Last updated: January 14, 2026
1. Data Controller
The data controller responsible for the personal data collected on this website is David Torrijos (hereinafter, “the Controller”).
The Controller can be contacted through his social media profiles: LinkedIn or X (Twitter).
This website is hosted in Spain and complies with the General Data Protection Regulation (GDPR) of the European Union and the Spanish Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
2. Data Collected
This website collects the following types of personal data:
2.1. Data Provided Voluntarily
- Email address: when the user subscribes to the newsletter through the subscription form.
2.2. Data Collected Automatically
- Browsing data: this website uses Google Analytics to collect anonymous information about how users interact with the content, including pages visited, time spent, device used, approximate geographic location, and traffic source. This data is collected in aggregate form and does not allow personal identification of the user.
3. Purpose of Processing
The personal data collected is used exclusively for the following purposes:
- Newsletter delivery: the email address provided will be used solely for sending the periodic newsletter with content related to the blog’s topics. The email will not be used for any other purpose nor shared with third parties for commercial purposes.
- Website analysis and improvement: the browsing data collected through Google Analytics helps understand how users use this website in order to improve its content and user experience.
4. Legal Basis for Processing
The processing of personal data is based on the following legal grounds:
- Consent: by subscribing to the newsletter, the user grants express consent for the processing of their email address for the purpose of receiving communications. By continuing to browse this website, consent is given for the use of analytical cookies.
- Legitimate interest: there is a legitimate interest in analyzing the use of the website to improve the content and experience offered.
5. Data Recipients
Personal data may be disclosed to the following recipients:
- MailerLite: this website uses MailerLite as an email marketing platform to manage newsletter delivery. MailerLite acts as a data processor and stores email addresses on its servers. MailerLite’s privacy policy is available at mailerlite.com/legal/privacy-policy.
- Google Analytics: this website uses Google Analytics to analyze web traffic. Google may process browsing data on its servers. Google’s privacy policy is available at policies.google.com/privacy.
Personal data is not sold, rented, or shared with third parties for commercial or advertising purposes.
6. International Transfers
Some of the service providers used may be located outside the European Economic Area (EEA). In such cases, appropriate safeguards exist for the protection of data, such as:
- Standard contractual clauses approved by the European Commission.
- Certification under the EU-US Data Privacy Framework.
7. Data Retention
Personal data will be retained for the time necessary to fulfill the purposes described:
- Newsletter subscription data: until the user requests to unsubscribe or exercises the right to erasure.
- Browsing data: Google Analytics retains data for a maximum period of 26 months.
8. User Rights
In accordance with applicable regulations, the user has the following rights regarding their personal data:
- Right of access: to know what personal data is being processed.
- Right to rectification: to request the correction of inaccurate or incomplete data.
- Right to erasure: to request the deletion of data when it is no longer necessary.
- Right to object: to object to the processing of data in certain circumstances.
- Right to restriction of processing: to request that the use of data be limited.
- Right to data portability: to receive data in a structured, commonly used format.
- Right to withdraw consent: consent may be withdrawn at any time without affecting the lawfulness of processing prior to its withdrawal.
To exercise any of these rights, it is possible to contact the Controller through his profiles on LinkedIn or X (Twitter). There is also the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
9. Cookies
This website uses its own and third-party cookies to analyze browsing and improve the user experience. In particular, the following are used:
- Analytical cookies (Google Analytics): these allow measuring and analyzing navigation on the website. These cookies collect anonymous information about pages visited, time spent, traffic source, and other statistical data.
The browser can be configured to reject the installation of cookies or to delete those already installed. If cookies are disabled, some website features may not be available.
10. Security
This website implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no data transmission over the Internet is completely secure, so absolute security of transmitted data cannot be guaranteed.
11. Changes to This Policy
This Privacy Policy may be modified at any time. Any changes will be published on this page with the date of the last update. It is recommended to periodically review this policy to stay informed about how data is protected.
For any questions about this Privacy Policy or about the processing of personal data, it is possible to contact the Controller through his social media profiles: LinkedIn or X (Twitter).