Privacy Policy

Francisco Javier González Torices informs you about his Privacy Policy regarding the processing and protection of the personal data of users and clients that may be collected through browsing or contracting services on the website https://www.javiertorices.com.

The Owner guarantees compliance with current personal data protection legislation, as set out in Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). He also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

Use of the website implies acceptance of this Privacy Policy, as well as the conditions set out in the Legal Notice.

Last updated: 8 September 2026.

Identity of the data controller

Principles applied to data processing

In processing your personal data, the Owner applies the following principles, in line with the requirements of the GDPR:

  • Principle of lawfulness, fairness and transparency: the Owner will always request your consent for the processing of your personal data, for one or more specific purposes about which he will inform you beforehand with complete transparency.
  • Principle of data minimisation: the Owner requests only the data strictly necessary for the purpose or purposes for which it is collected.
  • Principle of storage limitation: the Owner keeps the personal data collected for strictly as long as necessary for the purpose of the processing, and informs you of the applicable retention period for each purpose. In the case of subscriptions, he also reviews the lists periodically and deletes records that remain inactive for a considerable time.
  • Principle of integrity and confidentiality: the personal data collected is processed in such a way that its security, confidentiality and integrity are guaranteed. The Owner takes the necessary precautions to prevent unauthorised access to, or improper use of, his users’ data by third parties.

Collection of personal data

You do not need to provide any personal data in order to browse https://www.javiertorices.com.

You do provide personal data in the following cases:

  • When you write through the contact form.
  • When you request information about a commission through the form on the Commissions page.
  • When you subscribe to the news newsletter.
  • When you send an email directly to the Owner.

Purpose of the processing of personal data

The data requested and the purpose for which it is processed differ depending on the form:

  • Contact form. Your name and email address are requested, both mandatory, and optionally your telephone number and the content of your message. Purpose: to reply to your enquiry — about available work, commissions, exhibitions or press — and to maintain any correspondence arising from it.
  • Commissions form. Your name and email address are requested, both mandatory, and optionally the content of your message. Purpose: to deal with your commission request, inform you about the working process and maintain any correspondence arising from it.
  • Newsletter subscription form. Only your email address is requested. Purpose: to send you the newsletter with the update on available work and the latest from the blog The gaze. Your address is not used for any other communication.

In addition, the Owner processes personal data for the following purposes:

  • To analyse users’ browsing. The Owner collects non-identifying data by means of cookies, whose characteristics and purpose are detailed in the Cookie Policy. This processing only takes place if you accept analytics cookies in the cookie banner.
  • To ensure compliance with the conditions set out in the Legal Notice and with applicable law.

Legal basis for processing

The legal basis for processing your data is your consent, in accordance with Article 6(1)(a) GDPR. You give it by ticking the relevant box on each form and, in the case of analytics cookies, by accepting them in the cookie banner.

Each purpose has its own consent, independent of the others: subscribing to the newsletter is not a condition for writing to the Owner or requesting a commission, and writing to him does not subscribe you to the newsletter.

You may withdraw your consent at any time, without this affecting the lawfulness of processing carried out before its withdrawal. You will find how to do so in the Right of withdrawal section.

Categories of personal data

The categories of personal data processed by the Owner are:

Identifying and contact data: name, email address and, if you choose to provide it, telephone number.
The content of the messages you send through the forms or by email.
Non-identifying browsing data obtained through cookies, if you accept them.

No special categories of personal data are processed.

Retention of personal data

Contact enquiries and commission requests: kept for as long as the correspondence lasts and, once concluded, for the period necessary to address any liabilities arising from it.

Newsletter subscription: your address is kept until you unsubscribe, which you can do at any time using the link included in every issue. The Owner also reviews the lists periodically and deletes records that remain inactive for a considerable time.

Sign-up record: the record of your subscription — date, source and confirmation — is kept for as long as the subscription lasts and for the limitation period of any possible liabilities, as evidence of the consent you gave.

In any event, your data will be kept until you request its erasure.

Data processors

To provide his services, the Owner uses the providers listed below, which access personal data on the Owner’s behalf as data processors. A data processing agreement under Article 28 of Regulation (EU) 2016/679 is in place with each of them, and none of them uses the data for its own purposes.

  • Hosting — Webempresa Europa, S.L. Spanish tax ID B65739856. C/ Almagro 11, 6.º 7.ª 1, 28010 Madrid (Spain). Purpose: hosting of the website, its database and its backups, which entails storing all data collected through the site. The servers are located in the European Union. More information: https://www.webempresa.com/aviso-legal.html
  • Website maintenance and development. The Owner uses an external provider for the development, maintenance, updating and technical support of the website, established in Spain. These tasks involve access to the data held on it — in particular the messages received through the forms and the newsletter sign-up record — solely in order to carry out those tasks on the Owner’s behalf and under his instructions. It does not process the data for any purpose of its own, nor disclose it to third parties. You may request its identity by writing to info@javiertorices.com.
  • Newsletter — Brevo (Sendinblue SAS), with registered office in Paris, France (European Union). Purpose: managing the subscription list, recording the sign-up confirmation by means of double opt-in by email, and sending the news newsletter. The data is hosted on servers located in the European Union. More information: https://www.brevo.com
  • Web analytics — Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Purpose: statistical analysis of browsing through Google Analytics, integrated into the site via Google Site Kit. This processing is only activated if you give your consent in the cookie banner; until you do, Google’s consent mode keeps analytics storage disabled and no measurement cookie is placed on your device. You can withdraw your consent at any time from the Cookie Policy. The service may involve international transfers of data to the United States, covered by Google LLC’s certification under the EU-U.S. Data Privacy Framework and, additionally, by the standard contractual clauses approved by the European Commission. More information: https://policies.google.com/privacy

Apart from these processors, the Owner does not disclose personal data to third parties, except where required by law.

