Privacy, legal notice and terms.

Who is responsible for your data

Hector Waldman, based in Portugal, is the controller of the personal data collected through hectorwaldmann.site. You can reach me at hector@hectorwaldmann.site about anything on this page.

What is collected, and why

The contact forms ask for your name, your email address and a description of your situation. The form on the services page also offers an optional indication of what kind of client you are and a rough budget range, both of which you can leave blank.

That data is used for exactly one thing: to reply to you and, if it turns out we should work together, to prepare a proposal. The legal basis is Article 6(1)(b) of the GDPR, steps taken at your request before entering into a contract, together with Article 6(1)(f), my legitimate interest in answering someone who writes to me. Nothing you send is used for marketing, sold, or shared with anyone outside the processors listed below.

Separately, the site records aggregated, anonymous visit statistics: which pages are opened, roughly where in the world from, and how quickly pages load. These figures cannot be traced back to you and are not linked to your form submission.

Cookies and local storage

This site sets one cookie, named NEXT_LOCALE, which remembers whether you chose English, Spanish or Portuguese so you are not sent back to your browser's language on every visit. It lasts one year and contains nothing but a two-letter language code.

Your light or dark theme preference is kept in your browser's local storage and never leaves your device.

Both are strictly necessary to provide the functions you asked for, which is why you are not being shown a consent banner. There are no advertising, analytics or third-party tracking cookies on this site to consent to.

Who else processes your data

The site is hosted and its aggregated, cookieless traffic statistics are produced by Vercel Inc. Contact form submissions are received and forwarded by Formspree, and email for the site's domain is handled by Hostinger. Search performance data comes from Google Search Console in aggregated form only.

Vercel, Formspree and Google are established in the United States, so replying to you involves an international transfer. Those transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework and, where applicable, on Standard Contractual Clauses.

How long it is kept

Enquiries that do not lead to work are kept for up to twenty-four months and then deleted, which is long enough for a conversation to be picked back up later. If we do work together, the correspondence is kept for the duration of the engagement and for the periods that Portuguese commercial and tax law require afterwards. Formspree's own submission history on the plan this site uses is limited to thirty days.

Your rights

You can ask me for a copy of the data I hold about you, ask for it to be corrected or deleted, ask me to restrict what I do with it, ask for it in a portable format, or object to my processing it. Write to hector@hectorwaldmann.site and I will answer within a month, usually the same week.

If you believe I have handled your data badly, you are entitled to complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or to the authority in the EU country where you live.

What does not happen

No automated decision-making and no profiling take place. Nothing you submit is used to train a model. There is no newsletter and no mailing list, so writing to me does not subscribe you to anything.

Prices and timelines are starting points

Every figure published on this site is a starting price, marked as such, and every timeline is a typical range. Neither is a binding offer under Article 232 of the Portuguese Civil Code. What binds either of us is the written proposal and contract signed for a specific project, which sets out the actual scope, the actual price and what happens when either changes.

Writing to me does not create a relationship

Sending a form, an email or a message does not by itself create a professional relationship, a duty of confidentiality or any obligation on my part to take the work. Please do not send trade secrets, credentials or anything genuinely sensitive in a first message. If you need confidentiality before we talk, say so and we will sign an NDA first.

Content and intellectual property

The text, layout, code and images on this site are mine, except for third-party names, logos and product screenshots, which belong to their respective owners and appear here to describe work I did. You are welcome to quote or link to this site with attribution; wholesale copying of the copy or the design is not permitted.

Links to other sites are offered for reference and imply no endorsement or responsibility for their content.

No warranty on the information

This site is informational. It is kept accurate and current to the best of my ability, but nothing on it is professional advice for your particular situation, and no result described here is a promise of the same result for you.