1. Data controller
In compliance with Regulation (EU) 2016/679 (RGPD) and Organic Law 3/2018 (LOPDGDD), we hereby inform you that the data controller of the personal data collected through this website is:

Name and surname	Javier Tenor
DNI	53691771L
Condition	Freelance Professional - Graphic Design
Address	Calle Lepanto 7, 29003, Malaga, Spain
Contact email	hola@onoky.es
Website	https://onoky.es

2. Data collected
Depending on the user's interaction with the Website, the following data may be collected:
- Contact form: name, e-mail and message content.
- Budget or project requests: name, e-mail, telephone (optional) and description of the project.
- Browsing data: anonymised IP address, pages visited and time spent, using analytical cookies.
No specially protected data (health, ideology, racial origin, etc.) is collected.
3. Purpose, legal basis and retention periods

Purpose	Legal basis	Conservation period
Respond to enquiries and requests for quotations	Consent of the data subject (art. 6.1.a RGPD)	Until the consultation is resolved + 1 year
Management of the contractual relationship with customers	Execution of the contract (art. 6.1.b GDPR)	During the relationship + 5 years (commercial obligations)
Statistical analysis of navigation (Google Analytics)	Consent of the data subject (art. 6.1.a RGPD)	26 months (GA4 configuration)
Compliance with legal and fiscal obligations	Legal obligation (art. 6.1.c RGPD)	As required by regulations (min. 5 years)

4. Recipients and transfers
No personal data is given or sold to third parties, except in the following cases:
- Technology providers (hosting, WordPress) acting as data processors in accordance with art. 28 GDPR.
- Google LLC, via Google Analytics, for statistical analysis. Google LLC adheres to the EU-U.S. Data Privacy Framework.
- When required by law or by a competent authority.
There are no international transfers outside the EEA except as indicated with Google Analytics, covered by appropriate safeguards.

5. Rights of data subjects
The user may exercise the following rights at any time before Javier Tenor (hola@onoky.es):
- Access: to know what personal data are processed.
- Rectification: correcting inaccurate or incomplete data.
- Deletion (‘right to be forgotten’): request the deletion of your data.
- Limiting processing: restricting processing in certain circumstances.
- Portability: receiving your data in structured format or requesting its transmission to another data controller.
- Opposition: to object to processing in certain circumstances.
- Not be subject to automated decisions.
You must prove your identity by attaching a copy of your ID card. A response will be given within a maximum period of one month, extendable to three months in complex cases.

6. Right to complain to the AEPD
If you consider that the processing of your data is in breach of the regulations, you can complain to the Spanish Data Protection Agency:
- Web: https://www.aepd.es
- Address: C/ Jorge Juan, 6, 28001 Madrid
- Telephone: 901 100 099

7. Security measures
Appropriate technical and organisational measures are implemented in accordance with Art. 32 GDPR, including HTTPS encryption, system access control and regular backups.

8. Minors
This website is not intended for children under 14 years of age. If it is detected that data of a minor has been provided without parental consent, it will be deleted immediately.

9. Updates
This Privacy Policy may be modified to adapt to changes in legislation or in the criteria of the AEPD. The changes will be published on this page with the date of update.