Legal
Privacy policy
Version of . Operator established in Spain; Spanish law applies.
1 · Controller
Not published yet. The controller's identity, address and contact address are required under Article 13.1 GDPR and are missing rather than filled with placeholder values. See the legal notice.
2 · Processing carried out
2.1 · Serving the site
- Data
- IP address, date and time of request, URL requested, user agent, HTTP status.
- Purpose
- Delivering the requested pages and maintaining the security and availability of the service.
- Legal basis
- Article 6.1.f GDPR, legitimate interest. The interest pursued is operating the website and protecting it against abuse. The data is technical, is not used to identify visitors and is not combined with any other source.
- Recipients
- Cloudflare, Inc., as processor, under a data processing agreement.
- Retention
- For the period set by the processor in its own logging policy. The controller does not extend it, export the logs or query them to identify individual visitors.
2.2 · Audience measurement
- Data
- Online identifiers stored on your device, pages viewed, time on page, approximate location derived from IP, device and browser type, referring source, and interaction with the page layout including scrolling, clicks and pointer movement.
- Purpose
- Measuring audience and identifying usability problems in the site.
- Legal basis
- Article 6.1.a GDPR, consent, and Article 22.2 of Spanish Law 34/2002 for the storage of and access to information on your terminal equipment. No measurement script is loaded and no identifier is stored before consent is given.
- Processors
- Google Ireland Limited (Google Analytics 4) and Microsoft Ireland Operations Limited (Microsoft Clarity). Microsoft Clarity records session replays of page interaction; text input masking is enabled.
- Transfers outside the EEA
- Both processors may transfer data to the United States. The transfers rely on the adequacy decision for the EU–US Data Privacy Framework and, in addition, on standard contractual clauses adopted by the Commission. A copy of the safeguards can be requested at the address in section 1.
- Retention
- As set out for each identifier in the cookie policy. Consent is requested again once the record of your choice is no longer available.
2.3 · Embedded video
- Data
- IP address and player interaction data, received by the video provider.
- When
-
Only after you activate a video. Until then the thumbnail is served from this site and no
request is made to the provider. The player is embedded from
youtube-nocookie.com. - Legal basis
- Article 6.1.a GDPR, consent, expressed by activating the player.
- Recipient
- Google Ireland Limited, acting as an independent controller for that processing.
3 · Processing not carried out
There is no user account, registration, newsletter or contact form on this site. No personal data is collected through forms. No advertising networks, remarketing tags or social media pixels are used. No personal data is sold, rented or otherwise disclosed to third parties beyond the processors named above.
4 · Automated decision-making
No decisions producing legal effects or similarly significant effects are taken by automated means, and no profiling within the meaning of Article 22 GDPR is carried out.
5 · Source of the data
All data described above is obtained directly from your device when you visit the site. No personal data is obtained from third-party sources.
6 · Your rights
You have the right to obtain access to your personal data, and its rectification or erasure, the restriction of processing, and to object to processing carried out on the basis of legitimate interest. Where processing is based on consent, you have the right to portability and the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Consent to measurement can be withdrawn directly on the cookie policy page.
Requests should be addressed to the contact address in section 1, once published. You have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid (aepd.es), or with the supervisory authority of your Member State of residence.
7 · Amendments
This policy may be amended where the processing described changes. The date of the current version is stated at the top of this page.