Privacy Policy

Last updated: October 2026

1. Data Controller

Oliver Schoepe, trading as FRAMEONE MEDIA DESIGN
c/ Moscareta 7, 28011 Madrid, Spain
NIF: X6110622M
Email: oliver@frameone.es

This privacy policy applies to the website frameone.es and describes how personal data is collected, used, and stored in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish law.

2. Data I Collect

Contact Form

When you use the contact form, I collect your name, email address, and any message content you submit. This data is used solely to respond to your enquiry and is not shared with third parties.

Legal basis: Article 6(1)(b) GDPR, processing necessary to respond to a pre-contractual enquiry, or Article 6(1)(f), legitimate interest in responding to business enquiries.

Analytics (Google Analytics)

With your consent, I use Google Analytics 4 (GA4) to collect anonymised data about how visitors use this website: including pages visited, time on site, and browser/device type. No personally identifiable information is collected through analytics. IP addresses are anonymised before processing.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Legal basis: Article 6(1)(a) GDPR, your explicit consent via the cookie banner.

Analytics cookies are only set if you click "Accept" in the cookie banner. You can withdraw your consent at any time. See the Cookie Policy for instructions.

AI assistant (chat)

On this website you can ask questions to an AI-based assistant. It only connects once you send a message.

Data processed: your chat messages, the assistant's answers, the address of the page you use the chat on, the language and a random conversation ID. Your IP address is only used as an encrypted, non-reversible value (hash) to limit the number of requests per hour and per day; it is not stored in the conversation log.
Recipient: to answer, your messages and the content of this website are sent to Anthropic PBC (USA), see section 4.
Purpose and legal basis: answering your questions about my services, Article 6(1)(b) GDPR (pre-contractual enquiry) and Article 6(1)(f) GDPR (legitimate interest in answering enquiries promptly). Storing the conversations serves quality control of the answers and improving the website content, Article 6(1)(f) GDPR.
In your browser: the conversation is kept in your browser's session storage (sessionStorage) so it survives moving between pages. It is deleted when you close the tab and is technically necessary for the chat you requested.

Handover to me: if you fill in the short form in the chat and give your consent, I receive your name, your email address and the conversation by email. Nothing is added to a newsletter or marketing list. The legal basis is your consent, Article 6(1)(a) GDPR, which you can withdraw at any time by writing to me.

Notes: the answers are generated automatically by an AI model and can contain mistakes. They are not binding. Please don't enter sensitive data in the chat (for example health data, bank details or passwords).

3. How Long I Retain Your Data

Contact form submissions are retained for up to 24 months from the date of receipt and then securely deleted, unless an ongoing business relationship requires longer retention.

Analytics data is retained according to Google's standard retention period (14 months by default in GA4).

Chat assistant conversation logs are stored on my server without IP addresses and deleted automatically after six months at the latest. Handovers from the chat are kept like contact form submissions.

4. Data Sharing

I do not sell, trade, or share your personal data with third parties for marketing purposes. Data may be processed by:

  • Google Analytics: analytics processing (consent-based)
  • Email provider (all-inkl.com): to receive and reply to contact form submissions
  • Anthropic PBC, 548 Market St PMB 90375, San Francisco, CA 94104, USA: answering questions in the AI assistant (your chat messages and the page visited). Transfer to the USA on the basis of standard contractual clauses, Article 46(2)(c) GDPR. Privacy: anthropic.com/legal/privacy

These service providers are bound by data processing agreements and applicable EU data protection law.

5. Your Rights

Under the GDPR, you have the right to:

  • Access: request a copy of the personal data I hold about you
  • Rectification: request correction of inaccurate data
  • Erasure: request deletion of your personal data
  • Restriction: request that I limit how your data is used
  • Portability: receive your data in a structured, machine-readable format
  • Objection: object to processing based on legitimate interest
  • Withdrawal of consent: withdraw any previously given consent at any time

To exercise any of these rights, contact me at oliver@frameone.es. I will respond within 30 days.

6. Right to Lodge a Complaint

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Spanish data protection authority:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es

7. Security

I take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. The website is served over HTTPS (TLS encryption).

8. Changes to This Policy

This privacy policy may be updated from time to time. The current version is always available at frameone.es/privacy-policy/. Significant changes will be communicated where practicable.