Privacy and cookies

Controller and contact

Joan Feu Gelis · JFG·NEXT · joanfeu@gmail.com. Legal notice

What we process and why

When you send an inquiry or conversation summary, Joan uses the name, email, message and, if supplied, phone number to respond and follow up on your request. The legal basis is taking steps at your request before a potential engagement (GDPR Article 6(1)(b)). We do not use inquiries for a mailing list.

The AI assistant sends the message and recent conversation context to OpenAI to generate a reply. Do not include confidential or sensitive information. The chat is held in your browser during the session; it is emailed to Joan only if you choose to submit a summary. The basis is providing the assistant you requested (GDPR Article 6(1)(b)).

With your consent (GDPR Article 6(1)(a)), Umami counts visits and a limited set of contact actions. The site suppresses analytics until you accept, sends no name, email, phone or chat text as event data, and excludes page query strings and fragments. A browser Do Not Track or Global Privacy Control signal disables analytics.

Service providers and transfers

The site uses Vercel for hosting and application delivery; OpenAI for AI replies; Upstash Redis for short-lived rate-limit counters based on network address; Resend for delivering contact emails; and Umami for consent-based analytics. If you choose WhatsApp, SMS or your email application, that service processes the content when you send it there under its own terms. Some providers or their subprocessors may process information outside the European Economic Area. Where applicable, international transfers must be covered by an adequacy decision or appropriate safeguards such as standard contractual clauses. A provider's general documentation does not establish the location or safeguards of this particular account.

Retention

Joan retains contact emails and submitted conversation summaries for up to six months from the last exchange, unless an engagement begins, you request earlier deletion where applicable, or a legal obligation requires longer retention. If an engagement begins, its records follow the applicable contractual and statutory periods. The website does not save chat history to a JFG·NEXT database. Temporary rate-limit counters expire automatically within roughly two days. Providers may maintain operational or security records under their own terms; the six-month period is Joan's retention commitment for contact correspondence, not a claim about every provider's logs.

Cookies and browser storage

Umami is configured without analytics cookies, but analytics requests still require your consent on this site. The local-storage record jfg_analytics_consent_v1 stores your choice for 180 days. The jfg_locale cookie saves a language you explicitly chose for one year so the site can keep that preference. You can revisit Privacy preferences in the footer to change your analytics choice at any time. Rejecting analytics does not prevent using the site.

Your rights

You can request access, correction, deletion, restriction or portability of your personal data, or object where applicable, by emailing Joan. You can withdraw analytics consent at any time through Privacy preferences, without affecting earlier lawful processing. You may complain to the Spanish Data Protection Agency (AEPD). AEPD ↗