Privacy policy

1. Data controller

Andoni Vianez Ulloa · Tax ID 72523047K · Plaza Kontxa Etxeberria 11, 2C, 20115 Astigarraga, Gipuzkoa, España · [email protected]

2. Data processed

AI chat: Questions are processed exclusively in the visitor's browser. They are not sent to the owner's servers or external AI providers. Question text is not stored on any server.

Anonymous aggregated analytics: If the visitor accepts analytics, aggregated events are recorded without literal text: detected topic from controlled portfolio vocabulary, AI provider used, language, approximate latency and question length ranges. Managed by Vercel Analytics.

Email contact: If you contact us by email, we process your address and message content to respond.

3. Purpose and legal basis

• Site and local AI assistant operation: legitimate interest (GDPR Art. 6.1.f).
• Anonymous aggregated analytics: visitor consent (GDPR Art. 6.1.a), revocable anytime.
• Email inquiries: pre-contractual measures (GDPR Art. 6.1.b).

4. AI transparency (EU AI Act)

The portfolio assistant is an automated AI system. It provides information about Andoni Vianez Ulloa's professional experience based on structured CV data. It does not make automated decisions with legal effects on visitors. For verified information or hiring, contact directly by email.

5. Processors and transfers

Vercel Inc. (hosting and analytics): may involve international data transfers covered by Vercel's DPA and standard contractual clauses. GitHub (public API for repository stats): aggregated data, not visitor personal data.

6. Retention

Browser-local data (metrics, preferences): until the visitor clears them. Vercel analytics: per Vercel retention policy (typically 24 months). Contact emails: as long as needed to handle the inquiry.

7. Your rights

You may exercise access, rectification, erasure, objection, restriction and portability rights by writing to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).