privacy policy

Welcome to my professional portfolio website. Your privacy and the security of your personal data are of the utmost importance to me. This Privacy Policy describes how Heber Martin Rodriguez (hereinafter, the 'Owner' or 'I') collects, uses, processes, and protects the personal information you provide when you visit this website, use the contact forms, or communicate with me regarding potential job opportunities, freelance projects, or collaborations.

This policy has been drafted in strict compliance with current data protection regulations, including the General Data Protection Regulation (GDPR) (EU 2016/679) and applicable national data privacy laws.

By continuing to browse this website or by voluntarily submitting your data through the available contact channels, you acknowledge that you have read, understood, and accepted the practices described in this Privacy Policy.

The person legally responsible for the collection, processing, and management of your personal data collected through this website is the Data Controller:

· Name: Heber Martin Rodriguez Cabrera

· Tax ID Number (DNI): 41711051E

· Address: Palma de Mallorca, Spain

· Contact Email: dev@4hmartin.com

· Main Activity: Full-stack Software Development, Programming, and Independent Tech Consulting.

For any questions, requests, or clarifications regarding this Privacy Policy, how your personal data is handled, or to exercise your data protection rights, you can contact the Data Controller directly via the Contact Email listed above.

This website only collects personal data that is strictly necessary to fulfill its objectives (responding to professional inquiries and ensuring site security). Depending on how you interact with this portfolio, the following types of data may be processed:

data provided voluntarily by the user

When you use the contact form, schedule an interview via an integrated calendar, or send an email directly to the Owner, you may provide:

· Identification Data: First and last name.

· Contact Information: Email address

· Professional Data: Company name, job title, or recruiter agency you represent.

· Message Content: Any details, project briefs, job descriptions, or links (such as your company website or LinkedIn profile) that you choose to include in your message.

data collected automatically

When you browse this portfolio, certain technical information is captured automatically by the hosting servers, security firewalls, or basic analytics plugins to ensure the site runs smoothly and securely. This includes:

· Network Data: Your Internet Protocol (IP) address (which is anonymized where possible).

· Browser & Device Metadata: Device type (mobile, desktop, tablet), operating system, browser version, and language settings.

· Browsing Behavior: Date and time of the visit, the pages or project case studies viewed, time spent on specific sections, and the referring website (the link you clicked to find this portfolio).

This website does not collect, store, or process any sensitive data (such as financial information, social security numbers, or health data).

The personal data collected through this portfolio is processed exclusively for specific, explicit, and legitimate professional purposes. Your data will never be sold, leased, or used for automated profiling or unauthorized mass marketing.

Depending on how you interact with the website, your data is processed for the following reasons:

managing professional and recruitment inquiries

· Answering contact requests: To read, evaluate, and respond to messages, inquiries, and project proposals sent via the contact forms or direct emails.

· Recruitment Processes: To communicate with HR managers, talent sourcers, and potential clients regarding open full-stack developer roles, technical interviews, or freelance opportunities.

· Scheduling and Coordination: To coordinate calendar invites, phone calls, or video interviews if you request a meeting.

technical and operational management

· Website Optimization: To analyze anonymized browsing trends, helping the Owner understand which projects or case studies generate the most interest so the site layout and content can be improved.

· Security and Fraud Prevention: To monitor server logs, validate API requests, block automated spam bots, and defend the infrastructure against potential cyber threats, such as malicious code injection or Denial-of-Service (DoS) attacks.

In compliance with data protection laws (such as Article 6 of the GDPR), the Owner only processes your personal data when there is at least one valid legal ground to do so. The legal bases for processing data on this portfolio are:

consent of the user(ART.6.1.A GDPR)

When you voluntarily submit your information through the contact form, book a meeting on an integrated calendar, or send a direct email, you are giving your explicit, unambiguous consent for the Owner to process that data to answer your request.

· Your Right: You have the right to withdraw this consent at any time by sending an email to the Data Controller.

execution of pre-contractual measures

If you are a recruiter, hiring manager, or potential client reaching out to discuss a job opening, an independent contract, a technical interview, or a freelance project brief, the processing of your contact data is necessary to take steps at your request prior to entering into a formal employment or service contract.

legitimate interest of the data controller

Certain technical data is processed based on the Owner's legitimate interest in maintaining a stable and safe digital workspace. This applies specifically to:

· Server logs, security tracking, and firewall metadata used to protect the portfolio from hacking, spam, and malicious cyber attacks.

