Last updated: October 11, 2026

This policy explains what personal data I process when you visit michaelmuller.pro, write to me, sign up for a workshop or hire my services: what I use it for, who I share it with, how long I keep it and how you can exercise your rights. It is written in accordance with Ecuador’s Organic Law on Personal Data Protection (Ley Orgánica de Protección de Datos Personales, LOPDP), its General Regulation and the rules issued by the Superintendency of Personal Data Protection (Superintendencia de Protección de Datos Personales, SPDP).

This is a translation of the Spanish version. If the two versions differ, the Spanish version prevails.

At a glance

• Who processes your data: me, Michael Müller Cárdenas, as an individual.
• What data: what you give me through forms, emails or during workshops, and the browsing data collected by the cookies you accept.
• What for: to reply to you, run workshops and talks, issue invoices, send you news if you agree, measure the site and show ads if you accept those cookies.
• Analytics and advertising cookies only run if you accept them. You can change your choice at any time.
• I don’t sell your data. I only share it with the providers I need to operate, several of them outside Ecuador.
• Your rights: access, rectification, deletion, objection, portability, suspension and not being subject to automated decisions. Write to me at michael@michaelmuller.pro.

1. Data controller

• Name: Michael Müller Cárdenas
• Address: Guayaquil, Ecuador
• Email: michael@michaelmuller.pro
• Website: https://michaelmuller.pro
• Data protection officer: I have not appointed one, because my activity does not fall under the cases in which the LOPDP requires it. I handle all privacy questions directly at the email address above.

2. Database

Your data is stored in a database of contacts, clients and workshop participants that I manage myself. It is hosted on Bluehost servers and in the tools listed in section 6.

3. What data I process, why, and on what legal basis

Each processing activity has a specific purpose and a legal basis recognized in Article 7 of the LOPDP. I don’t use your data for purposes other than those listed here.

What happens if you don’t give me your data?
Fields marked with an asterisk (*) are required. Without them I can’t reply to you, register you or invoice you. The rest are optional and don’t affect the service. Analytics and advertising cookies are optional too: if you reject them, the site works the same.

What if your data is wrong?
If you give me inaccurate data, I may not be able to reach you, your registration may not be recorded, or your invoice may contain errors that then have to be voided. Let me know when your details change and I’ll update them.

4. Artificial intelligence and automated decisions

The site chat is an automated AI assistant, not a person. It runs on the Chatbase platform, which in turn uses third-party language models. It answers with information about my workshops and services, and its answers may contain errors: before making any decision, confirm it with me by email.

• Don’t type sensitive data in the chat (health, financial data, ID documents, etc.).
• Conversations are kept to answer you and improve the assistant, for the period stated in section 7.
• The assistant makes no decisions about you: it doesn’t approve, reject or quote services. Any decision is made by me.

Internal AI support: besides the chat, I use artificial intelligence (Claude, by Anthropic) for two tasks: drafting replies based on my notes about your inquiry, and extracting your contact details from an email you sent me so I can record them. I always review the result before saving or sending anything. The AI doesn’t send emails or decide for me, and Anthropic doesn’t use this data to train its models.

Contact classification: to organize my follow-up, I classify clients and contacts by when and how much they have hired me (for example, “frequent client” or “no recent activity”). This classification only helps me decide whom to write to.

Advertising profiles: if you accept advertising cookies, Meta, LinkedIn and Google may use your browsing to build interest profiles and show you ads. I don’t make any automated decision that has legal effects on you or significantly affects you.

5. Cookies

The first time you visit the site, a banner lets you accept all cookies, reject them or choose by type. Non-essential cookies don’t run until you accept them. You can change your choice at any time in Cookie settings.

• Necessary, always on: your cookie choice, language and spam protection (CookieYes, WPML, Google reCAPTCHA). Up to 1 year.
• Functional: the site chat (Chatbase). Only during your visit.
• Analytics: site usage statistics (Google Analytics). Up to 2 years.
• Advertising: measuring my campaigns and showing ads (Meta, LinkedIn, Google AdSense). Up to 13 months.

