Skip to content

Legal

Privacy & cookies

This is my personal portfolio. This notice explains what personal data the site handles, why, and the choices you have. In short: nothing tracks you unless you accept analytics cookies, and if you email me, your message is only used to reply to you.

Who is responsible

Manuel Bolaños, an individual based in Spain, is responsible for this site and for the personal data described here. You can reach me at manuelb.diseno@gmail.com.

What I collect and why

Analytics (only if you accept). Google Analytics 4, loaded through Google Tag Manager, measures the pages you visit, your approximate location (city level), your device and browser, and how you reached the site. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22.2 of the Spanish LSSI). Without your consent, neither Google Tag Manager nor Google Analytics is loaded.

Emails you send me. If you write to me, I use your email address and your message only to reply and to follow up on any opportunity it starts. Legal basis: my legitimate interest in answering you (Art. 6(1)(f) GDPR) and steps you ask me to take before a possible agreement (Art. 6(1)(b) GDPR).

Hosting. Vercel, the hosting provider, processes technical request data such as your IP address and browser to deliver the pages and keep the service secure. Legal basis: legitimate interest.

Cookies and local storage

Cookies and local storage used by this site
NamePurposeDurationWhen
_ga, _ga_*Google Analytics: tells visits and sessions apartUp to 2 yearsOnly after you accept
mb-analytics-consent (local storage)Remembers your cookie choice12 monthsWhen you choose
mb-animations-paused (local storage)Remembers whether you paused the animationsUntil you clear itOnly if you use the animation toggle

You can change or withdraw your choice at any time with (also at the bottom of every page). Withdrawing consent deletes the Google Analytics cookies.

Who receives the data

These providers process data on my behalf:

  • Vercel Inc. — hosting and delivery of the site (USA)
  • Google Ireland Ltd. / Google LLC — analytics, only with your consent

Transfers to the United States rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. I don't sell your data or use it for advertising.

How long I keep it

  • Emails: while I handle your request, and at most two years after our last exchange unless we start working together.
  • Analytics data: up to 14 months, per the Google Analytics retention setting.

Your rights

You can ask me for access to your data, and to rectify, erase, restrict or port it, or object to its processing, by writing to manuelb.diseno@gmail.com. You can withdraw your consent at any time without affecting earlier processing. If you believe your data has been mishandled, you can file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

Changes to this notice

I update this notice whenever the site changes how it handles personal data. Version 2026-10-01, last updated 1 October 2026.