GDPR & Data Protection
In one paragraph: SetuSpain is a static website. It has no accounts, no database and no server-side code of its own. It does not run analytics, does not show ads, does not use tracking cookies and does not have a mailing list. The only data stored about you sits in your own browser, and the only data we could receive is what you choose to send us in an email.
#1. Who is responsible for your data
The controller for the processing described here is SetuSpain. You can reach us at setuspain@proton.me.
We have not appointed a Data Protection Officer. Under Article 37 GDPR a DPO is required only where an organisation is a public authority, carries out large-scale systematic monitoring, or processes special categories of data at scale. None of these apply to this website, so no DPO is required and we do not claim to have one. Write to the address above and a person will read it.
#2. What is actually stored, and where
In your browser only
A small number of values are saved in your browser's local storage. They never reach us:
- Theme preference: light or dark mode.
- Notice dismissed, so the storage notice stops reappearing.
By our hosting provider
Standard access logs record your IP address, the time, the page requested and your browser user-agent. They exist to deliver pages and defend against abuse. We do not build profiles from them and do not combine them with anything else. Legal basis: legitimate interest, Article 6(1)(f) GDPR. Running a website securely is not possible without them.
If you email us
We hold your message and address for as long as it takes to deal with it, plus a reasonable period afterwards. Legal basis: legitimate interest in responding to correspondence. If you send an article we publish, your chosen author name appears on it. That is your decision, and we will change or remove it if you ask.
#3. What we do not do
- No analytics of any kind.
- No advertising and no advertising identifiers.
- No tracking or third-party cookies.
- No newsletter and no mailing list.
- No selling or renting of personal data.
- No automated decision-making or profiling by us.
#4. The article composer
The Write a post page runs entirely in your browser. What you type is held in your own browser's storage if you press Save draft, and is sent nowhere automatically. The page cannot publish to the site. You decide whether to send the finished file to us, and how.
#5. Your rights
Under GDPR you have the right to:
- ask what personal data we hold about you
- have inaccurate data corrected
- have data erased
- restrict or object to processing
- receive your data in a portable format
- withdraw consent where processing is based on consent
For an ordinary visitor there is usually nothing for us to give you, because we hold nothing that identifies you. If you have emailed us, those messages are the data we hold.
Write to setuspain@proton.me. We aim to reply within 30 days, extendable to 60 for genuinely complex requests, in which case we will tell you why.
#6. International transfers
Our hosting provider operates a global network, so pages are served from data centres in several countries and access logs may be processed outside the EEA, relying on the provider's Standard Contractual Clauses. We hold no separate database of our own in any country.
#7. Retention
- Browser storage: until you clear it. We cannot delete it for you.
- Hosting logs: the provider's own retention schedule, typically a short rolling window.
- Emails: while the matter is open, then deleted at periodic review.
#8. Children
This site is aimed at adults dealing with Spanish administrative procedures. We do not knowingly collect data from children.
#9. Complaints
If you think we have handled your data badly, tell us first. That is usually the fastest route. You also have the right to complain to your national supervisory authority. In Spain that is the Agencia Española de Protección de Datos (AEPD).
#10. Changes
Updated versions appear on this page with a new date at the top. We have no mailing list, so we cannot notify you by email and will not pretend otherwise.