· Basic, privacy-friendly analytics used to measure general website performance and improve user experience.

The Owner will only retain your personal data for the minimum period necessary to fulfill the purposes for which it was collected, or to comply with applicable legal, tax, or regulatory obligations.

Specifically, data will be stored according to the following criteria:

· Inquiries and Professional Correspondence: Data provided through contact forms or direct emails will be kept for the duration of our professional exchange. If the communication does not lead to a contractual or employment relationship, the data will be deleted after [e.g., 1 year / 2 years] from the last contact, unless you request its deletion sooner.

· Recruitment and Freelance Negotiations: If our communication involves potential job openings, freelance contracts, or project quotes, the data will be retained for the duration of the hiring process or negotiations. If a contract is signed, the data will be archived under a separate employee or provider privacy framework. If no contract is established, it will be kept for [e.g., 2 years] to facilitate future professional collaborations, unless you object.

· Technical and Server Logs: Data collected automatically for security purposes (such as IP addresses and server access logs) is stored temporarily and automatically overwritten or deleted within a maximum period of [e.g., 30 to 90 days], unless an active security incident requires an ongoing investigation.

· Legal Compliance: In cases where legal, accounting, or tax obligations apply (for example, if a paid consulting session or freelance deposit was processed), the corresponding data will be securely blocked and stored for the statutory periods required by local laws.

Once these periods expire, your personal data will be either permanently erased or fully anonymized so that it can no longer be linked back to you.

The Owner does not sell, trade, rent, or lease your personal data to third parties for marketing or commercial profiling. Your personal data will only be shared with trusted third-party service providers (Data Processors) whose services are strictly required to keep this website secure, online, and functional.

essential technical service providers

To keep this portfolio accessible and manage professional communications, your data may be processed by or transmitted through:

· Web Hosting & Cloud Infrastructure Providers: Where the website files, database, and temporary server logs are stored safely. (e.g., Vercel, Netlify, AWS, or DigitalOcean).

· Security & CDNs (Content Delivery Networks): Services used to optimize page speed, block malicious bot traffic, and prevent DDoS attacks (e.g., Cloudflare).

All third-party providers are strictly bound by data processing agreements that forbid them from using your personal data for any purpose other than executing their technical services for this website.

legal and regulatory obligations

Your personal data may be disclosed to public authorities, courts, or law enforcement agencies only if required by a formal legal obligation, judicial order, or to defend the Owner's legitimate rights against fraudulent or malicious activities.

The Owner is fully committed to protecting your personal information from unauthorized access, alteration, disclosure, loss, or destruction. To ensure a level of security appropriate to the risks of processing data on a modern web portfolio, the following technical and organizational measures have been implemented:

encryption and transport security

· SSL/TLS Encryption: This website utilizes Hypertext Transfer Protocol Secure (HTTPS). All data transmitted between your browser and the web server—including any text or details you type into the contact forms—is encrypted using Secure Sockets Layer/Transport Layer Security (SSL/TLS) protocols. This prevents third parties from intercepting or reading your data in transit.

· Data Integrity: Modern, secure environment variables and API routing are used to process contact form submissions, ensuring that sensitive access keys or destination email routing details are never exposed to the client side.

Infrastructure and access controls

· Access Minimization: Access to the backend hosting platforms, domain registrars, and professional email accounts linked to this portfolio is strictly restricted to the Owner.

· Authentication Security: All administrative accounts associated with the hosting and maintenance of this website are protected by strong, unique passwords and mandatory Multi-Factor Authentication (MFA/2FA).

· Firewall Protection: The portfolio utilizes edge security networks and web application firewalls (WAFs) to monitor incoming traffic, automatically filter out malicious requests, block automated brute-force attempts, and mitigate potential Denial-of-Service (DoS) attacks.

While the Owner employs standard, industry-recognized digital security practices, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. In the unlikely event of a security breach that impacts your personal data, the Owner will notify the affected users and the relevant data protection authorities within the statutory timeframes required by law.

