Privacy Policy

01Who is responsible for your data

This policy explains how personal data is handled on robertriera.com/en, the personal website of Robert Riera, a digital marketer based in Colombia. I am the person responsible for your data (in Colombian law, the responsable del tratamiento).

This policy is written to comply with Colombia’s Law 1581 of 2012 and its regulations (Decree 1377 of 2013, now part of Decree 1074 of 2015). If you live elsewhere, section 10 explains how I handle the rights your local law may give you.

02What data I collect

Data you give me

When you use the contact form, I receive:

• Required: your full name, email address, the reason you are reaching out and your message.
• Optional: your WhatsApp or phone number and your company or website.
• Your consent: confirmation that you accepted this policy before sending the form.

If you contact me by email, WhatsApp or LinkedIn instead, I receive whatever you choose to share in that conversation.

Data collected automatically

• Technical data: your IP address, browser, device type and the pages you request. The hosting, security and network providers listed in section 5 process this data to deliver the site and protect it from attacks and spam.
• Usage statistics: if analytics is enabled, aggregated information about how visitors use the site (see section 7).

Downloading my CV does not require any personal data.

03How I use your data

I use your data only to:

• Reply to your message and continue the conversation you started.
• Evaluate and discuss the role, project or collaboration you propose.
• Prepare proposals, agreements and invoices if we decide to work together.
• Keep the website secure and prevent spam and abuse.
• Understand, in aggregate, how the site is used so I can improve it.

I do not sell, rent or trade your data. I will not add you to a newsletter or send you marketing emails unless you ask for it.

04Legal basis and your authorization

I process the data you send through the form based on your prior, express and informed authorization, which you give by checking the consent box before sending it. The form cannot be sent without that consent. The email I receive with your submission is the record of your authorization.

The technical data used to protect the site is processed because it is necessary to operate a secure website. You can withdraw your authorization at any time (see section 11). Withdrawing it does not affect anything done before you withdrew it.

05Who else processes your data

I rely on a small number of trusted providers to run this website. They process data on my behalf and only for the purposes described here.

Form messages are delivered to my email inboxes. They are not stored in the website’s database.

06International transfers

Some of the providers above store or process data on servers outside Colombia, for example in the United States or the European Union. When you send me your data, you authorize this transfer. I only work with established providers that apply recognized security and privacy standards.

07Cookies and analytics

This site does not use advertising cookies or tracking pixels. The cookies that may be set are:

• Security cookies: short-lived cookies set by Cloudflare or the site firewall to tell real visitors apart from bots.
• Analytics cookies: if analytics is enabled, Google Analytics 4 sets cookies (such as _ga) to count visits and measure, in aggregate, how pages are used and whether the contact form was sent. I do not use this data to identify you.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with the official browser add-on. The site keeps working without cookies.

08How long I keep your data

• Inquiries: for as long as needed to handle your request, and up to 2 years after our last contact so I can follow up on the conversation if needed.
• If we work together: for the duration of the relationship and afterwards for as long as tax, accounting or legal obligations require.
• Security logs: for the limited periods defined by each provider.

When data is no longer needed, I delete it. The database that holds this data remains in place for as long as this website operates.

09How I protect your data

I apply reasonable technical and organizational measures, including:

• Encrypted connections (HTTPS) across the entire site.
• A website firewall, spam protection and regular software updates.
• Authenticated, encrypted email delivery.
• Access to your messages limited to me.

No method of transmission over the internet is 100% secure, but I work to protect your data and will act promptly if an incident occurs.

10Your rights

Under Law 1581 of 2012 you have the right to:

• Know, update and correct your personal data.
• Request proof of the authorization you gave me.
• Be informed, on request, of how your data has been used.
• Withdraw your authorization and ask me to delete your data, as long as no legal or contractual duty requires me to keep it.
• Access your data free of charge.
• File a complaint with the Superintendence of Industry and Commerce (SIC), Colombia’s data protection authority, after first contacting me.

If you live in the European Union, the United Kingdom or a U.S. state with its own privacy law, you may have similar or additional rights, such as data portability or objecting to certain uses. Write to me and I will respond in line with the law that applies to you.

11How to exercise your rights

Email [email protected] with the subject “Data request”. Include your name, the email or phone you used to contact me, and what you would like me to do. I may ask for information to confirm your identity before acting.

• Questions about your data (in Colombian law, consultas) are answered within 10 business days. If more time is needed, I will tell you why, and the answer will come within 5 additional business days.
• Requests to correct, update or delete data, or to withdraw your authorization (reclamos), are answered within 15 business days. If more time is needed, I will tell you why, and the answer will come within 8 additional business days.

12Children and sensitive data

This website is intended for businesses and professionals. It is not directed to anyone under 18, and I do not knowingly collect data from minors. If you believe a minor has sent me personal data, contact me and I will delete it.

I do not ask for sensitive data (such as health, political or religious information). Please do not include it in your messages.

13Links to other websites

This site links to client websites, LinkedIn, WhatsApp and other services. I am not responsible for their privacy practices, so I recommend reading their policies when you visit them.

14Changes to this policy

I may update this policy when the website or the law changes. The date at the top of this page always shows the latest version. If a change significantly affects how I use data you have already shared, I will notify you through the contact details you gave me.

This version is effective from October 15, 2026.

15Contact

Questions about this policy or your data? Write to me and I will be happy to help.