6. Who I share your data with

I don’t sell or transfer your data to others for their own use. I only share it with:

• Providers that work on my behalf: web hosting and email (Bluehost), cloud storage (Google), email news (Mailchimp), confirmations, workshop reminders and individual emails (Brevo), AI support for drafting and organizing my correspondence (Anthropic), messaging (WhatsApp), video calls (Zoom), chat assistant (Chatbase) and electronic invoicing (Datil).
• Analytics and advertising platforms, only if you accept those cookies: Google, Meta and LinkedIn.
• The company that hires a workshop for its team: attendance and workshop results.
• Authorities, when the law requires it (for example, Ecuador’s tax authority, the SRI).

Several of these providers are in the United States and one in the European Union (Brevo, in France). I work with them under their data protection agreements, which I can share with you if you ask.

7. How long I keep your data

Only as long as I need it for the purpose it was collected for:

• Inquiries: 3 years from the last contact.
• Clients: for as long as the relationship lasts and up to 5 years after.
• Workshop participants: 3 years from your last participation. The certificate record (name, workshop and date), 10 years.
• Invoicing: 7 years, as required by tax regulations.
• Mailing list, photos and testimonials: until you unsubscribe or withdraw your consent.
• Chat: 12 months.

If you agreed to receive news, you stay on the mailing list even after the period for your inquiry or registration has ended. Every month I review the data whose period has ended and delete or anonymize it. Anonymized workshop statistics (number of participants, companies, dates) don’t identify anyone, and I keep them.

8. Your rights and how to exercise them

The LOPDP gives you these rights:

• Information: to know how your data is processed (this policy).
• Access: to know what data of yours I hold and get a copy.
• Rectification and updating: to correct inaccurate or incomplete data.
• Deletion: to ask me to delete your data when it’s no longer needed, when you withdraw your consent or when it was processed unlawfully.
• Objection: to object to a processing activity, especially receiving marketing communications.
• Portability: to receive the data you gave me in a structured, commonly used format (for example, CSV or JSON), or to have me send it to another controller where technically possible.
• Suspension of processing: to ask me to stop using your data temporarily, for example while its accuracy is being checked.
• Not to be subject to decisions based solely on automated processing, including profiling.
• Withdraw your consent at any time, without affecting processing carried out before.

How to exercise them
Write to me at michael@michaelmuller.pro with the subject “Data protection”, stating which right you want to exercise.
If I have reasonable doubts about your identity, I’ll ask for a detail that lets me confirm it. I won’t ask for more information than necessary.
I’ll reply within 15 days at most. It’s free of charge.

Shortcuts: to stop receiving emails, use the “unsubscribe” link at the bottom of each message. To change your cookie preferences, go to Cookie settings.

Complaints to the authority
If I don’t reply in time or you disagree with my reply, you can file a complaint with Ecuador’s Superintendency of Personal Data Protection (spdp.gob.ec).

9. Security

I apply technical and organizational measures proportionate to the risk: encrypted connection (HTTPS), access to information restricted to me and protected with strong passwords and two-step verification, encryption of contact details (email and phone) in the database, a record of access to that data, backups, spam protection on forms, and providers with contractual security commitments. If a security breach affects your data, I will notify the SPDP and, where applicable, you, within the deadlines set by the LOPDP.

10. Minors

My services are aimed at professionals, companies and institutions. I don’t knowingly collect data from people under 18. If a workshop includes underage participants, for example in a university or school program, I will ask for their legal guardian’s authorization before processing their data or taking photos.

11. Links to other sites

This site links to social networks and third-party sites. Once you leave michaelmuller.pro, those sites’ privacy policies apply, and I recommend reviewing them.

12. Changes to this policy

If I change this policy, I’ll update the date at the top of the page. If the change is significant (a new purpose, a new type of data or a new recipient), I’ll let you know by email, if I have yours, or through a visible notice on the site. If the change requires your consent, I’ll ask for it again.

13. Contact

For any question about this policy or your data: michael@michaelmuller.pro · contact form.