Privacy Policy

Last updated: November 9, 2025

Introduction

This AI-powered portfolio chatbot ("the Service") showcases Alberto Gonzalo Rodríguez Salgado's professional experience, projects, and skills. Your privacy is important to us, and we practice data minimization.

What Data We Collect

When you consent to logging (negative feedback only):

• Chat messages: Your question and the AI's response
• Optional comment: Your feedback text (if provided)
• Anonymous session ID: Random identifier (no personal link)
• Timestamp: When the conversation occurred

We do NOT collect:

• Your name, email address, or personal identifiers
• IP addresses or location data
• Browser fingerprints or device information
• Positive feedback conversations (deleted immediately)
• Conversations without feedback (deleted immediately)
• Tracking cookies or analytics beyond basic functionality

Why We Collect Data

When you give negative feedback and consent, we log the conversation to:

• Identify and fix problems with AI responses
• Improve response accuracy and quality
• Understand common user questions
• Train the AI to better represent Alberto's professional work

Legal Basis (GDPR Article 6)

We process your data based on explicit consent (Art. 6(1)(a)). Before logging any conversation, we:

1. Show a clear consent modal when you click thumbs down
2. Explain what will be logged and why
3. Give you the option to decline ("No, just note it")
4. Only log if you click "Yes, send feedback"

Who We Share Data With

Your data may be processed by these third parties:

OpenAI (USA):

• Processes ALL chat messages to generate AI responses
• Subject to OpenAI's data processing terms
• OpenAI Privacy Policy
• OpenAI DPA

LangSmith by LangChain (USA):

• Stores negative feedback conversations (with consent only)
• Analytics and monitoring platform
• LangSmith Privacy

International Data Transfers:

Your data is transferred to the USA for processing. We rely on:

• Standard Contractual Clauses (SCCs) with vendors
• OpenAI's GDPR-compliant data processing agreement
• Appropriate technical and organizational measures

Data Retention

• Logged conversations (with consent): 30 days, then automatically deleted
• Session data: Deleted when you close your browser
• Positive feedback: Counted but not logged, deleted immediately
• No feedback: Deleted immediately after session ends

Your Rights Under GDPR

As a data subject, you have the right to:

• Access (Art. 15): Request a copy of your logged conversations
• Rectification (Art. 16): Correct inaccurate data
• Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Portability (Art. 20): Receive your data in machine-readable format (JSON)
• Object (Art. 21): Object to processing of your data
• Withdraw consent (Art. 7(3)): Revoke consent at any time (doesn't affect past processing)
• Lodge a complaint: File a complaint with your local data protection authority

To exercise your rights:

Email: alberto.rodriguez.salgado97@gmail.com

We will respond within 30 days as required by GDPR.

AI-Generated Content Disclaimer

Important: This chatbot uses AI (OpenAI GPT-4) to generate responses. The AI may make mistakes or express views that do not represent Alberto's personal opinions, particularly on politics, religion, sexual topics, or other sensitive subjects. This service is intended solely for showcasing professional portfolio information.

Cookies and Tracking

We use minimal cookies:

• Session cookie: Maintains conversation context (deleted when browser closes)
• No tracking cookies: We do not use Google Analytics, Facebook Pixel, or similar tracking
• No advertising cookies: No third-party ad networks

Children's Privacy

This service is not intended for children under 16 years of age. We do not knowingly collect personal data from minors. If you are a parent and believe your child has provided data, please contact us.

Security Measures

We implement appropriate security measures including:

• HTTPS encryption for all data in transit
• Secure API key management
• Regular security updates
• Access controls and authentication

Changes to This Policy

We may update this privacy policy from time to time. Check the "Last updated" date at the top. Continued use of the service after changes constitutes acceptance of the updated policy.

Data Controller

Alberto Gonzalo Rodríguez Salgado
Munich, Bavaria, Germany
Email: alberto.rodriguez.salgado97@gmail.com

Contact & Questions

For privacy questions, data requests, or to exercise your rights:
Email: alberto.rodriguez.salgado97@gmail.com