Privacy policy
What we do with your details, why, for how long, and what you can ask us for.
What we do with your details, why, for how long, and what you can ask us for.
Last updated: 21 August 2026
No Data Protection Officer has been appointed: one is not required for the kind and the volume of processing this company carries out. Privacy questions are handled at the e-mail address above.
We only hold what you give us and what your browser sends by the fact of visiting. We buy no lists and obtain nothing about you from third parties.
We do not process special categories of data (health, beliefs, origin and the like), and we ask you not to put any in free-text fields.
| Purpose | Legal basis (GDPR) |
|---|---|
Answering you and telling you about our services when you leave your details | Article 6(1)(b) — steps taken at your request before a contract |
Checking whether your address is in coverage and telling you when it is | Article 6(1)(b) — steps taken at your request before a contract |
Handling your job application and, where applicable, your account | Article 6(1)(b), and Article 6(1)(a) if we keep it for longer |
Knowing which campaign brought you, so we never ask you and can measure our own advertising | Article 6(1)(f) — legitimate interest, using data that does not identify you |
Website analytics with Google Analytics 4 | Article 6(1)(a) — your consent, which you may withdraw at any time |
Handling your rights and meeting our legal obligations | Article 6(1)(c) — legal obligation |
We take no automated decisions with legal effects on you, and we build no profiles for that purpose.
Technical server and security logs are kept for at most twelve months.
The contact details you leave us are kept for as long as we have a relationship with you and afterwards for the limitation periods of the legal obligations that apply to us; once those periods have passed they are deleted.
Job applications are kept for as long as the selection process lasts and, if you agree to it, for future openings; you can ask us to delete them at any time.
Analytics data is kept in line with the consent you gave, and stops being collected the moment you withdraw it. Your cookie choice itself is kept for as long as the version of this policy you answered remains current.
We do not sell your details and we do not pass them to anyone for their own marketing. We do use suppliers who process them on our behalf, under a data processing agreement:
We will also disclose your details to public authorities and courts where a law requires it.
This website is hosted in Germany, inside the European Union, so the infrastructure that serves it involves no international transfer.
Other suppliers are European subsidiaries of United States groups and may process data outside the EEA. Where that happens, the transfer relies on the European Commission’s Standard Contractual Clauses or, where the supplier is certified, on the EU–US Data Privacy Framework: Cloudflare, Inc. is certified under that Framework.
Write to hola@donrayo.es if you would like to know which safeguard covers a particular supplier.
You can ask us for access to your data, for it to be corrected or erased, for processing to be restricted or objected to, and for portability. Write to hola@donrayo.es or to the postal address above, saying which right you are exercising. We will answer within one month.
Where we rely on your consent you can withdraw it at any time, without affecting the lawfulness of what came before. For analytics, the "Preferences" button in the footer is enough.
If you think we have handled it badly you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es). We would be grateful if you told us first, so we can try to put it right.
Under article 7 of Spanish Organic Law 3/2018 (LOPDGDD), anyone aged fourteen or over may give their own consent. Below that age, consent must come from a parent or guardian.
Signing up for a telecommunications service requires legal capacity to contract in any case, which means being of full age.
The site is always served over HTTPS. Form submissions travel over an internal channel and are not stored on the web server. Passwords, where they exist, are stored encrypted and never in the clear.
If we change something that matters we will publish the new version here with its date, and where it affects what you consented to, we will ask you again.