Last updated: 18 September 2026

This Privacy Policy explains how personal data is collected, used, stored and protected through this website, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation, Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights, and Law 34/2002 on Information Society Services and Electronic Commerce.

This website is an informational and professional portfolio belonging to Alejandro de Miguel Solano.

1. Data controller

The data controller responsible for the processing of personal data is:

Owner / Data controller: Alejandro de Miguel Solano
Tax ID / NIF: [complete, if applicable]
Professional address: [complete professional address, if applicable]
Email: alejandro@demiguelsolano.com
Telephone: +44 07754146926 / +34 609611513
Website: https://demiguelsolano.com/

Professional activity: architecture, urban design, art, research, writing, lectures, workshops and related creative, academic and professional work.

Data Protection Officer: not applicable, as the processing carried out does not require the mandatory appointment of a Data Protection Officer. If this situation changes in the future, this Privacy Policy will be updated accordingly.

2. Personal data processed

This website is mainly used as an informational and professional portfolio.

No personal data is collected through user registration or subscription systems unless such functions are expressly enabled in the future.

However, personal data may be processed in the following cases:

2.1. Data provided voluntarily by the user

If a user voluntarily contacts the website owner by email, telephone, social media or any other communication channel, the personal data provided may be processed.

This may include:

• Name and surname.
• Email address.
• Telephone number.
• Professional or institutional details.
• Message content.
• Information related to enquiries, collaborations, commissions, lectures, workshops, publications, research, architectural work, urban design, art projects or other professional communications.

2.2. Technical and browsing data

When users browse this website, certain technical data may be processed for security, maintenance and proper functioning of the website.

This may include:

• IP address.
• Browser and device information.
• Operating system.
• Date and time of access.
• Pages visited.
• Technical logs.
• Cookie preferences.

Where analytical or third-party cookies are used, they will only be activated in accordance with the Cookie Policy and, where required, after the user has given prior consent.

2.3. Social media and external platforms

If users interact with social media profiles, external platforms, publications, embedded content or third-party links, the processing of personal data may also be governed by the privacy policies of those third parties.

3. Purposes of processing

Personal data may be processed for the following purposes:

3.1. Responding to enquiries and communications

To respond to messages, enquiries, professional requests, academic communications, press enquiries, collaboration proposals, lecture or workshop requests, publication-related communications or any other contact voluntarily initiated by the user.

3.2. Managing professional relationships

To manage potential or existing professional, academic, creative or commercial relationships, including collaborations, commissions, research projects, publications, lectures, workshops, architectural or urban design work, art projects and related activities.

3.3. Website security and maintenance

To ensure the correct functioning of the website, prevent unauthorised access, detect technical incidents, protect systems, avoid misuse and maintain website security.

3.4. Compliance with legal obligations

To comply with applicable legal, tax, accounting, administrative or professional obligations, where relevant.

3.5. Informational or professional communications

To send information related to professional activity, publications, projects, lectures, workshops, events or similar content, only where there is a lawful basis to do so.

4. Legal basis for processing

The legal bases for processing personal data are:

• Consent of the data subject: when the user voluntarily contacts the website owner, provides personal data, accepts non-technical cookies or subscribes to communications if such a function is enabled.
• Pre-contractual or contractual measures: when the communication is related to a possible collaboration, commission, lecture, workshop, publication, project or professional relationship.
• Compliance with legal obligations: where processing is necessary to comply with applicable legal, tax, accounting, administrative or professional obligations.
• Legitimate interest: to maintain website security, prevent misuse, respond to communications initiated by the user, protect rights and interests, and maintain existing professional or academic relationships.

Failure to provide the necessary data may make it impossible to respond to an enquiry, manage a request or maintain a professional relationship.

5. Data retention

Personal data will only be retained for as long as necessary for the purpose for which it was collected and, where applicable, for the legally required limitation periods.

In general:

• Enquiries and communications: data will be retained for the time necessary to respond and manage the relevant communication.
• Professional or academic relationships: data will be retained for the duration of the relationship and, afterwards, for the period necessary to comply with legal obligations or respond to possible claims.
• Commercial, tax or administrative documentation: data will be retained for the legally required periods.
• Informational or professional communications: data will be retained until the user withdraws consent or requests not to receive further communications.
• Technical and security logs: data will be retained for proportionate security periods, unless longer retention is required due to incidents, audits or legal responsibilities.

Once the applicable retention periods have expired, personal data will be securely deleted or anonymised where appropriate.

