Privacy

Aymen Benali, strategy consultant, a sole trader based in Spain. I use this data for my own work only, and I am responsible for it. To reach me: contact@aymenbenali.com, or by post at Calle Doctor Juan José Dómine 6, pl. 2, pta. 10, 46011 València, Spain. My full details are in the legal notice.

I prospect by post, writing to business leaders whose role relates to what I offer. I keep your name, your role, your company’s name and address, and my notes on your company, drawn from what it publishes.

I find this information in public sources: LinkedIn, your company’s website, the press, company registers and job postings. Each letter says where it comes from.

I rely on my legitimate interest in making my work known (Article 6(1)(f) GDPR). I only email you if you have written to me, if you are a client, or if you have agreed to it. I decide myself who I write to, and no decision about you is made by a machine.

I keep your message and contact details to reply to you and follow up on our exchanges.

I keep your team’s contact details, our exchanges, the documents you entrust to me and my invoices, to carry out the engagement and invoice it. I also keep what the law requires me to keep for my accounts.

I keep your first name, last name and files, for the engagement they relate to.

I keep a record of my professional contacts, with your contact details, the history of our exchanges and a few notes, so I know where we stand.

Lovable, which hosts the site, counts visits: page views, where visitors come from, country and device type. This measures overall traffic, without following people from one visit to the next or building profiles.

The site’s fonts are loaded from Google’s servers, which receive your browser’s IP address. The site sets no advertising cookies.

Only me. I don’t sell or lend any data. My technical providers process it on my behalf, under a data processing agreement, without using it for themselves:

• Google, for my email;
• Anthropic (Claude), to help me research and write;
• Supabase, which hosts my contact book in the United Kingdom;
• Hostinger, which hosts my applications and the document portal in France;
• Lovable, which hosts this site.

My accountant receives my invoices. I disclose nothing to any authority unless the law requires it.

Google and Anthropic are US companies, so your data may pass through the United States. These transfers rely on the EU-US Data Privacy Framework when the provider has joined it, and otherwise on the European Commission’s standard contractual clauses.

The United Kingdom, where my contact book is hosted, benefits from an adequacy decision of the European Union.

• Prospects: three years after our last exchange, then I delete everything.
• Clients: for the length of the engagement, then three years to stay in touch. Invoices and accounting records are kept for six years, as Spanish law requires.
• Uploaded documents: deleted at the end of the engagement.
• If you ask me to stop writing to you, I keep only your name, your company and your email address on an objection list, so that I never write to you again.

You can find out what I keep about you, have it corrected or deleted, limit its use, and get back what you gave me yourself. Above all, you can object at any time to my writing to you, without giving a reason.

One line to contact@aymenbenali.com is enough, and I reply within a month. I only ask for proof of identity if I have serious doubts about who you are.

If my answer doesn’t satisfy you, you can complain to the Spanish Data Protection Agency (aepd.es), since I am based in Spain, or to the authority in your own country.

My tools are protected by personal access, and I keep only what I need. If a data breach creates a risk, I report it to the Spanish Data Protection Agency within 72 hours, and I tell you if the risk is high.