Privacy notice

Last updated: October 15, 2026 · Español

This is a translation of the Spanish privacy notice. If the two versions differ, the Spanish version prevails.

Who is the data controller

Pedro Torres Hernández, whose address is Calle Ozumba núm. 31, colonia El Conde, C.P. 53500, Naucalpan de Juárez, Estado de México, México, is the controller of the processing of your personal data.

This notice applies to the gurulegacy.com website and to GURÚ's surveys.

The gurulegacy.com website

• The site has no forms and does not use cookies.
• To know how many people visit it, the site measures visits with Vercel Web Analytics, which does not use cookies or store a permanent identifier. It records the date and time, the page visited, where the visitor came from, their approximate location (country, state and city), and their operating system, browser and device type. It tells visits apart with a temporary code that is discarded after 24 hours, and it does not identify the people who visit.
• To display the page, the hosting server (Vercel) receives the IP address and the technical data of your browser. They are used only to deliver the site and keep it secure.
• The site loads its fonts from Google Fonts, so Google receives the IP address of whoever visits it.

GURÚ surveys

GURÚ's surveys help us design the product. They are answered by experts and successors.

What data is stored

• Your answers, which questionnaire you answered and the time it took you to answer it (active answering time, not the span between opening and submitting).
• Your answers are confidential. We do not ask for your name and we do not link them to your contact details.
• To prevent mass submissions, an identifier derived from the IP address of the sender (a hash with a secret key, never the IP address in the clear) is stored for about 24 hours. It is kept separate from the answers, has no link to them and is deleted automatically after about 24 hours.
• We do not request sensitive personal data, such as health, racial or ethnic origin, religious beliefs, political opinions or sexual orientation. Please do not include them, or your name, in free-text answers.
• Infrastructure providers record the time and IP address of each request in their technical logs, which are kept for a short period.
• The progress of a survey is stored in your own browser, expires after 7 days, and you can delete it with the button the survey provides for that.

Pilot test contact

If you take part in the pilot test, the survey asks for your email address and/or your phone number (one of the two is enough), with your explicit consent. We use it only to contact you about the pilot test. It is not linked to your answers.

Who has access to the results

Only two people on the GURÚ team, through a dashboard of aggregated results. No report shows small groups that could identify someone.

Who the data is shared with

• Supabase: hosts the surveys' database in the United States.
• Vercel: hosts the site and the surveys, and measures the site's visits.
• Google (Google Fonts): receives the IP address of whoever visits gurulegacy.com, as explained above.

Supabase and Vercel process the data on behalf of the controller. Besides the third parties above, we do not disclose your data to anyone else.

What we use your data for

Only for the purposes described above: operating the site, designing the product from the surveys and, if you authorize it, contacting you about the pilot test. The latter requires your consent. We have no other purposes; if we wanted to use your data for something different, we would ask for your consent again.

How long it is kept

• The answers to each survey and their export files are deleted 12 months after the questionnaire closes.
• Pilot test contacts are deleted when the pilot ends or is cancelled, or earlier if you ask.
• Aggregated reports, without small groups, are kept.

Your rights (access, rectification, cancellation and opposition)

You may exercise at any time, free of charge, your rights of access, rectification, cancellation and opposition (ARCO), and withdraw your consent. To do so, write to contacto@gurulegacy.com or to the controller's address given above, with:

• your name and a means to reply to you;
• a document that proves your identity (or, if you act on behalf of another person, their representation and identity);
• a clear description of the right you want to exercise and, unless you request access, of the data concerned;
• any detail that helps locate your information.

We will reply within a maximum of twenty business days from receiving your request and, if it is granted, we will carry it out within the following fifteen business days. These periods may be extended once for an equal period if circumstances justify it.

The answers to the surveys carry no name, email or other detail that lets us know who gave them, so we will normally be unable to locate yours for an individual request. We can delete your pilot test contact at your request, and you can ask us at any time to stop using it.

If you believe your right to personal data protection has been violated, you may file a data protection request with the Secretaría Anticorrupción y Buen Gobierno (Secretariat of Anti-Corruption and Good Governance), within fifteen days of our reply or, if you do not receive one, once the period has expired.

Changes to this notice

Any change is published on this same page, with its update date.