6. Recipients and service providers

Personal data will not be sold or disclosed to third parties for commercial purposes.

Personal data may only be accessed or disclosed where necessary to manage a request, provide a service, maintain a professional relationship or comply with a legal obligation.

Data may be accessed by:

• Website hosting and maintenance providers.
• Email and communication service providers.
• IT, security or technical support providers.
• Administrative, accounting, tax or legal advisers, where necessary.
• Professional collaborators, institutions, publishers, universities, organisers or clients where necessary to manage a collaboration or professional request.
• Public authorities, courts, regulators or competent bodies where legally required.
• Analytics or cookie providers, only where the user has given prior consent when required.

Any service provider processing personal data on behalf of the controller must do so in accordance with the GDPR and with the required contractual guarantees.

7. International data transfers

As a general rule, no international data transfers are intended.

However, some technology providers, email services, analytics tools, social media platforms or external services may process data outside the European Economic Area.

Where international transfers take place, appropriate safeguards will be applied, such as adequacy decisions, Standard Contractual Clauses or any other mechanism recognised by applicable data protection law.

8. Cookies and analytics

This website may use technical cookies necessary for its operation and, where applicable, analytical or third-party cookies.

Non-technical cookies will only be installed where the user has given prior consent.

Users must be able to accept, reject or configure cookies through the cookie settings panel made available on the website, and may withdraw consent at any time.

Further information is available in the website’s Cookie Policy.

9. Social media and external links

This website may include links to social media profiles, publications, press articles, institutions, platforms, videos, maps, documents or third-party resources.

Interactions carried out through those external platforms are governed by the privacy policies and terms of use of each platform.

The website owner is not responsible for the privacy practices, terms of use or content of third-party websites or platforms.

Users are advised to review the privacy policies of any external websites before providing personal data.

10. Commercial and informational communications

The website owner may send professional, informational or commercial communications related to projects, publications, lectures, workshops, research, events or similar activities only where there is a lawful basis to do so, such as the user’s consent or a prior professional relationship permitted by applicable law.

Users may object to or unsubscribe from such communications at any time by writing to:

alejandro@demiguelsolano.com

The withdrawal of consent will not affect the lawfulness of any processing carried out before withdrawal.

11. Rights of users

Users may exercise the following rights at any time and free of charge:

• Right of access: to know whether personal data is being processed and to access such data.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of personal data where appropriate.
• Right to restriction of processing: to request limitation of processing in the cases provided by law.
• Right to object: to object to the processing of personal data where applicable.
• Right to data portability: to receive personal data in a structured, commonly used and machine-readable format, where applicable.
• Right to withdraw consent: to withdraw consent at any time.
• Right not to be subject to automated decision-making: not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise these rights, users may contact:

Email: alejandro@demiguelsolano.com
Postal address: [complete professional address, if applicable]

The request should clearly indicate the right being exercised. The controller may request proof of identity where necessary and where identity cannot be verified by less intrusive means.

The general response period is one month from receipt of the request, extendable where permitted by applicable law.

Users may also lodge a complaint with the Spanish Data Protection Agency:

www.aepd.es

12. Accuracy of data

Users guarantee that the personal data provided is true, accurate, complete and up to date.

Users are responsible for any damage or loss caused as a result of providing false, inaccurate, incomplete or outdated information.

If users provide personal data relating to third parties, they declare that they have sufficient authorisation to do so and undertake to inform such third parties of this Privacy Policy where applicable.

13. Security measures

The website owner adopts appropriate technical and organisational measures to protect personal data against alteration, loss, unauthorised access, disclosure or processing.

These measures may include access controls, secure providers, encrypted connections, technical maintenance, system updates, data minimisation and confidentiality measures.

Although reasonable security measures are applied, no system connected to the Internet can guarantee absolute security.

In the event of a security incident that may significantly affect the rights and freedoms of users, the controller will act in accordance with applicable data protection law.

14. Minors

This website is not specifically directed at children under the age of 14.

Children under 14 must not provide personal data through this website without authorisation from their parents or legal guardians.

If the website owner becomes aware that personal data from a child under 14 has been collected without sufficient authorisation, such data will be deleted unless there is a legal obligation to retain it.

15. Changes to this Privacy Policy

This Privacy Policy may be modified or updated to reflect legal, technical, organisational or operational changes to the website.

The current version will always be the version published on this page.

For any questions regarding this Privacy Policy, users may contact:

alejandro@demiguelsolano.com