Last updated: 12 November 2026.
This policy explains which personal data are processed when you visit oriolrius.me and why. The short answer: this website does not use cookies, has no analytics, advertising or tracking tools, and does not load third-party content. We only process the data essential for the website to operate securely and to respond to the messages you send us.
Data controller
- Owner: Young Minds Big Ideas, S.L.
- CIF: B70939160
- Address: Carrer del Bosc, 60, 08775 Torrelavit (Barcelona), Spain
- Email address for privacy matters: gdpr@ymbi.eu
No cookies or tracking
This website does not install cookies, either its own or those of third parties. We do not use web analytics, tracking pixels, advertising, profiles or browser fingerprints. Fonts, images and videos are served from our own server, so your browser does not connect to other services while you visit the website. For this reason, we do not display a cookie notice.
If you choose a language using the CA · ES · EN selector, your browser saves that choice in its local storage (localStorage) to display the website in that language on future visits. This item of data contains no personal information, is not sent to our server and you can delete it through your browser settings.
Which data we process and why
1. Server logs
Like any web server, ours makes a technical record of each request: the IP address, date and time, requested page, referring page and browser identification (user agent). We use these records solely to keep the website secure and operational: to detect errors, prevent abuse and block attacks.
- Legal basis: legitimate interest in the security of the website (Article 6(1)(f) of the GDPR).
- Retention: access logs are deleted after four weeks and error logs after ten weeks. The encrypted backups of our servers may contain them for a maximum of three months.
- Protection against attacks: an automated system (CrowdSec) analyses these logs and blocks IP addresses that carry out attacks or scans. Only in that case are the IP address and type of attack shared with CrowdSec SAS (France), which maintains a shared list of malicious addresses.
2. Home page language
When you visit the main address (oriolrius.me) without having chosen a language, our server compares your IP address with a geolocation database hosted on our own servers to suggest Catalan, Spanish or English. The IP address is not sent to third parties. The result is stored only in the server's memory for a maximum of 24 hours and is not used for any other purpose. The legal basis is our legitimate interest in displaying the website in an appropriate language for you; you can change the language at any time.
3. Contact form
If you write to us using the contact form, we process the data you provide: first name and surname(s), email address, telephone number (optional), company or project and the content of your message.
- Purpose: to respond to your request and, if you ask us to, prepare a proposal.
- Legal basis: your consent, which you give by ticking the box on the form (Article 6(1)(a) of the GDPR), and taking steps prior to entering into a contract at your request (Article 6(1)(b) of the GDPR).
- How it is processed: the website does not store the message. It sends it by email to our mailbox, on a mail server that we manage ourselves. To prevent abusive submissions, the web server remembers for ten minutes, only in memory, how many messages have been sent from each IP address.
- Retention: we delete the message when your request has been answered and closed. If a professional relationship begins, we retain the necessary data for the duration of that relationship and for the periods required by law.
4. Former mailing list
The oriolrius.me mailing list has been closed: it no longer accepts new subscriptions and no new campaigns are sent. Until the list is deleted, we retain the data that subscribers provided or that were generated during their subscription: name, email address, subscription date, IP address, country and referring page for the subscription, and the history of opens and clicks for campaigns sent. We no longer record new opens. Links in old emails continue to work and pass through our mail server before taking you to their destination.
- Legal basis: the consent you gave when you subscribed (Article 6(1)(a) of the GDPR).
- Unsubscribing: you can unsubscribe at any time using the link in any email from the list or by writing to gdpr@ymbi.eu.
- Retention: until the list is deleted or until you unsubscribe or request the erasure of your data.
Recipients and location of the data
We do not sell or disclose your data to third parties, except where required by law or in the case of CrowdSec described above. The website, email and backups run on servers that we manage ourselves. The infrastructure providers that host them act as data processors and are located in the European Union: OVHcloud (France) for the website, IONOS (Spain) for email and Hetzner (Germany) for an encrypted backup. We do not make international data transfers outside the European Economic Area.
Links to other sites
The website contains links to external services, such as YouTube, LinkedIn, the oriolrius.cat blog or the calendar for booking meetings. If you follow them, the terms and privacy policy of each of those services apply.
Your rights
You can request access to your data, their rectification or erasure, restriction of or objection to their processing and their portability, and withdraw any consent you have given at any time, without affecting the lawfulness of previous processing. To exercise these rights, write to gdpr@ymbi.eu. If you consider that we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).
Changes to this policy
If the way we process data changes, we will update this page and indicate the date of the last update at the beginning.