Privacy policy
Last updated:
This policy explains what personal data I collect on luisgraciano.dev, what I use it for and how you can exercise your rights. It follows Colombian Law 1581 of 2012 and Decree 1377 of 2013, and the European Union’s General Data Protection Regulation (GDPR).
Controller
Luis Alberto Graciano Padierna, independent software developer, based in Medellín, Colombia.
For anything about your data: contacto@luisgraciano.dev.
What data I collect
- Contact form: your name, your email and the message you write.
- Email, WhatsApp or LinkedIn: whatever you choose to send me through those channels.
- Technical data: when you visit the site, Cloudflare processes your IP address and browser data to deliver the pages and protect them from attacks. Visit statistics are aggregated, use no cookies and do not identify you.
I do not ask for sensitive data or data from minors.
What I use it for
- Replying to your message.
- Preparing a proposal or agreeing on a project, if you ask me to.
- Understanding, in aggregate, how the site is used so I can improve it.
I do not send marketing, I do not sell or share your data and I make no automated decisions with it.
Consent and legal basis
By ticking the box on the form you give prior, express and informed consent to the processing of your data for these purposes, as required by Colombian Law 1581 of 2012. You can withdraw it at any time.
Under the GDPR, the legal basis is your consent (Art. 6(1)(a)) and the pre-contractual steps you request (Art. 6(1)(b)). Aggregate statistics and site security rely on the legitimate interest of keeping the site running and protected (Art. 6(1)(f)).
Who else processes it
I use providers that process data on my behalf and only to deliver their service:
- Formspree receives the form messages and delivers them to me.
- Google Workspace hosts my email.
- Cloudflare hosts the site, protects it and measures visits without cookies.
- Umami measures visits and clicks on the contact links, in aggregate and without cookies.
These providers may process data outside Colombia and the European Union, including in the United States, under their contractual data protection commitments.
How long I keep it
I keep messages for as long as needed to reply and follow up, and for at most 12 months after our last contact if we do not start a project. If we work together, I keep them for as long as legal and accounting obligations require.
Your rights
You can access, update, correct and delete your data, ask for proof of your consent, withdraw it and find out how I have used your data (Colombian Law 1581 of 2012, Art. 8). If the GDPR applies to you, you can also object to the processing, restrict it and request data portability.
Write to contacto@luisgraciano.dev with the subject “Personal data”, your name and what you need. I answer queries within 10 business days and complaints within 15 business days, as set by Colombian law.
If you are not satisfied, you can contact Colombia’s Superintendence of Industry and Commerce (SIC) or the data protection authority in your country.
Cookies and local storage
This site uses no cookies. It only stores in your browser whether you chose the light or dark theme; that value never leaves your device. Since I do not track you across sites, the “Do Not Track” signal changes nothing.
Security
The site is served over HTTPS only and I apply reasonable measures to protect your data. No system is infallible; if an incident ever affects your data, I will let you know.
Changes
If I change this policy, I will update the date on this page.