Privacy and personal data policy

1. Controller and scope

The data controller is Diego Fernando Martinez, an independent professional. Registered address: Carrera 73 # 20A-40, Medellín, Antioquia, Colombia. Email: diferez676@gmail.com. Phone: +57 304 274 9571. This policy applies to the portfolio and its direct contact channels.

You may submit a privacy request by email at diferez676@gmail.com or by phone at +57 304 274 9571.

2. Data processed

• Data you voluntarily share by email or phone, such as your name, email address, company, request context, and any information you include.
• Language preference: a first-party cookie named portfolio_locale and the local record that you dismissed the cookie notice.
• Technical and general usage data sent to Google Analytics 4 only after consent, such as visited pages, language, approximate device information, and navigation events. Names, email addresses, messages, and contact details are not sent.

3. Purposes and legal grounds

• Respond to your request, assess a potential engagement, and preserve conversation context.
• Address legal duties or claims where applicable.
• Processing information sent through direct channels relies on your authorization and the legitimate interest in responding and protecting the service. Data is not used for advertising, mailing lists, profiling, or automated decisions.

4. Processors and international processing

The site uses Cloudflare infrastructure for hosting and security. Messages sent by email may also be processed by the relevant email provider to deliver and store them. If you allow analytics, Google Analytics 4 processes the measurement data configured in the property. These providers may process information outside Colombia under their own security measures and commitments.

Personal data is not sold or shared with third parties for advertising. It is disclosed only when needed to provide the service, comply with law, or protect rights.

5. Retention

Information received through direct channels is retained only as long as needed to respond and meet legal duties, unless it must be kept longer to resolve a dispute or exercise legal rights. It is then reasonably deleted or anonymized.

6. Your rights

Use the channel in section 1 and identify your request, the right you wish to exercise, and information needed to verify your identity. Requests are handled within applicable legal deadlines; where the GDPR applies, normally within one month, subject to lawful extensions.

• Know, access, update, and correct your personal data.
• Request proof of authorization, learn how data was used, withdraw authorization, and request deletion where applicable.
• Object to or request restriction of processing where applicable.
• Complain to a competent supervisory authority, including Colombia's Superintendence of Industry and Commerce where applicable.

7. Sensitive data and children

Do not send sensitive or financial data, credentials, secrets, or identity documents through the contact channels. The site is not directed to children and does not intentionally collect their data.

8. Security and changes

Minimization, access control, and encrypted transport where applicable are used. No system is infallible; relevant incidents will be handled under applicable obligations.

Material changes will be published here with a new update date.