1. Data controller
The controller responsible for processing personal data on this website within the meaning of Art. 4(7) GDPR is:
Webmade Studio
Email: info@webmade.site
Phone / WhatsApp: +34 641 071 410 (WhatsApp)
For all questions about data protection, you can reach us at any time at info@webmade.site. Company and registration details are available on request at the same address.
2. Overview and legal bases
We process personal data only to the extent necessary to provide a functional website, answer enquiries and deliver our services. Depending on the purpose, processing is based on:
- Art. 6(1)(a) GDPR — your consent (e.g. optional analytics cookies). You can withdraw consent at any time with effect for the future.
- Art. 6(1)(b) GDPR — performance of a contract or pre-contractual steps (e.g. your project request, proposals, project work).
- Art. 6(1)(c) GDPR — legal obligations (e.g. commercial and tax record-keeping).
- Art. 6(1)(f) GDPR — our legitimate interests in operating a secure, stable website and in communicating with interested parties.
3. Hosting, server logs and security
This website is hosted by Hostinger International Ltd. (Cyprus), which acts as our processor under a data processing agreement (Art. 28 GDPR). Our email (info@webmade.site) is also provided by Hostinger.
When you visit the site, the server automatically records technical data in log files: IP address, date and time of access, requested page, referrer URL, browser type and operating system. This is required to deliver the website, ensure its stability and detect attacks (Art. 6(1)(f) GDPR). Log data is stored only for a limited period and then deleted, unless it is needed to investigate a specific security incident.
To protect the site against bots and abuse, the hosting platform may show a short browser check before the page loads and set a technically necessary cookie for this purpose. We also use server-side caching (LiteSpeed Cache), which does not create user profiles.
4. Contact form, email and WhatsApp
Contact form. When you send a request via our form, we process the data you enter (name, phone number, email address, Telegram/WhatsApp contact and your message) in order to answer your enquiry and prepare a proposal (Art. 6(1)(b) and (f) GDPR). The form is provided by the WordPress plugin Contact Form 7; the submission is delivered to our mailbox by email and is not stored in a separate website database.
Email. If you write to info@webmade.site, we process your email address, the content of your message and any data you provide, for the same purposes.
WhatsApp. If you contact us via WhatsApp (+34 641 071 410), the messenger is operated by WhatsApp Ireland Limited / Meta Platforms. WhatsApp processes your phone number, profile data and metadata under its own privacy policy; data may be transferred to the USA (see section 9). Please do not send sensitive information via WhatsApp — use email if you prefer.
We delete enquiry data once your request has been fully handled and no further communication is expected, unless the enquiry leads to a contract or statutory retention obligations apply.
6. Google Site Kit and analytics
We use the WordPress plugin Site Kit by Google to connect our website with Google services such as Google Search Console, which helps us understand how the site appears in Google search. Search Console works with aggregated search data and does not place cookies on your device.
If we activate Google Analytics 4, it will run only after your consent. Google Analytics uses cookies to analyse how visitors use the website (e.g. pages viewed, device type, approximate location); IP addresses are not stored. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA (see section 9). Legal basis: Art. 6(1)(a) GDPR.
7. Newsletter and email marketing tools
Our website includes the Hostinger Reach plugin, which can provide newsletter sign-up forms. If you subscribe to a newsletter, we process your email address to send it, based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email. If no sign-up form is offered on the site, no data is collected through this tool. The script is loaded from Hostinger's servers.
9. Recipients and international transfers
Within our team, only people who need the data to handle your request have access. External recipients are our processors and service providers: Hostinger (hosting and email), Google (Site Kit / Search Console and, with consent, Analytics) and Meta/WhatsApp (if you choose to contact us there).
Some of these providers may process data outside the EU/EEA, in particular in the USA. Transfers take place on the basis of an adequacy decision (EU–U.S. Data Privacy Framework, for certified companies) or the EU Standard Contractual Clauses (Art. 46 GDPR).
10. Client projects and AI services
When we build websites, applications, automations or AI agents for clients, we may process personal data on the client's behalf (for example, CRM records or chat messages handled by an AI agent). In such cases the client is the controller and we act as a processor under a separate data processing agreement. AI models and third-party APIs are selected and configured in agreement with the client, and personal data is not used to train public models without the client's explicit instruction.
11. Retention periods
We store personal data only as long as necessary for the purposes described above. Enquiry data is deleted after the request has been handled; contract and invoice data is kept for the periods required by commercial and tax law; consent-based data is deleted when you withdraw your consent, unless another legal basis applies.
12. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17) and restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interests (Art. 21);
- withdraw your consent at any time with effect for the future (Art. 7(3)).
To exercise your rights, simply write to info@webmade.site. You also have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence or of our establishment, in particular in the EU member state of your residence, place of work or the place of the alleged infringement.
13. Security
The website is delivered exclusively via encrypted HTTPS (TLS). We use technical and organisational measures — access control, updates, backups and monitoring — to protect personal data against loss, misuse and unauthorised access.
14. Changes to this policy
We may update this privacy policy when our services or legal requirements change. The current version is always available on this page.
8. Social media, fonts and images
Our website contains plain links to our profiles on Instagram and Facebook (Meta Platforms Ireland Limited). No social media plugins are embedded: data is only transferred to Meta when you click a link and visit the platform, where Meta's privacy policy applies.
Fonts and images used in the design are hosted on our own server. No connection to external font services is made by our pages for this purpose.