Privacy policy
Last updated: 16 October 2026
This is a translation of the Spanish privacy policy. If there is any discrepancy, the Spanish version prevails.
Here I explain what data of yours I process, what for, who I share it with and what rights you have. No hidden small print.
1. Who is the controller
- Controller: Raúl Burgos Carrasco
- Email: consultor.seo@raulburgos.com
- Website: raulburgos.com
For anything about your data, write to me at consultor.seo@raulburgos.com.
2. What data I process
If you ask for your gap map (the «Contacto - Mapa de Huecos» form):
- Your contact details: first name, surname, email and phone number.
- Details of your business: your website, the name of your Google Maps listing, what you do, your town or city, the service you want to grow and your competitors’ websites.
- If you tick the commercial communications box, the fact that you accepted and when.
To carry out the analysis I also use public information about your business and the competitors you give me: their website, their Google listing (reviews, category, opening hours…), their website’s speed and what artificial intelligence assistants answer when asked about your sector in your area.
If I contact you without you having written to me first (prospecting), I process the public details of your business shown on Google Maps and on your website. See section 8.
3. What I use it for and on what legal basis
| What for | Legal basis |
|---|---|
| Preparing your gap map, reviewing it and sending it to you by email | Your request: it’s what you ask me for (art. 6.1.b GDPR) and you accept it by ticking the privacy box |
| Contacting you by email or phone about your report and answering your questions | Your request (art. 6.1.b GDPR) |
| Assessing internally how promising your request is, to prioritise who I reply to first | My legitimate interest in organising my work (art. 6.1.f GDPR). It has no effect on you: I review every report myself |
| Sending you tips and commercial proposals by email | Your consent, only if you tick the commercial communications box (art. 6.1.a GDPR and art. 21 LSSI). You can withdraw it whenever you like |
| Preventing automated spam through the form | My legitimate interest in protecting the website (art. 6.1.f GDPR) |
Ticking the commercial communications box is optional: you get your gap map whether you tick it or not.
About artificial intelligence: the report is prepared with a tool that combines technical analysis and artificial intelligence, but I review it personally before sending it to you. I don’t make any decision about you based solely on automated processing.
4. How long I keep it
- Your request and your report: while we’re in contact and, after that, for a maximum of 24 months from our last contact. Then I delete them.
- Commercial communications: until you unsubscribe. Every commercial email includes a link to do so.
- If you hire me: the data from the business relationship is kept for the periods required by law (for example, tax periods).
- If you ask me to delete it: I delete it sooner, unless a law requires me to keep it.
5. Who I share it with
I don’t sell or hand over your data to anyone. To provide the service I use these providers, who process data on my behalf and under contract:
| Provider | What for | What data | Where |
|---|---|---|---|
| Hostinger | Hosting the website, the form and email | All the form data and the emails | United Kingdom, which the European Commission recognises as having a level of data protection equivalent to the EU’s |
| Brevo | Storing the contacts from the forms and sending you the emails, and the commercial communications if you accept them | Name, email, phone, website and the details you send in the form | European Union |
| OpenAI | Asking artificial intelligence about your sector and your area, and analysing your website’s content | Details of your business (sector, town, service, website). I do not send it your name, email or phone number | USA |
| Google (Places and PageSpeed) | Checking your Google listing and measuring your website’s speed | The name and website of your business and your competitors | USA |
When a provider processes data outside the European Union, it does so with the safeguards required by the GDPR: the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
The analysis and its review are done with my own tool, on equipment I control.
6. Your rights
You can ask me at any time to:
- Access your data.
- Correct it if it’s wrong.
- Delete it.
- Object to me processing it, or ask me to restrict its use.
- Take it with you in a reusable format (portability).
- Withdraw your consent to commercial communications, without affecting what was done before.
Write to me at consultor.seo@raulburgos.com saying which right you want to exercise. I’ll reply within one month at most.
If you believe I haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
7. Security
I keep your data with reasonable measures to prevent unauthorised access: password-protected access, encrypted connections and access limited to me. Reports are not public and are not indexed by search engines.
8. If I contacted you (prospecting)
Sometimes I analyse businesses in a sector and an area to offer them my services. In that case:
- Source of the data: public information about your business on Google Maps and on your own website.
- What for: preparing a diagnosis of your visibility and contacting you to offer it.
- Legal basis: my legitimate interest in making my services known to businesses they may be useful to (art. 6.1.f GDPR). I only keep the data needed.
- How I make contact: by phone, LinkedIn or in person. I don’t send you commercial emails without your permission.
- Your rights: you can object and ask me to delete your data by writing to consultor.seo@raulburgos.com. I do it, no questions asked.
- Period: if you’re not interested, I delete the data within 24 months at most.
9. Changes to this policy
If I change anything important, I’ll update it here with its date. If it affects something you accepted, I’ll let you know.