Privacy Policy
Information about how we process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish data protection law (LOPD-GDD).
Last updated: July 2026
1. Data Controller
| Controller | Ricardo Font |
| Tax ID (NIF) | 61564957Y |
| Address | Madrid, Spain |
| info@hipnosia.com | |
| Phone / WhatsApp | +34 611 723 195 |
| Website | https://hipnosia.com |
2. Personal data we process
We collect the following personal data through the channels indicated:
Contact form
- First and last name
- Email address
- Phone number
- Service of interest
- Message
- Submission date and time
Browsing data (with your consent)
- IP address and device technical data
- Pages visited, time on site and interaction events
- Traffic source
Browsing data is only collected if you accept analytics cookies. See our Cookie Policy.
3. Purpose and legal basis
| Handle your contact request | Respond to enquiries, quotes and requests submitted through the contact form. Legal basis: Art. 6(1)(b) GDPR — pre-contractual measures |
| Commercial communications | Send you information about Hipnosia services or updates that you have requested or that are directly related to your enquiry. Legal basis: Art. 6(1)(f) GDPR — legitimate interest |
| Web analytics | Measure website performance and improve user experience via Google Analytics 4. Legal basis: Art. 6(1)(a) GDPR — consent |
We do not carry out automated decision-making or profiling for marketing purposes without your explicit consent.
4. Recipients and international transfers
Your data may be shared with the following data processors with whom we have signed appropriate agreements:
| n8n / Easypanel | Automation platform that receives contact form data. Servers located in the European Union. Acts as a data processor. |
| Google LLC (Analytics & Tag Manager) | Web analytics service. May involve transfer to the US, covered by Standard Contractual Clauses approved by the European Commission and the EU-US Data Privacy Framework. |
| Netlify Inc. | Website hosting provider. May access access logs including visitor IP addresses. Servers in the US, with transfer covered by Standard Contractual Clauses. |
We do not sell, rent or share your data with third parties for their own commercial purposes.
5. Retention periods
| Contact form data | Retained for as long as necessary to handle your request and, once the relationship ends, until the applicable statutory limitation periods expire (generally 3 years under Spanish civil law). |
| Analytics data (GA4) | 14 months, in line with the standard Google Analytics 4 configuration. After this period, data is aggregated and anonymised. |
6. Your rights
Under the GDPR and Spanish data protection law, you have the following rights:
Access
Know what data we hold about you and obtain a copy.
Rectification
Correct inaccurate or incomplete data.
Erasure
Request deletion of your data when it is no longer needed.
Restriction
Ask us to suspend processing in certain circumstances.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interest.
To exercise any of these rights, send an email to info@hipnosia.com stating which right you wish to exercise and attaching a copy of your ID. We will respond within one month.
If you believe that the processing of your data does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es
7. Security measures
We implement appropriate technical and organisational measures to ensure the security of your personal data and prevent its loss, alteration, unauthorised access or disclosure, taking into account the state of the art, implementation costs and the nature, scope, context and purposes of processing.
All communications between your browser and our server use HTTPS with TLS encryption.
8. Minors
This website is intended for users aged 14 and over. We do not knowingly collect data from children below that age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at info@hipnosia.com so we can delete it.
9. Changes to this policy
We may update this Privacy Policy to reflect changes in law, court decisions or our services. The last updated date appears at the top of this document. In the case of material changes, we will notify you through the available contact channels.