Privacy policy

Last updated: November 7, 2026

Who handles your data

What I collect and why

The Diagnosis form collects your name, role, corporate email, company website and, if provided, LinkedIn profile. It also collects company size, where its judgment is concentrated, the reason for your request, the expert's availability, the phase you are interested in and the decision you want assessed. Describing the consequences of doing nothing is optional. The submission includes the language of your request.

I use this information to assess whether the case fits Encode, reply to you and, where appropriate, prepare a conversation and a possible engagement. If you email me, I handle the information you include for the same purpose.

Fields marked with an asterisk are needed to assess your request. You cannot submit the form without completing them. Submitting it does not subscribe you to a marketing list or start a project.

Describe the situation without naming other people or including sensitive or confidential information. Detailed business material is reviewed after signing a confidentiality agreement.

Legal basis

If you request the service on your own behalf, processing needed to respond to your request is based on steps taken at your request before entering into a contract, under GDPR Article 6(1)(b). If you represent a company, it is based on the legitimate interest in responding to a professional request and maintaining the relationship with that company, under Article 6(1)(f).

If we agree on a service, processing needed to perform it and meet legal obligations is based on Articles 6(1)(b) and 6(1)(c), as applicable. I review requests personally. I do not use automated decisions or profiling to decide whether to accept your project.

How long I keep the data

If there is no engagement, I keep the request and correspondence for up to twelve months from our last exchange. I then delete the data, except where it must be kept to meet a legal obligation or address a claim. If there is an engagement, necessary data is kept during the relationship and for the applicable legal retention periods.

Providers and recipients

I do not sell your data. I use Netlify to host the website, receive and store Diagnosis requests and filter spam. I use Google Workspace for email and professional correspondence. These services may process data outside the European Economic Area, including in the United States, under the safeguards in their data processing terms, such as Standard Contractual Clauses where applicable.

You can read Netlify's privacy information and Google Workspace's data processing terms, or contact me for information about the applicable safeguards. Data may also be disclosed to authorities when required by law.

Browsing, fonts and cookies

The website does not include analytics, advertising or marketing tracking tools, or use its own cookies for those purposes. Netlify processes technical connection data, such as IP address, date and requested resource, to serve the site and protect it from abuse. The basis is the legitimate interest in keeping the service operational and secure.

Fonts are loaded from Google Fonts. When requesting those files, your browser connects to Google and transmits technical data such as your IP address and browser type. See Google's privacy policy. Technical logs are retained according to the providers' retention periods. I do not use them to identify visitors for marketing.

Your rights

You can request access, correction, deletion, restriction and portability where applicable, or object to processing, by emailing dv@demianvalenzuela.com. In particular, you may object to processing based on legitimate interest. I will reply within the legal time limit, normally one month.

If you believe your data has not been handled correctly, you can complain to the Spanish Data Protection Agency.