy applies to this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Apps, games, stores and social networks may have their own policies. When you use those services, check the relevant policy.
This website has no user registration or forms, and does not sell products.
3. What data we process, why, and on what legal basis
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact | Your email address, your name if you give it, and the content of your message | Replying to your enquiry | Legitimate interest in handling communications received (Art. 6(1)(f) GDPR) or pre-contractual measures where applicable (Art. 6(1)(b) GDPR) | While the enquiry is handled and for up to 12 months afterwards. After that, only blocked if they must be kept for a legal obligation or possible claims |
| Operation and security | IP address, date and time, pages requested, browser, device and access attempts | Providing the website, preventing abuse and protecting the site | Legitimate interest in website security (Art. 6(1)(f) GDPR) | Up to 12 months, unless needed to investigate an incident |
| Fonts | IP address and technical browser data | Displaying the website’s fonts through Google Fonts | Legitimate interest in displaying the website correctly (Art. 6(1)(f) GDPR) | According to Google’s policy |
| Analytics and measurement | Online identifiers, pages viewed, interactions, technical data and approximate location | Measuring and improving use of the website | Your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI) | Up to 14 months in Google Analytics, or less if you withdraw consent and request erasure |
We do not use this data for solely automated decisions with legal effects on you, or for profiling for that purpose.
4. Where the data comes from
The data comes from you when you write to us and from your device when you visit the website. If you write on someone else’s behalf, you must be entitled to do so.
5. Who we share it with
We do not sell your data. Providers of services to us, such as web hosting, security, email and analytics, may access it, following our instructions or in the capacity that applies to their service.
Google is involved in email, Google Fonts and, if you accept it, Google Analytics. We may also disclose data to authorities and courts where legally required.
6. International transfers
Using Google services may involve data transfers to the United States. These rely on the adequacy decision for the EU-US Data Privacy Framework where the recipient participates and, failing that, on the safeguards provided by the GDPR, such as standard contractual clauses. You can ask us about these safeguards by writing to elfen23soft@gmail.com.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to elfen23soft@gmail.com. We will reply within one month, which may be extended in the cases provided for by the GDPR. If we have reasonable doubts about your identity, we may ask for the information needed to confirm it.
Where processing is based on your consent, you can withdraw it at any time from the cookie policy. Withdrawal does not affect the lawfulness of prior processing.
If you believe we have not handled your rights correctly, you can complain to the Spanish Data Protection Agency (AEPD) or to the supervisory authority in your country of residence.
8. Minors
This website is not aimed at children under 14 and does not knowingly collect their data. If you are under 14, you need the consent of your parent or guardian before giving us personal data. If we find we have received data without that authorisation, we will delete it.
9. Security
We apply technical and organisational measures appropriate to the risk. No system is infallible, but if a security breach occurs we will act in accordance with the applicable rules.
10. Changes to this policy
We will update this policy if our processing or the rules change. The current version is the one published on this page, with the date shown at the top.