Privacy policy

Last updated: 8 October 2026.

This is an English translation provided for convenience. If there is any discrepancy, the Spanish version prevails.

1. Data controller

Controller: Ricardo García Llanos (animaticss)
Tax ID (NIF): 53318269Z
Address: Arenys de Mar (Barcelona), Spain
Email: [email protected]

This policy applies in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. What data I process, why and on what legal basis

This website has no forms and no user registration. I only process data in these cases:

If you email me: your name, your email address and whatever you tell me in the message, in order to reply and, if you ask for it, to prepare a quote. Legal basis: taking steps prior to a contract at your request (Art. 6.1.b GDPR) and legitimate interest in answering enquiries (Art. 6.1.f).
If you are a client: your contact and billing details, in order to provide the service and issue invoices. Legal basis: performance of the contract (Art. 6.1.b) and compliance with legal, tax and accounting obligations (Art. 6.1.c).
Visit statistics: only if you accept statistics cookies, Google Analytics collects browsing data (pages viewed, device, approximate location, cookie identifiers). Legal basis: your consent (Art. 6.1.a), which you can withdraw at any time from the cookie policy.
Server logs: as on any website, the server records the IP address, the date and the page requested, in order to keep the site secure and diagnose faults. Legal basis: legitimate interest (Art. 6.1.f).

I do not build profiles or make automated decisions, and I do not send commercial communications.

3. How long I keep the data

Email enquiries: for as long as the conversation lasts and, if no professional relationship follows, for one year at most.
Clients: for as long as the relationship lasts and, afterwards, for the periods required by tax and commercial law (up to six years).
Statistics: analytics cookies expire after two years at most, or when you withdraw your consent.
Server logs: for the limited time the hosting provider keeps them.

4. Who receives the data

I do not sell or share your data with third parties, unless the law requires it. The providers needed for the website and email to work access it as data processors:

Webempresa Europa, S.L.: website hosting.
Google Ireland Limited: email (Google Workspace) and, if you consent, Google Analytics and Google Tag Manager.

Google may process data outside the European Economic Area, in particular in the United States. Those transfers are covered by the adequacy decision for the EU-US Data Privacy Framework and, where applicable, by standard contractual clauses approved by the European Commission.

5. Your rights

You can exercise these rights by writing to [email protected] and saying which one you want to exercise:

Access to your data.
Rectification of inaccurate data.
Erasure of your data.
Objection to the processing.
Restriction of the processing.
Portability of your data.
Withdrawal of any consent you have given, without affecting the processing carried out until then.

I will reply within one month at most. If you feel I have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.

6. Security

I apply reasonable technical and organisational measures to protect the data: encrypted connection (HTTPS), restricted access and providers with sufficient guarantees.

7. Changes to this policy

If the way I process data changes, I will update this page and the date shown at the top.