Privacy policy

The data controller is Emilio Barradas, a private individual resident in Mexico. For anything to do with your data you can write to [email protected].

Contact form. I collect your name, your email address, the subject, the type of enquiry and whatever message you write. The only purpose is to reply to you. The legal basis is your own consent, which you give by submitting the form.

CV access. If I shared an access code with you, the system stores the code, a label I write myself to remember who I gave it to (something like Cognizant recruiter), the date it expires, how many times it has been used and the language the CV should be shown in. Every time the CV is opened or downloaded, that is noted down with the date, the browser and the country. Your email address isn't stored, nor is your IP address, nor anything you had to type.

Server logs. The hosting provider keeps the usual technical logs, such as the IP address and the browser type, in order to run the site and detect abuse. That is the legitimate interest of keeping the service standing.

Rate limiting. So that nobody can flood the form or brute-force CV codes, a counter tied to a hash of your IP address is stored. The IP address itself is never kept in the clear, the counter expires by itself after a few minutes, and it isn't used to identify you or for anything else.

Messages from the form are delivered by Resend, which acts as the processor for the sending, and end up in my inbox. The content of the message is not written to any database on this site.

The CV access codes and the rate-limiting counters are stored in Upstash, a key-value store. The site is hosted on Vercel infrastructure.

I don't sell data, I don't pass it on for commercial purposes and I don't use it for advertising. It only leaves here for the providers I have just named, and only to make the thing you are using work.

This site uses no advertising or tracking cookies, and it doesn't profile you across sites.

There are only two, and both are strictly necessary. NEXT_LOCALE remembers the language you pick in the switcher, so you aren't asked again. The CV session cookie is created only when you enter a valid code; it is signed, it expires by itself, and it exists so you aren't asked for the code on every reload.

Neither of them requires prior consent, because without them the feature you asked for cannot be provided. That is why you won't see a cookie banner.

If analytics is ever switched on, it will be a cookie-free solution that counts visits in aggregate and neither identifies anyone nor follows visitors beyond this domain. Were that to change to a tool that does require consent, this page would be updated and the corresponding notice would appear before it loaded.

Emails from the form stay in my inbox for as long as the conversation still makes sense, and at most twenty-four months from the last message.

CV access codes are deleted when they expire or when I revoke them, whichever comes first.

Server logs are kept by the hosting provider according to their own retention periods, which run to a matter of weeks.

You can ask me for access to your data, to correct it and to delete it, and you can object to my processing it. If you live in Mexico, those are the ARCO rights under the LFPDPPP. If you live in the European Union or the United Kingdom, the UK GDPR and EU GDPR also give you the right to restrict the processing and to have your data handed to you in a portable format, under Articles 15 to 22.

Write to [email protected] and I'll reply as soon as I can, within twenty working days at the latest. You don't need to justify the request. You can also withdraw your consent whenever you like, without that affecting anything done up to that point.

If you think I have handled it badly, you have the right to complain to the supervisory authority that covers you.

If this policy changes, the date in the header is updated, so it is worth a look now and then. If a change materially affects how I handle data you have already given me, I'll tell you by email before it takes effect.