[TODO legal copy — owner + legal advisor] Context: identify Jorge Fernández as data controller, with contact email and rights-exercise channel: info@nonome.es. Include identifying data required by GDPR art. 13.

[TODO legal copy — owner + legal advisor] Context: the ONLY personal-data capture channel in the MVP is spontaneous email received at info@nonome.es. There is no web form and no tracking cookies. Data processed is whatever the data subject chooses to include in the message (name, email, message content, possible attachments).

[TODO legal copy — owner + legal advisor] Context: the purpose is exclusively to respond to the received message and, where appropriate, to maintain the commercial or professional relationship initiated by the data subject. No secondary purposes (marketing, profiling, transfer to third parties).

[TODO legal copy — owner + legal advisor] Context: legal basis of processing — legitimate interest of the controller in responding to a contact initiated by the data subject and, simultaneously, implicit consent through voluntary sending of the message (GDPR art. 6.1.a and 6.1.f). If the inquiry develops into a contractual relationship, contract performance (GDPR art. 6.1.b).

[TODO legal copy — owner + legal advisor] Context: emails are retained for the time necessary to manage the inquiry or, if it develops into a commercial relationship, for the duration of the relationship plus applicable legal periods (commercial, tax). Erasure upon request of the data subject or after expiration of the periods.

[TODO legal copy — owner + legal advisor] Context: nonome does not transfer data to third parties except by legal obligation. The email provider (Cloudflare Email Routing) acts as data processor under its own clauses; the actual inbox resides at the mail provider chosen by the owner (to be clarified). Document international transfers if any (CF: USA, adequacy decision or standard clauses).

[TODO legal copy — owner + legal advisor] Context: the data subject may at any time exercise the rights of access, rectification, erasure, objection, restriction of processing and portability by sending a request to the email info@nonome.es, identifying themselves and describing the right exercised. Maximum response period: 1 month extendable to 2 months (GDPR art. 12.3). Right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

[TODO legal copy — owner + legal advisor] Context: nonome reserves the right to modify this policy to adapt it to legislative or operational changes. Each modification is published with a new version and effective date visible at the top.