Privacy

Last updated: 10 October 2026

This site is operated by JAlcocerTech – Jesús Alcocer Tagua, a sole proprietorship registered in Poland. For anything about your data, write to [email protected].

The short version

  • If you write to me through a form, your details are used to answer you.
  • Any email subscription needs one click in a confirmation email, and every email has a one-click unsubscribe link.
  • Updates and new articles are emailed only if you subscribe or tick the optional box — and you can stop them anytime.
  • No advertising cookies, no selling or sharing your data.
  • You can have your data deleted anytime by writing to [email protected].

What is collected, and why

When you send a message (footer form or the contact page): your email, your message and, if you add it, your name. Used to reply and, if it leads there, to discuss working together. Legal basis: your request (GDPR Art. 6(1)(b)) and my legitimate interest in answering business enquiries (Art. 6(1)(f)).

If you tick "also send me occasional updates": I record that choice, the date and the wording you agreed to, and send you one email asking you to confirm it (double opt-in). Only after you confirm may I email you about new guides and services. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw anytime with the unsubscribe link in any email or by writing to [email protected]. Your message itself is still answered either way.

If you subscribe to new articles (the box inside articles): your email, the date and the wording you agreed to. You first get one email asking you to confirm (double opt-in); nothing else is sent until you do. After confirming you get a short welcome series (three emails over your first week: a welcome, where to start, and a question about what you're building), then new write-ups a few times per quarter at most. Legal basis: your consent (Art. 6(1)(a)); unsubscribe anytime in one click from any email, or by writing to [email protected].

When you unsubscribe I keep a one-way fingerprint (a SHA-256 hash) of your address, never the address itself, so it is never emailed again — not even if it reappears by mistake. Legal basis: my legitimate interest in respecting your choice (Art. 6(1)(f)). Subscribing and confirming again later removes it.

With each submission I also store the page it was sent from, the country your connection comes from (as reported by Cloudflare) and any campaign tags in the link (utm_…), to know which content brings people here.

No profiling today. I don't currently enrich contact details with outside data or build profiles. If that ever changes, this page will say so first, and you'll be able to object.

When you just browse: Cloudflare processes standard request data (IP address, browser, requested page) to serve and protect the site. Page statistics come from Cloudflare Web Analytics, which uses no cookies and doesn't track you across sites.

Where it's stored

Who What for Data
Cloudflare, Inc. Hosting, security, form storage (Workers KV), cookieless page statistics Request data; form submissions
Mailjet (Sinch Mailjet SAS, France) Delivering confirmation emails, the welcome series, updates and new-article emails from news.jalcocertech.com; open and click tracking are switched off Your email address and the email's content
Proton (Switzerland) The mailbox my replies are sent from (and where your replies arrive) Your email and our correspondence
My own server in Poland A backup copy of form submissions, and scheduling the emails you signed up for Form submissions; which emails were sent
My own notification server A heads-up that a form arrived Only the email domain (e.g. @example.org) — never your address or message

Cloudflare may process data outside the EU under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

Booking a call or requesting a qualifier happens on consulting.jalcocertech.com, which has its own privacy policy (it uses Cal.com, Formbricks and Stripe).

How long it's kept

  • Messages: up to 24 months after our last exchange, then deleted automatically.
  • Article subscriptions: until you unsubscribe, then deleted 30 days later (only the fingerprint above stays).
  • Sign-ups you never confirm: deleted after 30 days.
  • The copy on my own server follows the same rules, and deleted records leave its daily backups within two weeks — everything is gone within about three months of a deletion.
  • Consent to updates: until you withdraw it, or at most 24 months after our last contact — whichever comes first.
  • If we start working together, records required for accounting are kept as the law requires.

Your rights

You can ask for access, correction, deletion or a copy of your data, or object to its use, by writing to [email protected]. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

Changes

If this page changes, the date at the top changes with it.