Privacy Policy
1. Who is responsible for your data?
Ricardo Moratilla Martínez is the controller of personal data processed through this portfolio and its contact email. For privacy enquiries or to exercise your rights, write to studio@ricardomoratilla.com.
2. What information is processed?
If you send an email, your email address, name (if provided), message, attachments and related correspondence are processed to handle your enquiry. Please provide only information relevant to your request and avoid sending unnecessary sensitive information. Providing these details is voluntary, but without sufficient contact information it may not be possible to respond.
When you browse the site, Squarespace, the hosting provider, processes technical information needed to deliver and secure the website, such as IP address, browser and device information, requested pages and access times. Non-essential cookies are restricted and the individual visitor activity log is disabled. See the Cookie Policy for more information.
3. Purposes and legal bases
General enquiries are handled on the basis of the legitimate interest in responding to messages addressed to the website owner (Article 6(1)(f) GDPR). Where an enquiry requests steps before entering into a contract, processing is based on that request (Article 6(1)(b)). Technical processing needed to operate and protect the site is based on the legitimate interest in maintaining a secure, functioning portfolio.
The website has no online shop, payment or booking facility and no newsletter subscription. Contact details are not added to marketing lists. No automated decisions producing legal or similarly significant effects are made about visitors.
4. How long is information kept?
Enquiry correspondence is kept for as long as needed to deal with the request and follow-up, normally no longer than 12 months after the last communication. Relevant records may be retained, with access limited, where necessary to meet a legal obligation or establish, exercise or defend legal claims, until the applicable retention or limitation period ends. Technical records are retained by the hosting provider for the periods necessary to operate and secure its service.
5. Providers and international transfers
Squarespace provides website hosting and delivery. Google provides the email service used to receive and answer enquiries. These providers and their authorised service providers may process data where necessary to deliver their services. Data may also be disclosed where legally required. Personal data is not sold.
These services can involve processing outside the European Economic Area, including in the United States. The providers describe safeguards including applicable adequacy decisions and, where required, European Commission standard contractual clauses. Details are available in Squarespace’s Data Processing Addendum and Google’s data transfer information. You can contact the controller for further information about the safeguards relevant to your data.
6. Your rights
Subject to the conditions in data protection law, you may request access, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interests. If processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
Send your request to studio@ricardomoratilla.com, explaining the right you wish to exercise. Additional information will be requested only if reasonably needed to verify your identity. You may also lodge a complaint with the Spanish Data Protection Agency at aepd.es, or with another competent supervisory authority.
7. External links and updates
Social media links open third-party services with their own privacy policies. This policy will be reviewed when the website’s functions or data processing change.
Last updated: 2 November 2026.
