Privacy notice

Controller and contact

The controller is David Rivas González. Privacy requests may be sent to drivas@horizonpuzzle.com.

Data collected and source

The required form data is your name, professional email and role description or message. Optional data is company, proposed role, engagement model proposed by you, remote-location expectations, compensation or budget, technical context and a related link.

If you voluntarily send a PDF or DOCX role description by email, its contents and associated email metadata are also processed. Please do not provide sensitive or confidential information that is not needed to assess the opportunity.

When the form is submitted, technical data needed for anti-abuse verification, such as a security verification token and the network address available in the request, may be processed.

Data is obtained directly from you when you submit the form or send an email.

Purposes and lawful bases

Contact details and opportunity information are processed to evaluate and respond to professional opportunities and maintain related correspondence, based on your consent.

Technical anti-abuse checks are performed to prevent spam and protect the website, based on the legitimate interest in maintaining a secure contact channel.

Aggregate audience measurement is used to understand general website usage without custom conversion events currently configured, based on the legitimate interest in maintaining this professional portfolio.

If an engagement progresses, necessary data may subsequently be processed for pre-contractual steps, performance of an agreement and applicable legal obligations.

Required and optional information

Name, professional email, message and acknowledgement of this notice are required to use the web form. Without them the request cannot be sent or answered through this channel.

All other form fields are optional. Documents are not uploaded through this website; sending a role description by email is voluntary.

Providers and international transfers

Form submissions are routed through Formspree and received using Gmail/Google. Direct messages sent to the branded contact address are forwarded through Name.com and received using Gmail/Google. Cloudflare Turnstile helps prevent spam and abuse. Vercel hosts the site and provides aggregate web analytics without custom conversion events currently configured.

These providers may process data outside the European Economic Area, including in the United States, under the international-transfer safeguards applicable to their services. Review their current privacy information for the mechanisms applicable to each service.

Retention

Messages and any documents voluntarily emailed for opportunities that do not progress are retained for up to 12 months to manage follow-up contact, unless deletion is requested sooner.

If an engagement progresses, relevant information may be retained for the duration of the relationship and any period required to address legal or contractual obligations. Service providers may retain technical records under their applicable policies.

Your rights and complaints

You may request access, rectification, deletion, restriction, objection or portability where applicable, and may withdraw consent at any time without affecting processing already carried out. Send requests to drivas@horizonpuzzle.com.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Automated decisions

No automated decision-making or profiling is used to select or assess professional opportunities submitted through the contact form.