Privacy Policy

This policy explains what personal data this website collects, why, how it is processed, and the rights you have under the EU General Data Protection Regulation (Regulation 2016/679, “GDPR”) and Spanish Organic Law 3/2018 on the Protection of Personal Data (LOPDGDD).

1. Who is responsible for your data

Data controller: Eduardo García-Garzón.
Contact: eduardo@eduardogarciagarzon.com.

2. What data is collected

• Newsletter subscription: when you submit the subscription form on this site, your email address is collected. That is the only personal data this site actively collects.
• Technical data: the site is served by Cloudflare Pages. Cloudflare may set a strictly necessary cookie (__cf_bm) for bot management and abuse prevention, and may log standard request metadata (IP address, user agent, timestamp) as part of its infrastructure. This site does not run third-party analytics, tracking pixels, or advertising scripts.

3. Why your data is processed

• Newsletter delivery: to send you the email updates you signed up for.
• Site operation and security: to keep the site online, fast, and protected from abuse.

4. Legal basis

• Newsletter: your explicit consent, given when you submit the subscription form (Article 6(1)(a) GDPR).
• Site operation: legitimate interest in maintaining a functional and secure website (Article 6(1)(f) GDPR).

5. Who else handles your data

Your email address is processed by beehiiv Inc. (the newsletter platform that delivers the emails) and by Cloudflare, Inc. (the infrastructure provider serving this site and routing the subscription request to beehiiv). Both are bound by data processing agreements consistent with GDPR requirements.

6. International data transfers

Both beehiiv and Cloudflare are based in the United States. Data transfers to the U.S. are governed by the EU-U.S. Data Privacy Framework where applicable and by Standard Contractual Clauses (Commission Decision 2021/914) where required.

7. How long your data is kept

• Newsletter: until you unsubscribe. After unsubscribing, your address is kept on a suppression list for up to 12 months for audit and to honor your opt-out, and then deleted.
• Technical logs: retained by Cloudflare in line with their standard logging retention policy.

8. Your rights

You have the right to:

• Access the personal data held about you.
• Rectify inaccurate or incomplete data.
• Request deletion (“right to be forgotten”).
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting prior lawful processing.

To exercise any of these, email eduardo@eduardogarciagarzon.com from the address concerned. You can also unsubscribe directly from any newsletter email using the link at the bottom.

If you believe your data is being processed unlawfully, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).

9. Cookies

This site does not place tracking or advertising cookies. The only cookie that may be set is __cf_bm, a strictly necessary cookie used by Cloudflare for bot management. Per Spanish AEPD guidance and ePrivacy Directive Article 5(3), strictly necessary cookies do not require prior consent.

10. Changes to this policy

When this policy changes, the effective date at the top of this page will be updated. Material changes will be communicated via the newsletter to current subscribers.