Privacy Policy

Last updated: October 2026

1. Data controller

Nacho Conesa
Website: nachoconesa.com
Email: nacho@nachoconesa.com

2. What data we process and why

a) Newsletter subscription

  • Data: your email address, entered voluntarily in the subscription form.
  • Purpose: to send you notifications about new articles published on this blog.
  • Legal basis: your consent (Art. 6.1.a GDPR), given by ticking the box in the form. You can withdraw it at any time.
  • Retention: for as long as you remain subscribed. When you unsubscribe, your address is deleted within a maximum of 30 days.

b) Audience measurement (Google Analytics)

  • Data: browsing data such as pages visited, approximate location, device and browser, linked to a random identifier stored in a cookie.
  • Purpose: to know how many people visit the blog and which articles are most read, in aggregate form.
  • How it works: the cookie notice is shared across all of nachoconesa.com and is shown on the main website. If you reject statistics cookies there, the blog respects it and Google Analytics works without cookies. You can change your choice in the cookie settings or block Analytics with the official opt-out add-on.
  • Provider: Google Ireland Limited. Google may transfer data to the United States under the EU–US Data Privacy Framework.

More details in the Cookie Policy.

c) Technical data when you browse

  • Data: your IP address and browser information, which the web server records in its access logs, and which also reach the providers of the resources the page loads (fonts).
  • Purpose: to serve the website, keep it secure and detect abuse.
  • Legal basis: legitimate interest in running a secure website (Art. 6.1.f GDPR).
  • Retention: server logs are kept for the time set by the hosting provider, usually a few weeks.

3. Who receives your data

We do not sell or give your data to third parties. Only the following providers have access to it, solely to provide their service:

  • Web hosting provider: stores the website and the subscriber list (data processor).
  • Google: Google Analytics, Google Fonts (typefaces of the website) and Google AdSense (advertising).

Some articles may display images hosted on other websites; when they load, those sites receive your IP address.

4. Your rights

You can exercise the following rights at any time:

  • Access: to know whether we process your data and obtain a copy.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to request the deletion of your data (for example, to unsubscribe from the newsletter).
  • Restriction of processing.
  • Portability: to receive your data in a structured, machine-readable format.
  • Objection to processing based on legitimate interest.
  • Withdrawal of consent, without affecting the lawfulness of prior processing.

To exercise them, email nacho@nachoconesa.com with the subject “Data Protection”. We will reply within one month.

If you consider that your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

5. Minors

This blog is not aimed at children under 14. If you are under 14, please do not subscribe to the newsletter.

6. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. The website is served exclusively over HTTPS and the subscriber list is not publicly accessible.

7. Changes to this policy

We may update this policy to reflect legal changes or changes in how the blog works. The date of the last update is shown at the top of this page.