ESEN
Let's talk

Privacy policy

Last updated: November 2026

1. Who is responsible

Data controller: [pending] (“AC Works”).
Tax ID: [pending]
Address: [pending]
Email: hola@alejandraceno.com

2. Which sites this covers

This policy applies to acworks.es, alejandraceno.com and brandinginteligente.com, including all their pages and forms. All three sites have the same controller.

3. What data we collect and how

Contact and session request forms. When you fill in a form we collect what you type: name, company or brand, email address, phone number (optional), how you produce your pieces today (optional) and your message (optional).

Some technical data is recorded automatically with the form: the page you send it from, the campaign parameters in the URL (utm), the referring page, the date and time and your IP address. It tells us where requests come from and helps us detect automated submissions (spam).

Email. If you write to us directly, we process the data you include in your message.

We do not collect special categories of data or data from children under 14. If you think a child has sent us data, write to us and we will delete it.

4. What we use it for and on what legal basis

  • Replying to your request and arranging the session you ask for. Legal basis: your consent, given by ticking the box on the form or by writing to us (art. 6.1.a GDPR).
  • Preparing and managing a professional relationship (proposals, quotes, contracts). Legal basis: pre-contractual steps and performance of the contract (art. 6.1.b GDPR).
  • Measuring where requests come from and preventing abuse. Legal basis: legitimate interest in the operation and security of the site (art. 6.1.f GDPR).
  • Meeting legal obligations, such as tax and accounting, where there is a contractual relationship. Legal basis: legal obligation (art. 6.1.c GDPR).

We do not make automated decisions or build profiles. We do not send newsletters or commercial messages you have not asked for: your data is used only for the request you make.

5. How long we keep it

Request data is kept while we handle it and, at most, for one year after the last contact if no professional relationship begins. If one does, it is kept for as long as it lasts and then for the periods required by tax and commercial law. You can ask us to delete it sooner (see section 8).

6. Who receives it

We do not sell your data or pass it on to third parties. The only ones with access are the technology providers essential to the service, acting as processors under contract: the web hosting provider, where form submissions are stored in a folder with no public access (Tropical Server, servers in [pending]), and the email provider. It may also be disclosed to the authorities when the law requires it.

7. International transfers

The fonts on brandinginteligente.com load from Google Fonts, a service of Google LLC (United States). When you open the page, your browser sends Google your IP address to download the font. Google is certified under the EU-US Data Privacy Framework. No other international data transfers take place.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, without affecting the lawfulness of earlier processing. To do so, write to hola@alejandraceno.com saying which right you want to exercise. We will reply within one month.

If you think we have not handled your data correctly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Cookies

All three sites use only the technical cookies needed for the pages to work (for example, to remember the language you chose). They do not use analytics, advertising or tracking cookies, which is why they show no cookie notice. If we add a measurement tool in the future, we will ask for your consent before activating it and update this policy.

10. Security

We apply reasonable technical and organisational measures to protect your data: encrypted connections (https), storage in folders with no public access, access limited to the controller and filters against automated submissions.

11. Changes to this policy

We may update this policy to reflect legal or service changes. The version in force is always the one published on this page, with its update date.

This is a translation. The Spanish version is the binding one.