Privacy Policy
Last updated: 26 September 2026
1. Data controller
- Juan Morante Cruz (Rotulito), Tax ID (NIF) 77123920K
- Carrer de Tetuán, 92, Sabadell (Barcelona), Spain
- hola@rotulito.com
2. What data we process and where it comes from
The data you give us through the contact form (business name, sector, your town, your name, phone and email, and anything else you want to tell us), what you send us by email or WhatsApp, and what's needed to provide the service and invoice you if you hire us (identification, contact and billing data). If you accept analytics cookies, also browsing data (pages viewed, device, where the visit came from) in pseudonymised form.
3. What we use it for and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Handling your request for information or a proposal | Pre-contractual measures you requested (GDPR art. 6.1.b) | Until we reply and, at most, 1 year if no contract follows |
| Providing the contracted service, managing the domain and hosting, and invoicing | Performance of the contract (art. 6.1.b) and legal tax obligations (art. 6.1.c) | For the duration of the relationship and the legal periods (invoices: 4 tax years, 6 commercial years) |
| Measuring website usage | Consent given through the cookie banner | As set out in the cookie policy |
4. Who processes the data
Juan Morante Cruz handles enquiries under the Rotulito brand. We do not sell your data or share it for other companies' advertising. Dinahosting provides domain registration and the contact email; Google Apps Script and Sheets are used to manage requests and send email notifications; GitHub hosts the website. Google Analytics is only activated if you accept analytics. Google Ads and the Meta pixel are not active.
Providers and international transfers
We use GitHub to host the website; Google Apps Script and Sheets to receive and organise enquiries, and email services to reply to them. If you leave a phone number, we may reply on WhatsApp (a WhatsApp/Meta service) or by phone call. These services may process technical and contact data outside the European Economic Area. We do not send the content of your forms to Google Analytics.
Google describes its use of the EU-U.S. Data Privacy Framework for covered entities and processing, and of standard contractual clauses, in its information on transfers. GitHub explains its safeguards and how it handles visitor data in its privacy statement. You can ask the data controller for information and a copy of the safeguards that apply to your data.
5. Your rights
You can access, rectify or erase your data, object to or restrict its processing, request portability and withdraw your consent at any time by writing to hola@rotulito.com; we will only ask for extra identification information if there is reasonable doubt about your identity. If you believe we have not honoured your rights, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security and minors
We apply reasonable technical and organisational measures to protect your data (encrypted HTTPS connection, restricted access to mailboxes, providers with adequate guarantees). Our services are aimed at businesses and professionals; we do not knowingly process data belonging to minors under 14.
7. Changes
This policy may be updated to reflect legal or service changes. The version in force is always the one published on this page, together with its update date.