Privacy Policy

Last updated: July 2026

This policy explains which personal data enlolab.com processes and for what purpose. It describes only what the site does today.

Data controller

• Name: Juan Carlos de la Encina López
• Tax ID (NIF): 70354405G
• Address: Calle San Blas 1, 45510 Fuensalida (Toledo), Spain
• Contact address, and the address for exercising your rights: info@enlolab.com

The controller is a self-employed individual, not a company, so there are no commercial registry details to publish.

No Data Protection Officer has been appointed: this site’s processing meets none of the conditions that make the appointment mandatory under Article 37 GDPR — it involves no large-scale monitoring and no special categories of data.

Data we process

“Start a project” form

This is the site’s only form. When you submit it you provide:

The form includes a mandatory checkbox (“I agree to be contacted about my enquiry”), so without your explicit acceptance the submission does not go through. The “Project details” field is free text: we recommend not including data that is not needed to assess your enquiry, and never special categories of data.

Purpose: to read your enquiry, reply to you and, where applicable, assess a possible collaboration.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you give by ticking the mandatory box before sending the form, and which you can withdraw at any time. If your enquiry leads to an engagement, the processing that follows is based on the steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

What happens to your submission. It is sent to Saastro (submit.saastro.io), the platform that runs this form, which notifies us by email at info@enlolab.com. It is also stored: Saastro keeps a copy of every submission in its database, containing the fields you filled in above, the user agent of your browser and a hash of your IP address — a one-way fingerprint used to prevent abuse and duplicate sends, from which your IP address cannot be recovered. This form has no file-upload field, so no attachments are stored.

Protection against automated abuse. The form is protected by Cloudflare Turnstile, a captcha that loads from challenges.cloudflare.com when the form is displayed and receives your IP address and the technical data inherent to the request. It is used solely to tell human visitors from bots, and it validates you with a one-time token rather than by identifying you. Our legal basis for it is our legitimate interest in keeping the form from being abused (Art. 6(1)(f) GDPR).

How long we keep it. We keep your submission for as long as it is needed to deal with your enquiry and any relationship that follows from it. We would rather be straight with you than quote a tidy number: there is no automatic deletion today, so a stored submission stays in the database until it is deleted by hand. We are not going to promise you a retention period we do not actually enforce. You can ask us to erase your submission at any time by writing to info@enlolab.com, and we will do it.

Connection data

In order to serve you the pages, the infrastructure hosting the site processes technical request data (IP address, user agent, date and time). These logs are used to keep the site running, available and secure, not to profile visitors — our legal basis for them is our legitimate interest in doing so (Art. 6(1)(f) GDPR).

We do not hold these logs ourselves and we do not set a retention period for them: they stay with Cloudflare, which keeps them for whatever period its own policy applies.

Analytics

The site currently performs no audience measurement. Google Analytics, Google Tag Manager and Cloudflare Web Analytics are integrated but unconfigured, so no analytics script is loaded and no browsing profile is built. See the Cookie Policy.

Recipients

• Cloudflare — wears three hats here. It hosts and delivers the site, and processes the requests described above. It provides the Turnstile captcha that protects the form. And it runs the routing for info@enlolab.com: mail sent to that address is received by Cloudflare Email Routing and forwarded on to our mailbox.
• Google — hosts the mailbox that info@enlolab.com is ultimately delivered to (Google Workspace), and therefore processes the correspondence we receive from you. Google also serves the site’s typefaces, in a different role described just below.
• Saastro (submit.saastro.io) — receives and processes form submissions, delivers them to the destination inbox and stores a copy of each one (see “What happens to your submission” above).
• Google Fonts (fonts.googleapis.com and fonts.gstatic.com) — the site serves its typefaces from Google’s network and, by the owner’s decision, does not self-host them. When any page loads, your browser requests them from Google’s servers, which discloses your IP address to Google (along with the user agent and the page requesting them), automatically and before you interact with the cookie banner. Its only purpose is to download and render the site’s typeface: it sets no cookies and is not used to measure you. Google processes that data under its Privacy Policy. See the Cookie Policy.

Cloudflare, Google and Saastro process this data on our behalf as processors, except for the loading of the typefaces: there, as explained above, Google receives your IP address directly from your browser and processes it under its own privacy policy, not on our behalf.

International transfers

Cloudflare and Google are both established in the United States, so the processing described above involves transferring personal data outside the European Economic Area.

Both are certified under the EU-U.S. Data Privacy Framework, the arrangement the European Commission recognised as providing an adequate level of protection in its adequacy decision of July 2023. Transfers to them are covered by that decision, which means no additional safeguard is required for them.

We do not sell or share your data with third parties for commercial purposes.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand.

To exercise them, just write to info@enlolab.com. There is no special procedure and no form to fill in: a plain email is enough, and we will not ask you for a copy of your ID. We may ask you for further detail only if we cannot work out which data is yours.

You also have the right to lodge a complaint with a supervisory authority. In Spain that is the Agencia Española de Protección de Datos (AEPD), www.aepd.es.

Changes to this policy

If the processing activities or the services the site uses change, we will update this page and its last-updated date.