Legal information

Legal notice
and privacy

Last updated: 15 September 2026

Legal notice

In compliance with Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), please note that this website is owned by:

Owner: Eneko Navarrete, web developer (self-employed)
NIF: 21070075M
Address: Castellar del Riu (Berguedà)
Contact email: hola@eneko-devs.com
Activity: design and development of websites and digital tools

Commercial communications

The prospecting emails we send are identified as commercial communications and always include a free and immediate way to opt out: just reply ‘no’ (or ‘unsubscribe’) and you will not receive any more messages. Opt-outs are recorded and respected permanently.

Privacy (summary)

What data we process: the name of the business, the email address published by the business itself on its website, and technical observations about its public site. No sensitive data is processed and no profiling is carried out.

Legal basis: legitimate interest in commercial prospecting between professionals (Article 6(1)(f) GDPR and Recital 47).

Cookie-free measurement: daily totals of arrivals through our links and of contact clicks, without identifiers, on the basis of a legitimate interest in knowing whether our prospecting works (Article 6(1)(f)); totals older than 90 days are deleted with the next arrival or click that is counted. Details under ‘Cookies and analytics’.

How long it is kept: prospecting data, for as long as the commercial interest lasts and at most one year from the last contact. The data of anyone who opts out stays only on the suppression list, and there indefinitely, because that is what guarantees we never write to them again.

Who it is shared with: we do not sell or disclose data to anyone. There are, however, providers that process it on our behalf and following our instructions: Cloudflare (hosting of this website and cookie-free visit measurement), Google Workspace (email), Stripe (payments) and, only if you accept the analytics notice, Microsoft Clarity. Some are US companies, and the transfer is covered by the European Commission's standard contractual clauses or by the EU-US adequacy framework.

Rights: access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent where you have given it (withdrawing it does not affect what was done before), by writing to hola@eneko-devs.com. A complaint can also be lodged with the Spanish Data Protection Agency (AEPD).

If you are a client

The above is about prospecting. If you hire us for something, we also process what is needed to do the work and to invoice: your name or your business's name, NIF, address, phone number, email address and the details of each invoice.

What for and on what basis: to perform the contract (Article 6(1)(b) GDPR) and to meet our tax and accounting obligations (Article 6(1)(c)). Your consent is not needed for this, and nor can we stop doing it while you are a client.

How long it is kept: for as long as the relationship lasts and then for the time required by tax and commercial law — four years for tax matters and six for the accounting books. Once that time has passed, it is deleted.

YOUR clients' data is a different matter. When you use the booking module, you are the one who decides about that data and we only process it on your behalf. This is explained in section 12 of the terms of service (in Spanish), and if you need the data processing agreement signed separately, just ask for it and we will send it to you.

Cookies and analytics

This site does not set any tracking cookies without your permission. What it does always load, from the very first moment, is the chat assistant you see at the bottom right: it is an automated program, not a person, it answers using artificial intelligence and it can make mistakes. What you write to it is processed in order to answer you; do not use it to send us sensitive information. In your browser, localStorage is used to store your theme (light/dark) and language preferences, so that you do not have to choose them again on every visit, and your answer to the analytics notice (eneko.consent, see below). Only on the devices of the person responsible for the website is a marker (eneko.yo) also stored, so that their own visits are not measured. That data does not leave your device and is not sent to any server.

Cookie-free measurement. To find out whether the links we put in our emails and on profiles such as Malt or LinkedIn bring in visits, we count two things: arrivals through one of those links, and clicks on the contact buttons and links (email, phone, WhatsApp and calendar). An arrival is counted once per page load, when you interact with the page or keep it in view for a few seconds. Each arrival or click adds one to a daily total, broken down by page, by type of link (an email, Malt, LinkedIn or other) and, for clicks, by contact method. The counter does not store the time, your IP address, your browser details or any identifier, and nothing is stored on your device in order to count. Cloudflare, which hosts the website, receives your IP address and browser details in order to serve you the pages, but the counter does not store them. We compare those totals with how many emails containing a link we send each day. Because we send few, a small total could correspond to a business we have written to: that is why we process it on the basis of our legitimate interest in knowing whether our prospecting works (Article 6(1)(f) GDPR), we do not use it to write to you again or for anything else, and you can object by writing to us at hola@eneko-devs.com: we will not send you any more emails. If you would rather your arrival was not counted, reach the site by typing enekodevs.com instead of using the link; contact clicks are counted all the same, without knowing who makes them. The totals are stored by Cloudflare on our behalf, in the Lasaifusta account. Totals older than 90 days are deleted each time an arrival or a click is counted, so if days go by without any, they wait until the next one. Cloudflare also keeps, for a maximum of 30 days, the change history of the database so that it can be restored, and with it, it would be possible to see the minute at which each total changed. Separately, Cloudflare Web Analytics counts visits to the whole website in aggregate form, also without cookies.

If you accept the analytics notice that appears the first time you visit the website, we turn on Microsoft Clarity, a free tool that generates heatmaps and anonymous session recordings to understand how the site is used and improve it. Only in that case do we also tell Clarity what type of link you arrived through (for example, an email) and whether you pressed a contact button. Clarity does not identify people by name and is not cross-referenced with other databases. You can read Microsoft's privacy policy for more details.