Privacy and cookies
1. Data controller
Santiago Ricci Tobón. Email address: hola@santiagoricci.com. The full identifying details are provided at the request of the data subject.
2. What data is processed and for what purpose
Contact form. Name, email address, organisation, subject and the content of the message. Purpose: to handle and answer the request. Legal basis: the consent of the data subject and the taking of steps at the request of the data subject prior to entering into a contract (art. 6.1.a and 6.1.b GDPR).
Subscription to The Letter. Name, email address and, optionally, organisation. Purpose: sending the controller's own commercial correspondence. Legal basis: consent (art. 6.1.a GDPR), which may be withdrawn at any time through the unsubscribe link included in every message or by writing to the address indicated.
Audience analytics. Aggregated browsing data without personal identification. Legal basis: the controller's legitimate interest in knowing how the site is used (art. 6.1.f GDPR), in its cookieless form; and consent, in the case of the advanced analytics described in section 6.
3. Retention period
Contact data is kept for as long as necessary to handle the request and, thereafter, for the applicable statutory limitation periods. Subscription data is kept until the data subject withdraws consent.
4. Recipients
No data is disclosed to third parties and no international transfers are carried out, save where legally required. The data collected through the forms is stored on the controller's own server contracted from Hetzner Online GmbH, located in Germany (European Union), which acts as a data processor.
5. Rights of the data subject
You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hola@santiagoricci.com, providing proof of identity. You may also lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) (www.aepd.es) if you consider that the processing does not comply with the applicable rules.
6. Cookies
This site does not use first-party tracking or advertising cookies. Audience analytics is carried out by means of a system self-hosted on the controller's server that installs no cookies, generates no persistent identifiers and does not allow individuals to be identified.
In addition, and only if the user expressly authorises it through the corresponding notice, Google Analytics 4 is loaded, a service of Google Ireland Limited, which does install measurement cookies for the purpose of analysing the performance of acquisition campaigns. If the user does not consent, that service is never loaded: no Google resource is downloaded and no cookie is installed.
The user's preference is saved in the local storage of their browser and may be changed at any time by clearing the site data from the browser settings.
7. Security
The site is served entirely encrypted by means of TLS. Strict security headers are applied and no third-party resources are loaded passively: fonts, style sheets, images and scripts are served from the domain itself.
Last updated: 20 August 2026.