Privacy and cookies

Who is responsible

Sandra Pascual Burgos, Madrid, Spain. For anything on this page, write to personal@sandrapascual.com.

This is a personal professional site. It sells nothing, it has no accounts, and it has no forms.

Cookies

This site sets no cookies. It stores nothing in your browser — no cookies, no local storage, no session storage, no device identifiers of any kind.

Because nothing is stored on or read from your device, there is no consent banner. There is nothing to consent to.

What is processed anyway

Serving a web page still involves some data, even with no cookies:

• Your IP address and browser reach Vercel Inc., which hosts the site, and are kept in its server logs for security and to keep the service running.
• Your IP address reaches Adobe when your browser downloads the typefaces this site uses.
• Page views are counted by Vercel Analytics. It sets no cookies and stores nothing in your browser. To tell one visit from another it derives a temporary hash from your IP address and browser, salted and rotated daily, which cannot be traced back to you, is not kept, and is never used to follow you to other sites.

Why it is lawful

Legitimate interest under Article 6(1)(f) GDPR: operating the site securely, delivering the typography it is designed in, and understanding in aggregate which pages are read. None of this identifies you personally, and none of it is used to advertise to you.

How long it is kept

Server logs are retained by the hosting provider for a short technical period and then deleted. Aggregated audience figures carry no personal data and are kept while the site exists.

International transfers

Vercel Inc. and Adobe Inc. are based in the United States. Transfers rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

Your rights

You can request access, rectification, erasure, restriction, portability or object to processing, by writing to personal@sandrapascual.com.

You may also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).

AI-generated images

The collages on the “My story” page were created with generative artificial intelligence tools, starting from real photographs in my personal archive.

This is stated because Article 50 of Regulation (EU) 2024/1689 on artificial intelligence requires disclosure when artificially generated or manipulated image content that could appear authentic is published. What those scenes describe did happen; the visual composition is not an original photograph.

The portraits elsewhere on the site are real photographs of me: the person and the moment are authentic, and the background has been retouched. The project images are real client work.

The CV

The CV downloads directly. It is not behind a form: no name, no email, nothing is collected in exchange for it.