Back to portfolio
Privacy Policy
Draft for review — 27 October 2026. This draft covers an email-contact portfolio. The controller’s legal details, hosting and email providers, analytics, cookies, retention schedules and any international transfers must be verified against the actual website before launch.
01 / Controller and contact
Mol is the portfolio contact. For privacy enquiries or to exercise your rights, email Moldraws@gmail.com. The full legal identity and postal contact details of the person or entity responsible for processing must be completed and confirmed before this policy is final.
02 / Information you provide
When you send an email, your email address, name if provided, message and attachments are used to read and respond to your enquiry and discuss potential work. Providing this information is voluntary, but without a contact address or sufficient context it may not be possible to reply. Please do not send unnecessary sensitive personal information.
03 / Purposes and legal bases
Responding to an enquiry about a potential commission may be necessary to take steps at your request before a contract (GDPR Article 6(1)(b)). General professional correspondence may rely on the legitimate interest in answering relevant messages (Article 6(1)(f)), subject to balancing your rights. Legal record-keeping may rely on a legal obligation (Article 6(1)(c)). Any optional processing requiring consent must be explained separately and consent may be withdrawn without affecting earlier lawful processing.
04 / Website delivery, analytics and cookies
Website delivery may involve technical information such as an IP address, browser details, requested resources and security logs. The site is built with Framer, but the final hosting, analytics and cookie configuration has not yet been verified for this notice. Before launch, this section must identify the actual data, purposes, providers, legal bases, retention and consent controls. Do not interpret this draft as a statement that the site uses no cookies or tracking.
05 / Retention and service providers
Enquiries should be kept only for as long as needed to handle the conversation, any resulting work and applicable legal obligations or claims. Specific schedules must be confirmed. Hosting, email and other authorised providers may process data to deliver those services; their identities or categories and roles must be verified. Any transfer outside the EEA must be documented together with the applicable adequacy decision or safeguards and how to obtain information about them.
06 / Your data protection rights
Where the GDPR applies, you may request access, correction, erasure or restriction of your data, object to processing and request portability where its conditions are met. You can also withdraw consent where processing relies on it. Send requests to Moldraws@gmail.com. Additional information may be requested only where reasonably necessary to verify identity. Requests are normally answered within one month, subject to lawful extensions.
07 / Complaints and changes
You may lodge a complaint with a competent supervisory authority, including the Spanish Data Protection Agency (AEPD). The final policy must also confirm whether automated decision-making or profiling takes place and provide the information required by law if it does. Material changes to the website’s processing should be reflected in an updated policy.
Spanish Data Protection Agency — AEPD
Source — GDPR, Articles 6, 12 and 13