Privacy policy
What data elrincondeisma.com collects, what it's used for, and how to exercise your rights.
Last updated: 2026-08-22
This policy explains how personal data of visitors to www.elrincondeisma.com is handled, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).
1. Who the data controller is
- Owner: Ismael Catala
- Tax ID: 52892862S
- Address: Madrid (España)
- Contact email: ismael@elrincondeisma.com
- Website: https://www.elrincondeisma.com
2. What data is collected and why
Newsletter subscription
If you subscribe, your email address and the sign-up date are collected.
- Purpose: to send you the newsletter with content about development, infrastructure and automation, and to let you know about project news.
- Legal basis: your consent (art. 6.1.a GDPR), given when you submit the form and withdrawable at any time.
- Retention: until you unsubscribe or request erasure. An unsubscribe link is included in the footer of every email.
Email correspondence
If you write to me, the data included in your message is processed.
- Purpose: to handle and answer your enquiry.
- Legal basis: your consent and, where the enquiry concerns a contracted or prospective service, performance of a contractual or pre-contractual relationship (art. 6.1.b GDPR).
- Retention: as long as needed to handle the enquiry, plus any applicable statutory limitation periods.
Technical browsing data
The hosting provider (Vercel) records technical information — IP address, browser type, requested pages and request time — in its activity logs. Those logs are not cross-referenced with any other data nor used to identify you.
- Purpose: to keep the service running, ensure its security and detect incidents or abuse.
- Legal basis: legitimate interest in the security and correct operation of the site (art. 6.1.f GDPR).
- Retention: the period Vercel applies to its technical logs; the site owner keeps no copy of them.
3. This site does not profile you
No profiles are built, no automated decisions with legal effects are taken, and there is no behavioural advertising.
Fonts are served from this domain and video thumbnails are processed on the server before being displayed, so browsing sends no requests to third-party servers and does not disclose your IP address to them.
The cookie policy covers browser storage in detail.
4. Who else has access
Only the providers needed to run the service, acting as processors under a contract compliant with article 28 GDPR:
| Provider | Purpose | Where data is processed |
|---|---|---|
| Vercel Inc. | Website hosting and server technical logs | United States, with an edge network in the European Union |
| Resend, Inc. | Newsletter list management and delivery | United States |
Both providers are established in the United States, so an international transfer of data outside the European Economic Area takes place. That transfer relies on the standard contractual clauses approved by the European Commission (art. 46.2.c GDPR), which form part of the data processing agreement signed with each of them.
Their terms are available at vercel.com/legal/dpa and resend.com/legal/dpa.
No data is shared with any other third party, except where legally required.
5. Your rights
You may exercise at any time the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent without affecting the lawfulness of processing carried out before withdrawal.
To do so, write to ismael@elrincondeisma.com stating which right you are exercising. A copy of an identity document may be requested if there is reasonable doubt about your identity. Requests are answered within one month at most.
If you believe the processing does not comply with the regulation, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
6. Security
The site is served entirely over HTTPS and reasonable technical and organisational measures are applied to protect data against loss, unauthorised access or alteration. No system is infallible, but any breach posing a risk to your rights will be notified under article 33 GDPR.
7. Minors
This site is aimed at people over 14. If you are younger, do not submit personal data without authorisation from your legal guardian.
8. Changes to this policy
If the way data is handled changes, this text and its revision date will be updated. Where the change is substantial and affects processing based on your consent, you will be notified by email.