Legal
Privacy policy
Last updated 23 September 2026
In short: I, Eliezer López, am the person responsible for your data. I keep your CV and contact details, on my own encrypted server, to consider you for current and future searches. I only share them with a company once you have said yes to that specific search. You can ask me to delete them at any time by writing to hello@eliezerlopez.eu. This site has no tracking cookies, no analytics and no third-party services.
Who is responsible
Eliezer López, as an individual, with contact address hello@eliezerlopez.eu. Although I work at WATA Factory, the data you send through this site comes to me, under my own name, and I am the one accountable for it.
What data I process and why
| Data | Where it comes from | What it's for | Legal basis |
|---|---|---|---|
| First name, surname, email, phone (optional), LinkedIn, message and CV | The form you fill in | Considering you for current and future searches and getting in touch with you | Your consent (art. 6.1.a GDPR) |
| Your record in my internal system: the above plus location, roles, technologies you know, languages and my notes | I write it from your CV and from what we talk about | Being able to find you when a search comes up that fits | The same consent from the form |
| Which searches you are in and at what stage, with the date and reason for each change | I record it as things move | Putting you forward for that search and being able to tell you what happened and when | The same consent ("putting you forward for that search") |
| Sharing your CV with a company | Your OK for that company | Putting you forward for that specific search | Your specific consent for each company |
Source link (ref), the job you apply to and the date and time of submission | The form | Knowing how you got here, which search you are applying to, and being able to prove your consent | Legitimate interest and the obligation to prove consent |
| IP address | The request to the server | Limiting abusive submissions and the server's technical log | Legitimate interest (security). Never linked to your CV |
Who it is shared with
- A summary of your profile without saying who you are: before bothering you, I can tell a company about your experience, the technologies you know, your languages and the range you are looking for, without your first name, surname, email, phone or LinkedIn. It is there to find out whether you really fit before taking up your time. If there is interest, I tell you and you decide.
- Your full CV, to specific companies, only once you have given me your explicit OK for that search. I never send a CV "just in case" or upload it to third-party databases.
- Providers I need to make this work, acting as data processors and all of them inside the European Union: Zoho (the mailbox at
hello@eliezerlopez.eu, in its European region), which receives and stores the email with your CV, and Hetzner (Germany), where the server holding my internal system lives. If I ever use a provider outside the European Economic Area, I will say so here and the processing will rely on the safeguards the GDPR provides.
I don't sell or pass your data to anyone else.
How long it is kept
- Your CV, your record and your history: they stay indefinitely unless you tell me otherwise: they don't expire on their own and there is nothing to renew. The only limit is inactivity, and the clock goes back to zero every time something happens between us: we talk, you update your details or you send me a new CV. If 24 months go by with none of that, I write to ask whether you want to stay in my archive; if you don't reply within 30 days, I delete them.
- The email with your CV: a backup copy of the submission, deleted from the mailbox once I have added you.
- The submission as it arrived: it stays pending until I process it. After that I keep a trace for 30 days with none of your data (just dates and which record it went to), and it deletes itself.
- Server technical logs (with your IP): 30 days.
Your rights
You can ask me at any time to access your data, correct it, delete it, restrict its processing, object to it, get a copy (portability) or withdraw the consent you gave me. Withdrawing it doesn't affect what was done before on the basis of it.
Write to hello@eliezerlopez.eu. I reply within a month at most. If you ask for deletion, I delete your CV and your record from my archive and the original email if it still exists, and I notify any company I put you forward to with your OK so they do the same.
If you think I haven't handled your data as I should, you can lodge a complaint with the Spanish Data Protection Authority (aepd.es).
Cookies and third parties
This site uses no tracking or analytics cookies, loads no third-party scripts, fonts or services, and has no cookie banner because none is needed. The only things that reach the server are what you send through the form and the technical request data (such as the IP) that any server needs in order to work.
How this is guaranteed
- Your CV and your record live on an encrypted volume on my server. If anyone took a copy of the disk, it would come out unreadable.
- The public side of the site (this one) stores nothing: it takes your submission and hands it to my internal system, which is not open to the internet.
- Only I get into that internal system, with a personal access that expires and is not shared.
- The consent checkbox stays unticked until you tick it, and every version of its text is numbered.
- There is no personal data in the site's URLs or in the technical logs: only identifiers and dates.
Changes to this policy
If I change anything, I update the date above. The consent text you accepted is recorded with its version number, so it's always clear what you said yes to.