Legal
Privacy policy
Version 1 · September 2026
In short: I, Eliezer López, am the person responsible for your data. I keep your CV and contact details to consider you for current and future searches. I only share them with a company once you have said yes to that specific search. You can ask me to delete them at any time by writing to hello@eliezerlopez.eu. This site has no tracking cookies, no analytics and no third-party services.
Who is responsible
Eliezer López, as an individual, with contact address hello@eliezerlopez.eu. Although I work at WATA Factory, the data you send through this site comes to me, under my own name, and I am the one accountable for it.
What data I process and why
| Data | Where it comes from | What it's for | Legal basis |
|---|---|---|---|
| Name, email, LinkedIn, message and CV | The form you fill in | Considering you for current and future searches and getting in touch with you | Your consent (art. 6.1.a GDPR) |
| Sharing your CV with a company | Your OK for that company | Putting you forward for that specific search | Your specific consent for each company |
Source link (ref) and date and time of submission | The form | Knowing how you got here and being able to prove your consent | Legitimate interest and the obligation to prove consent |
| IP address | The request to the server | Limiting abusive submissions and the server's technical log | Legitimate interest (security). Never linked to your CV |
I don't ask for your phone number, current salary, current employer or anything I'm not going to use. I don't process special categories of data (health, beliefs, union membership…); if your CV includes them, that's your choice and I don't use them for anything.
Who it is shared with
- Specific companies, only once you have given me your explicit OK for that search. I never send a CV "just in case" or upload it to third-party databases.
- Providers I need to make this work, acting as data processors: the email provider (receives and stores the email with your CV), the server provider (your CV passes through its memory during submission and is never written to disk) and the cloud sync service for my personal archive. If any of them is outside the European Economic Area, the processing relies on the safeguards the GDPR provides for those cases.
I don't sell or pass your data to anyone else.
How long it is kept
- Your CV and details: until you ask me to delete them. Every 24 months I review: if we haven't been in touch in that time, I write to ask whether you want to stay in my archive; if you don't reply within 30 days, I delete them.
- The email with your CV: deleted from the mailbox as soon as I've archived it.
- Server technical logs (with your IP): 30 days.
Your rights
You can ask me at any time to access your data, correct it, delete it, restrict its processing, object to it, get a copy (portability) or withdraw the consent you gave me. Withdrawing it doesn't affect what was done before on the basis of it.
Write to hello@eliezerlopez.eu. I reply within a month at most. If you ask for deletion, I delete your CV and your record from my archive and the original email if it still exists, and I notify any company I put you forward to with your OK so they do the same.
If you think I haven't handled your data as I should, you can lodge a complaint with the Spanish Data Protection Authority (aepd.es).
Cookies and third parties
This site uses no tracking or analytics cookies, loads no third-party scripts, fonts or services, and has no cookie banner because none is needed. The only things that reach the server are what you send through the form and the technical request data (such as the IP) that any server needs in order to work.
How this is guaranteed
- The server doesn't store your CV or the form data: it sends them by email and forgets them.
- The consent checkbox stays unticked until you tick it, and every version of its text is numbered.
- There is no personal data in the site's URLs or in the application logs.
Changes to this policy
If I change anything, I change the version and the date above. The consent text you accepted is recorded with its version number, so it's always clear what you said yes to.