Privacy & cookie policy
This policy explains what personal data I handle when you visit services.itsdavidg.co or write to me through any of its forms, what I use it for, and what you can require of me. It is written to satisfy Regulation (EU) 2016/679 (GDPR) for visitors in Europe and Law 1581 of 2012 for visitors in Colombia.
1. Who handles your data
Controller: David Gómez Bravo — cloud consulting and engineering services
(AWS audits, monitoring and implementation credits).
Tax identification: NIT 72285897-4 (Colombia)
Address: Carrera 64 # 98-90, Barranquilla, Colombia
Contact: contactme@itsdavidg.co
Website: itsdavidg.co
2. What I collect, and why
| Data | What for | Legal basis |
|---|---|---|
| Email address, name (optional) and whatever you write in the message | Answering you, sending the AWS security checklist, and preparing a quote | Your consent, and the pre-contractual steps you asked for |
| Follow-up emails after that first contact | Sending you content and offers related to what you asked about | Your consent — withdrawable from every email in one click |
| IP address, browser and landing page | Security, form abuse prevention and basic attribution of the request | Legitimate interest in protecting the service |
| Browsing data (pages viewed, traffic source) | Measuring which content actually works | Only with your prior cookie consent |
| The domain name you type into the free scan | Running the public checks and showing you the findings | Performing the service you requested |
I do not collect special categories of data, I do not make automated decisions with legal effects about you, and I neither buy nor sell contact databases.
3. How long I keep it
I keep contact data for as long as there is a commercial relationship or an interest in one, and at most three years from the last contact, unless a legal obligation (invoicing) requires longer. You can ask me to delete it sooner at any time.
4. Who else sees it
I do not pass your data to third parties for their own purposes. I do use providers that process it on my instructions:
- Amazon Web Services — hosting for the site and for the requests database.
- Amazon SES — sending the reply emails and the checklist.
- Google Ireland / Google LLC — Google Analytics and Google Ads, only if you accept cookies.
- Calendly — only if you choose to book a call.
Some of these providers process data in the United States. Those transfers rely on the European Commission's standard contractual clauses and, where the provider is certified, on the EU–US adequacy framework.
5. Cookies and similar technologies
On your first visit you will see a notice with two options of equal weight: Accept or Decline. Until you accept, no Google script is loaded and no measurement or advertising cookie is set. Declining does not limit any functionality on the site.
| Cookie / storage | Set by | What for | Lifetime |
|---|---|---|---|
itsdavidg_consent | First party (localStorage) | Remembering your cookie decision | Until you clear it |
ft | First party (localStorage) | Remembering which link you arrived from, to know which channel works | Until you clear it |
_ga, _ga_* | Google Analytics | Audience measurement | Up to 2 years |
_gcl_* | Google Ads | Ad conversion attribution | Up to 90 days |
You can change your mind whenever you like from the “Cookie preferences” link in the footer, or by clearing site data in your browser.
6. Your rights
At any time, and free of charge, you can exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent without affecting the lawfulness of processing carried out beforehand. An email to contactme@itsdavidg.co saying which right you are exercising is enough; I answer within one month at the latest.
If you are in the EU and believe I have not handled your request properly, you can complain to your national data protection authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).
If you are in Colombia, this policy also serves as the privacy notice required by Law 1581 of 2012: you have the right to know, update, rectify and delete your data and to revoke your authorisation, and you may complain to the Superintendencia de Industria y Comercio.
7. Security
Data is stored encrypted on AWS infrastructure with access restricted to me alone. Forms are always submitted over HTTPS. In the event of a breach posing a high risk to your rights, I would notify you and the supervisory authority within the deadlines the law sets.
8. Changes
If I change this policy I will update the date in the header. If the change affects the basis on which I process your data, I will tell you by email before it takes effect.