Last updated: August 2026.
This website (kamalshmaissani.com) is a personal professional portfolio operated by Kamal Shmaissani, based in Barcelona, Spain. For any question about this policy or your data: Kamal.shmaissani@hotmail.com.
When you visit this site, basic technical data may be collected automatically, including the pages you view, the date and time of your visit, your approximate geographic region, the referring site, and browser/device information. Where you have consented to analytics, this data is processed by Google Analytics 4 (see below). This site does not collect contact information, payment details, or any other personal data you do not actively provide.
This site uses Google Analytics 4, loaded through Google Tag Manager, to understand how the site is used: which sections attract attention, engagement depth, and traffic sources. Analytics cookies are set only after you give your explicit consent. Until you accept, no analytics cookies are set and no analytics data is transmitted. You can grant, reject, or withdraw consent at any time using the "Cookie settings" option in the site footer.
Analytics is processed on the basis of your consent (Article 6(1)(a) GDPR; for Spain, the applicable provisions of Organic Law 3/2018 (LOPDGDD)). You can withdraw or change your consent at any time via the "Cookie settings" option. Essential local functions (theme preference, consent preference) rely on local storage and are necessary for the site to work as you expect.
Analytics data is retained in Google Analytics 4 for 14 months (Event data and User data), with the retention period reset on new user activity. This retention applies to data held in the GA4 property — it is separate from any cookies or local storage set in your browser, whose individual lifetimes are documented in the Cookie Policy. Local storage entries used by this site (theme preference, consent choice) remain on your device until removed by you or your browser.
Where personal data is transferred outside the European Economic Area, the relevant provider's applicable transfer safeguards are used, which may include adequacy frameworks or Standard Contractual Clauses. If the EU–US Data Privacy Framework is referenced specifically, Google LLC's active certification under that framework is verified at publication time. You can withdraw your consent at any time, which stops new analytics processing from that point.
Under the GDPR and LOPDGDD, depending on your situation you may have the right to access, rectify, erase, restrict or port your personal data, and to withdraw consent at any time. To exercise any of these rights, contact Kamal.shmaissani@hotmail.com. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD — www.aepd.es).
This policy may be updated as the site or its services change. The current version is always available at /privacy.html.
Questions about this policy: Kamal.shmaissani@hotmail.com.