Legal information

01

Privacy Policy

Who is responsible for your data

The controller of the personal data processed through this website is:

Controller

Martín Domínguez Carreira, self-employed (autónomo), trading as Atreo Studio

NIF

49404577W

Address

Lugar Cabovila 73, Calo, 15866 Teo (A Coruña), Spain

Email

[email protected]

Atreo Studio is a founder-led web design and development studio based in Spain, working with clients internationally.

What this policy covers

This website presents the studio and its work. It has no user accounts, contact forms or newsletter. We process personal data only in these cases:

• website analytics (Google Analytics and Cloudflare Web Analytics), only if you accept them;
• hosting and delivery of the website, on every visit;
• when you email us;
• when you follow a link to book a call on Cal.com.

Website analytics

Purpose. To understand how many people visit the site, which pages they view, how they found it and how well the pages perform, so we can improve it.

Legal basis. Your consent (Article 6(1)(a) GDPR and Article 22.2 of the Spanish LSSI-CE). Both analytics tools load only after you select “Accept analytics” in the cookie banner. If you reject them, or make no choice, neither loads and no analytics data is sent.

Withdrawing consent. You can withdraw your consent at any time from “Cookie preferences” in the footer. Both tools stop from that moment on; withdrawal does not affect data collected before.

Google Analytics 4

If you accept, Google Analytics collects:

• the pages you view and their address. We remove query parameters from the address, except campaign tags (utm_*);
• the referring website or campaign that brought you here;
• device type, browser, operating system, screen size and language;
• approximate location (country, region and city), derived from your IP address;
• interactions Google Analytics records automatically, such as scrolling, clicks on links to other websites and file downloads;
• random identifiers stored in the _ga cookies, used to recognise repeat visits and sessions.

According to Google, Google Analytics does not log or store the IP addresses of visitors in the EU: it uses them only to derive approximate location and then discards them. We do not send names, email addresses or anything you type to Google. Google signals and ad personalisation are turned off, site search and form interaction tracking are turned off, and we do not use analytics data for advertising.

Provider. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and its parent company Google LLC (USA). We have accepted Google's data processing terms for Google Analytics, under which Google processes this data on our behalf.

International transfers. Data may be processed in the United States. Google LLC is certified under the EU–U.S. Data Privacy Framework, which the European Commission recognised as providing an adequate level of protection in its decision of 10 July 2023.

Retention. Google Analytics keeps event-level data linked to cookies and identifiers for 2 months and then deletes it; only aggregated reports are kept. The cookies expire as described in the Cookie Policy.

Cloudflare Web Analytics

If you accept, a small Cloudflare Web Analytics script reports each page view: the page path, the referring website, your browser, operating system and device type, and page-load performance timings. Cloudflare derives your country from the request. According to Cloudflare, Web Analytics does not use cookies or local storage to track visitors, does not fingerprint them and does not log query strings.

Provider. Cloudflare, Inc. (USA), which also hosts this website (see below). For transfers from the EEA to the United States, Cloudflare relies on its certification under the EU–U.S. Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback.

Retention. According to Cloudflare, detailed Web Analytics data is kept for 7 days and then aggregated, and reports cover the previous six months.

Hosting and delivery

This website is hosted on Cloudflare Pages and delivered through Cloudflare's network. To serve each page and protect the site against abuse, Cloudflare necessarily processes technical data from every request, such as your IP address, the address requested, your browser's user agent and the time, including in its logs and security systems. This happens on every visit, whatever your analytics choice, and is separate from analytics. The legal basis is our legitimate interest in delivering a working, secure website (Article 6(1)(f) GDPR). Cloudflare handles this data under its privacy policy (opens in a new tab), and relies on the transfer mechanisms described above.

When you email us

If you write to [email protected], we use your name, email address and whatever you include in your message to reply and, where relevant, to discuss a project. The legal basis is our legitimate interest in answering enquiries, or steps you ask us to take before entering into a contract (Article 6(1)(f) and (b) GDPR). We keep this correspondence for as long as needed to handle your enquiry and any project that follows, and afterwards only for as long as the law requires.

