Privacy policy

1. Controller and scope

The controller is MAGNANIMITAS, S.L., Spanish tax ID B88815683, registered office at Calle Doctor Fleming, 44, 28036 Madrid, Spain. Data protection enquiries and rights requests may be addressed to legal@orvyon.io or the registered office.

This policy covers browsing jesusbabiosilva.com and communications received through its published contact channels. Professional engagements or additional processing will be separately documented and, where appropriate, specifically disclosed.

2. Applicable law and principles

Processing is subject to Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and other applicable provisions.

Article 5 GDPR principles apply: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability. Publication of this policy does not, in itself, request or obtain consent.

3. Categories and sources of personal data

Identification and contact data include names, email addresses and information voluntarily supplied in a communication. Professional information may include an organisation, role and the content of an enquiry or proposal.

Technical information may include IP addresses, request timestamps, requested resources, browser information and response codes in infrastructure and security logs.

Enquiry information comes from the data subject or their representative. Technical data arise when resources are requested. No special category data are collected through forms and no sensitive information is required to browse the Website.

4. Purposes and legal bases

Enquiries concerning a potential engagement: steps taken at the data subject’s request prior to entering into a contract, Article 6(1)(b) GDPR.

Other professional, business or collaboration communications: legitimate interests in handling and maintaining those relationships, Article 6(1)(f) GDPR. Article 19 LOPDGDD may apply to professional contact details and roles, within its conditions and limits, for maintaining relationships with the relevant legal entity.

Website security, availability and integrity: legitimate interests in preventing unauthorised access, abuse and incidents and protecting infrastructure, Article 6(1)(f) GDPR.

Compliance with applicable legal duties: Article 6(1)(c) GDPR where a legal obligation requires processing or disclosure.

Establishment, exercise or defence of legal claims: legitimate interests in protecting rights and addressing liabilities, Article 6(1)(f) GDPR, without prejudice to other applicable legal bases.

5. Legitimate interests

Reliance on legitimate interests requires a specific lawful interest, necessity and a balancing of the data subject’s interests, rights and freedoms, taking account of reasonable expectations and the circumstances of collection.

Data subjects may request information about the relevant balancing and object on grounds relating to their particular situation under Article 21 GDPR.

6. Necessary information and accuracy

No identification is needed to read the profile. The Website has no registration, contracting or subscription forms. Email correspondents should provide only what is needed to understand and handle the enquiry; a reply may be impossible without contact information.

Information supplied should be accurate and up to date. Disclosure of third-party data requires a sufficient legal basis and compliance with any applicable information duties.

7. Retention and statutory blocking

Enquiries are retained for their handling and follow-up. If a professional or contractual relationship is established, relevant information is retained for its duration and subsequently for the statutory periods applicable to resulting obligations and liabilities.

Technical logs are retained for the period necessary for security, incident diagnosis and related liabilities, limited to the purpose and circumstances justifying retention.

Where rectification or erasure applies but liabilities remain, statutory blocking under Article 32 LOPDGDD will restrict ordinary processing, including viewing, except disclosure to legally competent authorities. After the applicable limitation periods expire, the data will be destroyed or, where appropriate, irreversibly anonymised.

8. Processors and recipients

Hostinger supplies hosting and infrastructure. Hosting, email, support or security providers processing data on the controller’s behalf must act under Article 28 GDPR, the relevant documented instructions and access limited to the service requirements.

Data may be disclosed to courts, public bodies and competent authorities where required by law, a valid request or the establishment, exercise or defence of claims. Visitor data are not sold.

9. International transfers

Technology providers may involve processing outside the European Economic Area. Any transfer must comply with Chapter V GDPR and the relevant mechanism, such as an adequacy decision or European Commission Standard Contractual Clauses, together with any required supplementary safeguards.

Information about recipients, destination countries and safeguards for a particular processing activity may be requested at legal@orvyon.io. An external hyperlink does not, by itself, embed the linked service in the Website.

10. Data subject rights

Subject to the conditions and limits in Articles 15–22 GDPR, data subjects may exercise access, rectification, erasure, restriction, portability and objection rights. Consent, where relied on, may be withdrawn without affecting the lawfulness of earlier processing.

Requirements, request channels and response periods are detailed on the Data protection page in the legal navigation.

11. Requests and supervisory authority

Requests should be sent to legal@orvyon.io or the controller’s postal address, identifying the requester and the right concerned. Additional identity information will be requested only where reasonable doubts arise and the measure is necessary and proportionate under Article 12(6) GDPR.

A response will be provided without undue delay and within one month of receipt. An extension of up to two further months may apply because of complexity or the number of requests; the requester will be informed of the extension and its reasons within the first month.

A complaint may be lodged with the Spanish Data Protection Agency (AEPD), www.aepd.es, without first having to complain to MAGNANIMITAS, S.L.

12. Security and confidentiality

Appropriate technical and organisational measures must reflect risk, the state of the art, implementation costs and the nature, scope, context and purposes of processing under Article 32 GDPR. Access is restricted to persons needing it for their functions and subject to confidentiality duties.

The Website uses HTTPS. This does not guarantee absolute security. Personal data breaches will be addressed under Articles 33 and 34 GDPR where their conditions apply.

13. Avatar, cookies and external services

The avatar is prerecorded AI-generated video hosted on this domain. It does not receive enquiries, activate visitors’ microphones or cameras, or analyse their characteristics or behaviour. It is not used to identify visitors or process their biometric data.

The current version has no visitor analytics, behavioural advertising, tracking pixels, forms or profiling tools. Fonts, images and video are served from this domain. ES/EN selection uses links and does not store a language preference in cookies or local storage.

LinkedIn and email links lead to external services at the user’s choice and are subject to their own policies. No solely automated decisions producing legal or similarly significant effects on visitors are made.

14. Children and amendments

The professional and informational Website is not specifically directed at children. Information received about a child without a sufficient legal basis will be addressed through appropriate erasure or regularisation measures.

This policy may be updated for legal or operational changes and states its revision date. Any incompatible new purpose or processing subject to further requirements must be disclosed and lawfully supported before implementation.