Legal notice and privacy
What data this site handles, why, and what you can do about it.
Who runs this site
This site is my professional portfolio. The data controller is me, Javier González Estarriol, based in Astorga (León), Spain. You can email me at jgestarriol@gmail.com.
Cookies
This site doesn't use cookies or store anything in your browser, not even for visitor statistics. It has no ads and nothing that follows you from site to site, so you won't see a cookie banner.
Hosting
The site is hosted by Cloudflare Inc. (United States). Like any web server, it logs technical data about each visit, such as your IP address, browser, the page requested and the time, to serve the site and protect it from attacks. I have no access to those logs and don't use them to identify you.
The legal basis is the legitimate interest in keeping the site running and secure (Article 6(1)(f) GDPR).
Visitor statistics
To see how many people visit the site and what they read most, I use Cloudflare Web Analytics. A small script sends Cloudflare the page viewed, the site you came from, your browser, operating system, device type, country and the page load time. It uses no cookies, doesn't identify you or follow you across sites, Cloudflare doesn't store your IP address, and I only see aggregate figures.
If your browser sends the Global Privacy Control or Do Not Track signal, the site doesn't load that script. You can also object by emailing me.
The legal basis is my legitimate interest in understanding how the site is used (Article 6(1)(f) GDPR).
CV downloads
I count how many times each CV is downloaded per month. Only the file name, the month and the total are stored; nothing about who downloads it.
Lab
The lab demos run entirely in your browser. If you drop a file into the invoice auditor or edit a demo's data, it is processed right there: it is never sent to a server or stored.
Who else processes the data
Cloudflare processes the hosting and statistics data on my behalf under a data processing agreement that includes the European Commission's standard contractual clauses, and it is certified under the EU-U.S. Data Privacy Framework. Its privacy policy has more detail. I don't share data with anyone else.
If you email or call me
I'll use your details only to reply and, if we discuss a role or a project, for that process. I keep them while the conversation or process lasts and for at most one year after our last contact; then I delete them.
The legal basis is your consent when you contact me and, where relevant, steps taken before entering into a contract (Article 6(1)(a) and (b) GDPR). You can withdraw your consent at any time, without affecting anything processed before.
Your rights
You can ask me for access to your data, to correct or delete it, to restrict or object to its use, or to receive it in a portable format, by emailing jgestarriol@gmail.com. I don't make automated decisions or build profiles with your data. If you think I haven't handled it properly, you can complain to the Spanish Data Protection Agency or to the authority where you live.
Links to other sites
Links to LinkedIn and GitHub take you to services with their own privacy policies.
Content
The text, design and code of this site are mine. The lab demos are written from scratch and use invented data. Product and technology names belong to their owners.
Last updated: 22 October 2026.