Privacy Policy

Who is responsible for this data

This site is operated by Lucas Barrios, an Applied AI & Operational Transformation Consultant based in Berlin, Germany. For any data-related questions, contact lucas@lucasbarrios.co.

What data is collected

When you submit the document request form, the site collects your full name, email address, company name, and the reason you provided for the request. This is the only form on the site that collects personal data.

The site also collects anonymous page view data — specifically the page visited, approximate country and city derived from your IP address by the hosting provider, device type, and a temporary session identifier. Your raw IP address is never stored.

Why it is collected and the legal basis

Form submission data is processed to evaluate your request, generate an access code, and send it to the email address you provided. The legal basis is legitimate interest: both parties have a direct interest in facilitating a professional document exchange.

Page view data is collected to understand which content is most useful to visitors. It is anonymous and processed on the same legitimate interest basis. No behavioural profiling or advertising takes place.

How long data is kept

Document request records — including your name, email, and company — are retained for 12 months from the date the access code is sent, then permanently deleted. If a request is never approved, it is deleted after 12 months from submission.

Anonymous page view data is retained for 90 days, then deleted.

Third parties

Your email address is shared with Resend solely to deliver the access code email. Your company name is passed to OpenAI to generate a brief company summary for context when reviewing your request — no other personal data is included in that call. The site is hosted on Vercel and the database runs on Supabase. Both are GDPR-compliant processors.

Your rights

Under the GDPR and German DSGVO, you have the right to access, correct, or delete any personal data held about you. You may also object to processing or request a copy of your data in a portable format. To exercise any of these rights, email lucas@lucasbarrios.co. Requests are handled within 30 days.

Governing law

This policy is governed by the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The supervisory authority for Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.