Owner and contact details
The owner of this website is a self-employed professional using the trading name Geazoon Engineering. The owner and data controller’s details are set out below; the brand does not replace that identification.
- Brand
- Geazoon Engineering
- Planned domain
- https://engineering.geazoon.com
- Owner’s first and last names
- Ginés Heredia Cuadrado
- Tax identification number
- 33909807X
- Business address and country
- Jacint Verdaguer, 18, Palau-Solità de Plegamans, España
- Contact email
- contact@geazoon.com
Scope of this policy
This policy covers the corporate website and enquiries received at its contact email. It does not cover data processing within the applications shown in the projects section.
The current version has no forms, user accounts, newsletter, payments, analytics or advertising trackers. Images, videos and fonts are served from the site itself.
Data that may be processed
If you send an email, we receive your address, the name shown by your application, and the message or files you choose to attach. Provide only what is needed to answer your enquiry; you do not need to send a copy of an identity document to make contact.
The owner personally handles enquiries. The addresses on the Catalan, English and French versions are aliases that deliver messages to the same Google Workspace mailbox. A separate mailbox is not created for each language.
When you visit the website, the infrastructure receives technical data needed to deliver pages, such as your IP address and browser request. Error or security logs may contain some of this information. No visit history is created for commercial purposes and no visitor analytics are used.
The reviewed proxy configuration does not enable ordinary access logs. The prepared static service also disables them, while retaining technical incident logs. This does not make browsing anonymous.
Purposes and legal bases
We process the data needed for the following purposes:
Making contact does not subscribe you to advertising. We do not use these data for marketing campaigns, visitor profiles or incompatible purposes. You can object to processing based on legitimate interests as described in the rights section.
- Handling requests for quotes or services and taking the pre-contractual steps you request, where you would be a party to that potential contract (Article 6(1)(b) GDPR).
- Answering other professional enquiries, including those made on behalf of an organisation: the legitimate interest in responding to communications voluntarily addressed to the owner and providing related follow-up (Article 6(1)(f) GDPR).
- Delivering pages, detecting faults and protecting the website: the legitimate interest in maintaining service availability and security, using the necessary technical information (Article 6(1)(f) GDPR).
Retention
Enquiries that do not lead to a contract are retained for a maximum of six months from the last contact relating to the enquiry. Where a claim or an applicable retention obligation requires it, only the necessary information is retained, with restricted access, for the relevant period.
If a service is contracted, the documents needed to manage it, comply with obligations or address related claims are retained in accordance with that relationship and the applicable legal periods.
For this website’s own errors, daily rotation is prepared, including when there is no activity, keeping the current file and up to 29 previous files: approximately 30 days while the task runs daily. These logs are excluded from website backups. The mechanism must be verified when the service is deployed.
Operational logs for the shared proxy are replaced when the storage limit is reached: up to three files of 10 MB. This rotation limits volume but does not set a maximum period in days.
The operating system also retains operational and security logs. Some rotate weekly and keep four previous files; the system journal limits storage space without a configured age limit. These rules do not guarantee a uniform maximum retention period.
In Gmail, messages remain in Trash for up to 30 days. Workspace allows administrative recovery for a further 25 days after permanent deletion. Purging the provider’s systems is governed by the applicable data processing terms.
Providers, recipients and transfers
Hosting: Hetzner Online GmbH, contracted directly by the owner. The server intended for this website is in Helsinki, Finland, within the European Union. The owner confirms having a data processing agreement with Hetzner. The provider uses the subprocessors listed in its contractual documentation; it identifies Hetzner Finland Oy for its Finland location.
Email: Google Workspace, provided by Google Cloud EMEA Limited, at 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. The account terms incorporate the Cloud Data Processing Addendum (CDPA), which describes Google as a processor for the customer data covered by that agreement.
Email may involve processing outside the European Economic Area. Transfers and subprocessors are described in the Workspace terms. No claim is made that all email remains within the European Union.
Opening App Store or Google Play takes you to external services with their own policies. Their trackers are not embedded in this website.
Your rights and how to exercise them
You can request access, rectification, erasure, objection, restriction and, where applicable, portability. If processing is based on consent, you can withdraw it without affecting the lawfulness of earlier processing.
Write to the contact email above, explain your request and provide a way to reply. Additional information to identify you will only be requested where there are reasonable doubts, and proportionately. The usual response period is one month; it may be extended by up to two further months due to complexity or the number of requests, with notice within the first month.
You can also complain to the Spanish Data Protection Agency or the competent supervisory authority.
Voluntary data and automated decisions
Making contact is voluntary. Without a reply address or sufficient information about your enquiry, it may not be possible to answer it. You do not need to provide data unrelated to the request.
The current website does not profile visitors or make automated decisions with legal or similarly significant effects. Artificial intelligence demonstrations show previously recorded material; they do not analyse visitors.
Cookies and external services
The current code does not set cookies or use local storage for tracking. It does not integrate analytics, advertising or external video players. Opening store links takes you to services with their own policies.
If forms, analytics or other tools are introduced, the information must be reviewed and, where applicable, consent obtained before activating processing that requires it.
Policy changes
This policy will be reviewed when services, providers or data processing change. The published version must reflect the email channel and hosting configuration actually in use.