Privacy policy
Last updated: 28 October 2026
In short: I only collect what you send me through the contact form, by email or when you book a call. I use it to reply to you and, if we work together, to run our project. I don't sell your data, I don't send newsletters without asking, and you can ask me to delete your data at any time.
Who is responsible for your data
The data controller is Vaiva Rivas, a self-employed consultant based in Spain. You can reach me at hello@vaivarivas.com. My full business details are in the legal notice.
I follow the EU General Data Protection Regulation (GDPR) and the Spanish data protection law (LOPDGDD).
What data I collect
| When | What |
|---|---|
| You fill in the contact form | Your name, email address, whether you are a founder, a farm or something else, and your message. |
| You email me | Your email address, name and whatever you write in the email. |
| You book a call | Your name, email address, the time you choose and anything you add to the booking. |
| We work together | Contact and billing details, and the information you share about your business or farm for the project. |
| You visit the website | Your IP address and basic browser information, which the servers that deliver the site receive automatically. I don't use analytics or advertising tools. |
Why I use it and on what legal basis
- To reply to your message or prepare for a call. This is a step you ask for before we may sign an agreement (GDPR Art. 6(1)(b)), and my legitimate interest in answering people who contact me (Art. 6(1)(f)).
- To deliver the work we agree on and to communicate during the project (Art. 6(1)(b), contract).
- To issue invoices and keep accounting records, as Spanish tax and commercial law requires (Art. 6(1)(c), legal obligation).
- To keep the website working and secure (Art. 6(1)(f), legitimate interest).
- To send you occasional updates, only if you have said yes (Art. 6(1)(a), consent). You can withdraw your consent at any time.
How long I keep it
- Messages and call bookings that don't lead to a project: up to 2 years after our last contact, then deleted.
- Client and project data: for the length of the project and up to 5 years after it ends, in case of questions or claims.
- Invoices and accounting records: 6 years, as Spanish law requires.
Who I share it with
I never sell your data. I only share it with the services I need to run my work. They process it on my behalf, under data processing agreements:
- Website hosting: Vercel Inc. (United States)
- Contact form delivery: Resend, Inc. (United States)
- Email: e.g. Google Workspace
- Call booking: e.g. Calendly or Cal.com
- My accountant and the tax authorities, only for billing data.
Some of these providers are based outside the European Economic Area, for example in the United States. In those cases, your data is protected by the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.
Your rights
You can ask me, at any time and free of charge, to:
- see the data I hold about you (access),
- correct it (rectification),
- delete it (erasure),
- limit how I use it (restriction),
- send it to you or to someone else in a common format (portability),
- stop using it based on my legitimate interest (objection),
- withdraw any consent you have given.
Email hello@vaivarivas.com and I will reply within one month. If you think I haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority in your own country.
How I protect it
The site uses an encrypted connection (HTTPS). I keep your data in password-protected accounts with two-factor authentication, and I only give access to the people who need it for our work.
Cookies
This website does not use cookies for analytics or advertising. See the cookie policy for details.
Changes to this policy
If I change how I use your data, I will update this page and the date at the top.