When you book a call

“Book a call” is a link to Cal.com (opens in a new tab), an external scheduling website. Cal.com is not embedded in this website and nothing from it loads here unless you follow the link. If you book, the details you enter there, such as your name, email address and any notes, are collected by Cal.com under its own privacy policy (opens in a new tab) and shared with us so we can prepare for and hold the call, a step you request before a possible contract (Article 6(1)(b) GDPR).

Who receives your data

We do not sell personal data. Apart from the providers named in this policy, we disclose it only where the law requires.

Your rights

You can ask to access, rectify or erase your personal data, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time. To exercise these rights, email [email protected]. We may ask you to confirm your identity, and we will reply within one month.

If you believe your data has not been handled correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es (opens in a new tab).

02

Cookie Policy

What cookies are

Cookies are small text files that a website stores in your browser so it can recognise it on later visits. Some are needed for a site to work; others, such as analytics cookies, are optional. Websites can also keep data in your browser's local storage, which works like a cookie but is never sent to the server automatically.

Optional analytics

We use Google Analytics and Cloudflare Web Analytics to measure visits and improve the site. Neither loads until you select “Accept analytics”. Before you choose, and if you reject, no analytics code loads and no analytics cookies are set.

If you accept, Google Analytics sets these cookies:

Both are first-party cookies, set on this website's domain by the Google Analytics script. The durations are Google's documented defaults; the expiry is renewed when you return, and some browsers shorten the lifetime of cookies set by scripts. Cloudflare Web Analytics, which loads at the same time, sets no cookies and uses no local storage.

Necessary storage

Your analytics choice is saved in your browser's local storage, not in a cookie, so the site can respect it on every page. It is saved only once you make a choice and is never used for analytics.

Key

atreo-analytics-consent-v1

Contents

Your choice (accepted or rejected) and the time you made it

Duration

Kept until you clear your browser's site data. After 12 months your choice expires and we ask again.

Cloudflare, which hosts the site, may set strictly necessary security cookies such as __cf_bm orcf_clearance if it needs to check that a request is not automated. They are part of delivering the website and are not used for analytics. See Cloudflare's cookie list (opens in a new tab).

The site owner also uses an internal page to exclude their own browsers from analytics, which stores atreo-analytics-excluded in those browsers only. It is never set for visitors.

Accepting, rejecting and changing your choice

• On your first visit, a banner offers “Accept analytics” and “Reject analytics”, with equal prominence. Scrolling or browsing the site is not consent.
• You can change your choice at any time from “Cookie preferences” in the footer or here: .
• If you withdraw consent, both tools stop sending data straight away, the _ga cookies are deleted, and neither tool loads on later pages.
• You can also delete cookies and local storage in your browser settings. Google offers a browser add-on to opt out of Google Analytics (opens in a new tab).

Providers

Google Analytics, by Google Ireland Limited and Google LLC: see how Google uses information from sites that use its services(opens in a new tab) and the Google Privacy Policy (opens in a new tab). Cloudflare Web Analytics and hosting, by Cloudflare, Inc.: see the Cloudflare Privacy Policy (opens in a new tab). How we process this data is described in the Privacy Policy.

03

Legal Notice

Website owner

In accordance with Article 10 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), the owner of this website is:

Owner

Martín Domínguez Carreira

Status

Self-employed individual (autónomo)

Trade name

Atreo Studio

NIF

49404577W

Address

Lugar Cabovila 73, Calo, 15866 Teo (A Coruña), Spain

Email

[email protected]

Website

atreo.studio

As a self-employed individual, the owner is not registered in the Mercantile Registry.

About this website

This website presents Atreo Studio's brand, web design and development services and selected client work. Its content is general information about the studio. It is not an offer and does not create a contract: each project is agreed separately in writing. We may update or remove content at any time.

Intellectual property

Unless stated otherwise, the content of this website, including its text, design, graphics, code and the ATREO name and logo, belongs to the website owner. Client names, logos and project materials shown in case studies belong to their respective owners. You may view the site and share links to it, but you may not reproduce, distribute or modify its content without prior written permission.

Links to other websites

This website links to third-party services such as Cal.com (opens in a new tab), X (opens in a new tab) and LinkedIn (opens in a new tab). We are not responsible for their content or practices; their own terms and privacy policies apply.

Applicable law

This website is governed by Spanish law.

Questions about this page or your data: [email protected]