Security of personal data

To protect your personal data, the Owner takes all reasonable precautions and follows industry best practice to prevent its loss, misuse, improper access, disclosure, alteration or destruction.

The website is hosted by Webempresa Europa, S.L. (Spanish tax ID B65739856), registered at C/ Almagro 11, 6.º 7.ª 1, 28010 Madrid (Spain), which provides the hosting service as a data processor, on servers located in the European Union. The service is contracted directly by the Owner. You can consult its terms and privacy policy at https://www.webempresa.com/aviso-legal.html

Communication between your browser and the website takes place over an encrypted channel using an SSL certificate.

Web browsing

  • When you browse https://www.javiertorices.com, non-identifying data may be collected, which may include your IP address, geolocation, a record of how the services and site are used, browsing habits and other data that cannot be used to identify you.

The website uses Google Analytics as a third-party analytics service, provided you have accepted analytics cookies. The Owner uses the information obtained to compile statistics, analyse trends, administer the site and study browsing patterns.

Content from other websites

Some pages on this website include videos hosted on external services, embedded through their respective players:

  • Vimeo (Vimeo.com, Inc., United States), on the home page and on the Commissions and Trajectory pages.
  • YouTube (Google Ireland Limited, Ireland), in the posts of the blog The gaze.

Embedded content from other sites behaves in exactly the same way as if you had visited that other website: it may collect data about you — including your IP address — and monitor your interaction with that content.

The two services are treated differently:

  • YouTube videos are not loaded until you accept the corresponding cookies in the banner. Until you do, you will see a notice in their place and no connection is established with YouTube. Once you accept, they are loaded through the cookie-free domain youtube-nocookie.com.
  • Vimeo videos do load when you open the page, as they form part of the site’s design, so Vimeo receives your IP address and your browser’s technical data even if you do not play the video. The player is configured in “Do Not Track” mode: it does not place tracking cookies on your device and does not record data about your viewing session. Only cookies strictly necessary for its operation and security may be used.

You can consult Vimeo’s privacy policy at https://vimeo.com/privacy and Google’s, which applies to YouTube, at https://policies.google.com/privacy

Cookie Policy

For this website to work properly it needs to use cookies, which are small pieces of information stored in your browser.

On the Cookie Policy page you can consult all the information about their collection, purpose and processing, and change or withdraw at any time the consent you have given.

Your rights

The Owner informs you that, in relation to your personal data, you have the right to:

  • Request access to the data stored.
  • Request its rectification where it is inaccurate or incomplete.
  • Request its erasure.
  • Request the restriction of its processing.
  • Object to the processing.
    Request the portability of your data, that is, to receive it in a structured, commonly used and machine-readable format, or to have it transmitted to another controller.

Withdraw the consent you have given at any time, without this affecting the lawfulness of processing carried out before its withdrawal.

These rights are personal and must be exercised directly by the data subject. Any client, subscriber or collaborator who has provided their data at any time may contact Francisco Javier González Torices and request information about the data he holds and how he obtained it, request its rectification, object to the processing, restrict its use or request its erasure.

To exercise any of these rights, simply send an email to info@javiertorices.com stating which right you wish to exercise. The Owner will reply within a maximum of one month. Additional information will only be requested to verify your identity where there are reasonable doubts as to who is making the request, and always limited to what is strictly necessary.

You have the right to an effective judicial remedy and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency (www.aepd.es), if you consider that the processing of personal data concerning you infringes the Regulation.

Right of withdrawal

The consent you give for the processing of your data may be withdrawn at any time, without retroactive effect and without any need to justify your decision.

To unsubscribe from the newsletter, you can use the unsubscribe link included in every issue or write to info@javiertorices.com.

To withdraw your consent for analytics cookies, you can change your preferences at any time from the Cookie Policy.

To withdraw any other consent, or to exercise your other rights, write to info@javiertorices.com.

The exercise of these rights does not extend to any data the Owner is required to retain for administrative, legal or security purposes.

Accuracy and truthfulness of personal data

You undertake that the data you provide to the Owner is correct, complete, accurate and current, and to keep it duly updated.

As a user of the website, you are solely responsible for the truthfulness and accuracy of the data you submit, and you release Francisco Javier González Torices from any liability in this regard.

Acceptance and consent

As a user of the website, you declare that you have been informed of the conditions on the protection of personal data, and you accept and consent to its processing by Francisco Javier González Torices in the manner and for the purposes set out in this Privacy Policy.

Changes to the Privacy Policy

The Owner reserves the right to amend this Privacy Policy in order to adapt it to legislative or case-law developments, as well as to industry practice.

These policies will remain in force until they are amended by others duly published.

This is a translation for information purposes. In case of any discrepancy, the Spanish version of this text shall prevail.