Privacy and data
Privacy Policy for a portfolio, lead-generation, and commercial contact website
This policy explains how Gisela Saldarriaga handles information connected to this website, its video portfolio, its service pages, and its professional contact channels.
Primary market
The site is positioned primarily for brands and teams selling to Spanish-speaking audiences in the United States, Spain, and Latin America, plus selected English-language briefs.
01
1. Controller, scope, and site context
The controller described on this page is Gisela Saldarriaga. This policy covers the main domain www.giselasaldarriaga.com, its Spanish and English versions, its service pages, static resources, and the portfolio material made available in that environment.
The site operates as a professional presence, portfolio, organic discovery surface, and commercial contact point for UGC services, product demos, spokesperson videos, reviews, and footage packages.
- Public controller: Gisela Saldarriaga.
- Privacy and rights contact: support@giselasaldarriaga.com.
- Operating location stated on the site: Medellin, Colombia.
02
2. Categories of data that may be handled
Not every category is collected in every case. The actual data involved depends on how you interact with the site or with the external channels linked from it.
- Contact details you choose to share, such as name, email address, subject line, commercial brief, or messages sent through email or third-party platforms.
- Technical browsing data, such as approximate IP-related information, browser, device, language, visited pages, load timing, and aggregated or pseudonymized usage events tied to site analytics.
- Technical preferences stored locally in your browser, such as light or dark theme preference.
- Data generated from access to videos, images, and other assets served through the site media/CDN infrastructure.
- Data you provide directly to third-party platforms if you decide to contact through WhatsApp, Telegram, Fiverr, or social profiles linked from this website.
03
3. Data sources and technologies currently present
Information handled through these technologies is used to operate the site, understand performance, keep the visual experience consistent, and make commercial contact easier.
- Page and asset delivery through the site hosting and content-delivery infrastructure.
- Performance and usage tooling currently visible in the codebase, including Vercel Analytics and Vercel Speed Insights.
- Google Fonts for web typography.
- localStorage to remember the user theme preference.
- External communication or marketplace platforms when you click out of this site and continue the conversation elsewhere.
04
4. Purposes of processing and legal bases
In its current state, this website is not used to sell personal information and does not run third-party advertising pixels for cross-context behavioral advertising from the site itself.
- Responding to commercial inquiries, service briefs, or direct messages: pre-contractual steps, handling a request, and, where relevant, the sender consent.
- Operating, securing, and improving the site, including performance, stability, and browsing experience: legitimate interest in running a secure and functional professional website.
- Maintaining technical preferences such as the visual theme: legitimate interest and, where applicable, the action requested by the user on the device.
- Complying with legal obligations, responding to lawful requests, or defending claims: legal obligation and legitimate interest.
05
5. Recipients, providers, and international transfers
To operate the site, I may rely on infrastructure, analytics, typography, media/CDN, and communication providers. Depending on the contact path you choose, data may be processed by third parties operating outside Colombia or outside the EEA/UK.
- Hosting and performance-layer providers, including Vercel services used for analytics and speed insights.
- Web font providers such as Google Fonts.
- Media/CDN infrastructure used to deliver portfolio videos, posters, and imagery.
- External contact and marketplace platforms such as WhatsApp, Telegram, Fiverr, and social interfaces linked from the website.
- Professional advisers or authorities where legally required or reasonably necessary for defense purposes.
06
6. Retention, minimization, and security
A minimization approach is applied whenever possible: not collecting more information than is reasonably needed for the commercial relationship or for the technical operation of the site.
No internet-connected system is completely fail-safe. Reasonable security measures may be used, but absolute security cannot be guaranteed at all times.
- Browsing, performance, or log data: for as long as reasonably needed to operate, secure, troubleshoot, or measure the site, subject to the retention periods of the relevant provider.
- Commercial messages or direct inquiries: for as long as needed to respond, follow up on the project, keep a basic commercial record, or comply with legal requirements.
- Theme preference in the browser: until you clear local storage, change the preference, or reset browser data.
- Data not actually sent by the current on-site form: not retained by this website because the form does not currently transmit the information.
07
7. Rights under Colombian data protection rules
If Colombian data protection law applies to you, you may request access, updating, rectification, deletion where appropriate, proof of authorization where required, information about how data has been used, and revocation of consent in cases allowed by law.
- You can exercise those rights by emailing support@giselasaldarriaga.com.
- The request should identify the data subject, describe the right you want to exercise, and provide enough context to locate the relevant interaction or communication.
08
8. Rights for the EEA and the United Kingdom
Where GDPR or equivalent EEA/UK rules apply, you may request access, rectification, erasure, restriction, objection, portability, and withdrawal of consent when processing depends on consent.
- You may also lodge a complaint with the competent supervisory authority if you believe the processing breaches applicable law.
- Use support@giselasaldarriaga.com for rights requests or clarifications.
09
9. California rights and children privacy
If a California privacy law applies to you, you may request information about the categories of data handled, purposes, sources, recipients, access, correction, or deletion, subject to legal exceptions.
In the current state of this website, personal information is not sold and is not shared for cross-context behavioral advertising from the site itself.
- This site is not directed to children and is not designed to collect child data as a primary audience surface.
- If you believe a minor submitted personal data through a channel connected to this website, contact support so the matter can be reviewed and addressed where appropriate.
10
10. Policy changes and contact
This policy may be updated when tools change, the actual data flow changes, new contact channels are added, legal requirements evolve, or the way the site operates changes. The visible update date at the top is the official reference for the current version.
For privacy questions, rights requests, or other personal-data matters, email support@giselasaldarriaga.com.
Summary
Privacy and rights requests
This policy reflects the visible and reasonably inferable data practices of the site in its current state. It is not a substitute for tailored legal advice for a specific jurisdiction or client contract.