1. Data Controller Information
In compliance with the General Data Protection Regulation (EU 2016/679, GDPR), Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE), we inform you about the processing of your personal data.
2. Purpose of data processing
At curaduriadedatos.com we process personal data for the following purposes:
Contact form management
We process your name, email address, subject and message to handle and respond to your inquiries. The legal basis is the execution of pre-contractual measures or handling your information request (Art. 6.1.b and 6.1.f of the GDPR). Data will be retained until your query is resolved and, subsequently, during applicable legal periods.
Newsletter subscription management
We process your email address to send you periodic communications about content published on the blog. The legal basis is your explicit consent (Art. 6.1.a of the GDPR). You can unsubscribe at any time through the cancellation link included in each email or by contacting us directly.
Article comments
If you leave a comment on the blog, we process your name, email and comment content to publish it and manage interaction. The legal basis is your consent (Art. 6.1.a of the GDPR). Comments may be moderated before publication.
Analytics and metrics
We use Google Analytics to analyze web traffic in an aggregated and anonymous manner. The legal basis is your consent for analytics cookies (Art. 6.1.a of the GDPR and Art. 22 of the LSSI-CE). See our Cookie Policy for more information.
3. Legal basis for processing
The processing of your personal data is based on:
- Consent (Art. 6.1.a GDPR): For sending the newsletter, receiving comments and the use of analytics and advertising cookies. You may withdraw your consent at any time.
- Execution of pre-contractual measures (Art. 6.1.b GDPR): To handle inquiries and information requests you make through the contact form.
- Legitimate interest (Art. 6.1.f GDPR): For the technical operation of the website, fraud prevention and platform security.
4. Data retention
Personal data will be retained for the following periods:
- Contact data: Until the query is resolved, and a maximum of 12 additional months for potential claims.
- Newsletter subscribers: While you maintain your active subscription. After unsubscribing, we will retain your email for a maximum of 30 days to ensure proper processing of the cancellation.
- Comments: They are retained indefinitely unless you request their deletion, as they are part of the editorial content of the site.
- Navigation data (server logs): A maximum of 12 months, in accordance with Art. 23 of the LSSI-CE.
5. Data recipients
Your personal data will not be transferred to third parties, except in the following cases:
- Service providers: Google LLC (Google Analytics, Google AdSense), acting as data processor under standard contractual clauses approved by the European Commission.
- Legal obligations: When there is a legal obligation to provide data to competent public authorities.
6. International transfers
The use of Google Analytics and Google AdSense may involve the transfer of data to servers located in the United States. Google LLC is adhered to the EU-US Data Privacy Framework (adopted on July 10, 2023), which guarantees an adequate level of protection in accordance with Art. 46 of the GDPR.
You can consult the list of companies adhered to the EU-US Data Privacy Framework in the official U.S. Department of Commerce registry.
7. Your rights
Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:
- Access: Obtain confirmation of whether we are processing your data and access the information we have about you.
- Rectification: Request the correction of inaccurate or incomplete data.
- Erasure: Request the deletion of your data when it is no longer necessary for the purpose for which it was collected.
- Restriction: Request the restriction of processing in certain circumstances.
- Portability: Receive your data in a structured, commonly used and machine-readable format.
- Objection: Object to the processing of your data based on legitimate interest.
- Withdrawal of consent: Withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, send a written request to our email address clearly indicating which right you wish to exercise and attaching a copy of a document that verifies your identity.
8. Complaints
If you consider that the processing of your data does not comply with current regulations, you have the right to file a complaint with the competent supervisory authority:
9. Website usage
Intellectual property
All content on this website (texts, images, graphics, logos, icons, software, source code and any other material) is protected by intellectual and property laws. Their reproduction, distribution, public communication, transformation or any similar activity without the express authorization of curaduriadedatos.com is prohibited.
Acceptable use
The user agrees to use the website in accordance with the law, good faith and this legal notice. It is expressly prohibited:
- To carry out any use that may damage, disable, overload or deteriorate the website or interfere with its normal use.
- Attempting to access and, where applicable, use other users' email accounts and modify or manipulate their messages.
- To use the website for illegal, unlawful or bad faith purposes and against public order.
- To introduce viruses, malware or any other program that may damage or alter the website or its systems.
Limitation of liability
curaduriadedatos.com is not responsible for damages that may result from interference, omissions, interruptions, computer viruses, telephone failures or disconnections in the operational functioning of the electronic system, nor from blockages or delays caused by deficiencies or overloads in telephone lines or on the Internet, nor from any other damage caused by causes beyond the website.
Third-party links
This website may contain links to third-party sites. curaduriadedatos.com has no control over and assumes no responsibility for the content, privacy policies or practices of such external sites. Access to these sites is the sole responsibility of the user.
10. Data security
curaduriadedatos.com has adopted the necessary technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, processing or unauthorized access, in accordance with Art. 32 of the GDPR. Among other measures, the following are included:
- HTTPS/TLS encryption on all connections.
- CSRF protection on all forms.
- Authentication with two-factor authentication (2FA) in the administration area.
- Security header policies (HSTS, X-Frame-Options, CSP, X-Content-Type-Options).
- Validation and sanitization of all user inputs.
- Sessions with HttpOnly and SameSite cookies.
11. Changes to this policy
We reserve the right to modify this Terms & Privacy Policy to adapt it to legislative, regulatory novelties or to adapt said policy to the instructions issued by the AEPD. We recommend that you review it periodically. Changes will be effective from their publication on this page.
12. Applicable law
The relationship between curaduriadedatos.com and the user shall be governed by current Spanish and European regulations. For the resolution of any dispute, the parties shall submit to the courts and tribunals of Jaén, Spain, expressly waiving any other jurisdiction that may correspond to them.