Privacy Policy

Last updated: 6 September 2026

1. Data controller

Roberto María Pinto Pastorini, tax ID 55846964C, Calle de Perdiguera 1, 28108 Alcobendas (Madrid), Spain. For any question about your data, write to roberto@rpintomarketing.com. Given the size and nature of the activity there is no obligation to appoint a data protection officer, and none has been appointed.

2. What data is processed and where it comes from

• Contact form: name, email address, company and job title; on some pages, also a message. Along with the submission, the date, the page it was sent from, the browser and the IP address are stored as a technical record of the submission. The form is protected by Google reCAPTCHA, which analyses the submission to tell people apart from bots.
• Email, telephone, WhatsApp and LinkedIn: the data you include when you write through those channels.
• Client area: the contact details of the people at the client company and the project information (documents, materials, comments) shared during the work.
• Browsing: the technical data collected by the cookies described in the cookie policy, only if you accept them.

All data is provided by you or by the company you represent. No data is obtained from other sources and no profiles are built with it.

3. Purposes and legal basis

• To answer your enquiry and, where appropriate, prepare a proposal. Basis: pre-contractual steps taken at your request (Article 6.1.b GDPR). When you write on behalf of a company, also the legitimate interest in maintaining professional contact (Article 6.1.f GDPR and Article 19 of Spanish Organic Law 3/2018).
• To deliver the contracted service and run the client area. Basis: performance of the contract (Article 6.1.b).
• To invoice and meet tax and accounting obligations. Basis: legal obligation (Article 6.1.c).
• To measure use of the site and recognise people who have already been in touch (Google Analytics and HubSpot). Basis: your consent given through the cookie banner (Article 6.1.a GDPR and Article 22.2 of Spanish Law 34/2002).
• To protect the site against automated submissions and unauthorised access. Basis: legitimate interest in the security of the service (Article 6.1.f).

4. How long data is kept

• Enquiries that do not lead to a project: twelve months from the last communication. They are then deleted from the mailbox and from the site database.
• Client data: for the duration of the relationship and afterwards for as long as tax and commercial rules require, as a general rule six years from the last accounting entry (Article 30 of the Spanish Commercial Code).
• Cookie consent: six months, as detailed in the cookie policy.
• Data needed to handle claims: for the applicable statutory limitation periods.

5. Who has access to the data

Data is neither sold nor disclosed to third parties. Providers do process data on the owner’s behalf under a data processing agreement in accordance with Article 28 GDPR:

• Hostinger International Ltd.: hosting of the site and of the owner’s email. Form submissions and the client area are stored there.
• Google Ireland Ltd.: the owner’s email is also received in a Gmail account. Google reCAPTCHA protects the contact form against automated submissions and receives technical data for that purpose (IP address, browser and interaction with the page). Google Analytics measures use of the site only if you accept it. Google Maps shows a map on the About Roberto page and, when it loads, Google receives technical data about the visit.
• HubSpot Ireland Ltd.: contact management and, only if you accept marketing cookies, recognition of your visits.

Data may also be disclosed to the tax authorities and other public authorities where the law requires it.

6. Transfers outside the European Economic Area

Google and HubSpot may process data in the United States. Both companies are certified under the EU-US Data Privacy Framework and also apply standard contractual clauses approved by the European Commission. You may request a copy of these safeguards at the address in section 1. If you reject statistics and marketing cookies, the site sends no browsing data to those providers.

7. Your rights

You may request access to your data, have it corrected or deleted, object to or restrict its processing, obtain it in a portable format, and withdraw any consent without affecting what was done before. Simply write to roberto@rpintomarketing.com with the subject line «Data protection». You will receive a reply within one month at most. If there is any doubt about your identity, you will be asked to prove it.

If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), www.aepd.es, calle Jorge Juan 6, 28001 Madrid, Spain.

8. Minors

The site is aimed at professionals and companies. Data of children under fourteen is not knowingly processed. If a minor has submitted data, write to the address in section 1 and it will be deleted.

9. Security

The site runs over an encrypted connection, administrative access requires a second authentication factor, regular backups are made and components are kept up to date. Should a security breach occur that puts your rights at risk, the Spanish Data Protection Agency and, where appropriate, you will be notified within the periods set by the GDPR.

10. Automated decisions

No automated decisions are made and no profiling with legal effects on you is carried out.

11. Changes

This policy may be updated when the site, its providers or the law change. The version in force is the one published here, with its date. If a change affects processing based on your consent, you will be asked again.