Privacy statement
What this website collects, what happens when you contact me, where that data is held, and the rights you have over it.
Last updated: 12 September 2026
Who is responsible
Hernández Ortiz B.V., Harderwijkerweg 118, 3852 AG Ermelo, Netherlands.
KvK 89494172. Contact: [email protected], +31 6 53682219.
Hernández Ortiz B.V. is the controller for the personal data described below.
What this website collects
This is a static website. It sets no cookies, embeds no tracking pixels, and runs no analytics of my own. Its fonts are served from this domain rather than from Google, so displaying a page fetches no content from a third party.
The site is delivered through Cloudflare, a content delivery network that sits in front of the server. Cloudflare receives your IP address in order to route the request, and it adds one thing to the page that is not in its source code: it rewrites email addresses into an encoded form, so that address harvesting robots cannot read them, and loads a small script from this same domain to turn them back into readable text for you. That script does not track you and sends nothing back.
The web server itself keeps standard technical logs: timestamp, requested page, response status, and browser user agent. Because the server sits behind that delivery network, the address it records is the network's, not yours. Your own IP address is not written to this website's logs. The logs are rotated daily and deleted after fourteen days. They are used to keep the site running and secure, and for nothing else.
If you contact me
When you send a message, by email or by phone, I receive what you chose to tell me: typically your name, your email address, your organisation, and the content of your message.
That information is used to answer you and to carry on the conversation that follows. It is not added to a mailing list, not used for automated profiling, and not sold or shared for anyone else's marketing.
Legal basis: legitimate interest in responding to an enquiry addressed to me, and where a working relationship follows, the performance of that agreement.
How long: enquiries that do not lead to work are deleted within twelve months. Correspondence connected to an engagement is kept as long as the engagement and any statutory retention period require.
Where your data is held
Email is hosted with Microsoft 365. Microsoft stores that mailbox data at rest in the Netherlands, which is the tenant's committed geography, and the same holds for the other Microsoft services in use. Website logs sit on infrastructure in the Netherlands, on hardware under my own control.
Cloudflare delivers the site and therefore processes connection data, including your IP address. Cloudflare is a United States company operating a globally distributed network, so a request may be served from, and connection data handled at, a location outside the European Economic Area. That data is used to deliver and protect the site. It is not used to build a profile of you, and it is not combined with anything you send me.
Your rights
Under the GDPR you may ask me to show you the personal data I hold about you, correct it, delete it, restrict how it is used, or provide it in a portable form. You may also object to processing based on legitimate interest.
Write to [email protected] and I will respond within one month.
If you are not satisfied with how I handle it, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens: autoriteitpersoonsgegevens.nl.
Links to other sites
This site links to profile.hernandez-ortiz.com, 1up-action.com, LinkedIn and GitHub. Once you follow a link, that site's own privacy statement applies. I have no control over what they collect.
Changes
If this statement changes, the date at the top changes with it. There is no version history: the current text is the whole statement.