Under data protection regulations (such as the GDPR), you have specific rights that allow you to maintain full control over your personal information. You can exercise any of these rights at any time, completely free of charge.

Specifically, you have the right to:

· Right of Access: You can request a copy of all the personal data the Owner holds about you, along with information on how and why it is being processed.

· Right to Rectification: If you notice that any information I hold about you is inaccurate, outdated, or incomplete (such as a typo in your name or an old email address), you have the right to request an immediate correction.

· Right to Erasure ('Right to be Forgotten'): You can request that your personal data be permanently deleted from my records, provided that the data is no longer necessary for the purpose it was collected, or there is no legal obligation keeping me from removing it.

· Right to Restrict Processing: You can request that I temporarily suspend the processing of your data (for example, while we verify its accuracy or verify a legal dispute).

· Right to Data Portability: You have the right to receive the personal data you provided to me in a structured, commonly used, and machine-readable format (like a JSON or CSV file) or request that it be transferred to another data controller.

· Right to Object: You have the right to object to the processing of your data based on legitimate interests. If you object, I will stop processing that data unless there are compelling, legally overriding reasons to continue.

· Right to Withdraw Consent: Since some processing is based entirely on your explicit consent (such as filling out my contact form), you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before the withdrawal.

how to exercise your rights

To exercise any of these rights, simply send an email to the Data Controller at [Your Professional Email, e.g., privacy@yourdomain.com] with the subject line 'Data Protection Request'.

To protect your privacy and ensure security, I may ask you to provide proof of identity (such as a copy of an official ID or an email sent from the same address used in your original inquiry) before fulfilling your request. All valid requests will be answered within a maximum timeframe of one month from receipt.

Finally, if you believe that your data has been handled incorrectly or that your rights have been violated, you have the right to lodge a formal complaint with your local Data Protection Authority (such as the AEPD in Spain, CNIL in France, or your local national equivalent).

This website uses cookies and similar tracking technologies to analyze web traffic, understand visitor behavior, and improve the user experience of this portfolio.

Tools used on this website

To safely gather performance statistics, this portfolio integrates two essential services provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA):

· Google Tag Manager (GTM): GTM is a tag management system that allows the Owner to deploy and manage scripts, tracking pixels, and code fragments (tags) on the website asynchronously. GTM itself does not set cookies or collect personal data; it simply manages the execution of other operational tags based on your configuration and consent choices.

· Google Analytics 4 (GA4): GA4 is a web analytics service that uses first-party cookies to track general user behavior (e.g., length of visit, project pages viewed, device types). GA4 is configured with IP Anonymization/Truncation enabled by default, meaning your full IP address is anonymized before it is processed or stored on Google's servers, preventing it from being directly linked back to an individual user.

Summary of cookies applied

The data collected via Google Analytics includes the following primary cookies:

Google consent mode v2 and control over cookies

In strict compliance with current privacy standards, this website uses Google Consent Mode v2. This means that no analytics cookies are placed, and no tracking scripts fire, until you actively click 'Accept' on the website's cookie banner.

· If you decline or ignore the banner: Google Tag Manager will block the Google Analytics tag from executing, or fire it in a restricted, cookieless state that does not track your personal identity.

· Managing your browser directly: You can change your mind, revoke consent, or clear cookies at any time through your web browser settings. Most modern browsers allow you to block all third-party cookies or alert you when a cookie is being sent.

The Owner reserves the right to modify, update, or amend this Privacy Policy at any time to adapt it to new legal or regulatory requirements, technical upgrades to the website infrastructure, or changes in the way personal data is handled.

How changes are communicated

Any modifications made to this policy will be published directly on this page. When a change is made, the 'Last updated' date at the very top of this Privacy Policy will be revised accordingly.

User responsibility

Minor updates that do not significantly affect your rights or the way your data is handled may be made without prior notice. Therefore, the Owner recommends that you review this Privacy Policy periodically to stay informed about how your personal information is being protected.

If major structural changes are implemented—such as a shift in the primary purpose of data collection or the integration of payment processing systems—a highly visible notice will be displayed on the portfolio's homepage or landing page before the changes take effect.

Your continued use of this website following the publication of any changes constitutes your full acceptance of the updated Privacy Policy.