El Rincón de Isma
ESEN
For companies

Privacy policy

I ask for as little data as possible and only for what you request. Here are the details, under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018.

Last updated: September 30, 2026

Who is responsible

  • Owner: Ismael Catalá
  • Tax ID (NIF): 52892832S
  • Address: Calle Virgen de la Oliva, 10, 28037 Madrid
  • Email: ismael@elrincondeisma.com

What data I process

  • Your email address, when you subscribe to the newsletter, request a guide or join the cohort waitlist. I also store the language and the page you signed up from.
  • Whatever you send me if you email me: name, email and your message.
  • If you book a call or buy a service: name, email, the chosen date, anything you tell me in the booking and billing details. Payment is processed by Stripe; I never see or store your card details.
  • If you take part in the community: your profile (name, username and avatar from your Google or GitHub account, and the email you sign in with) and what you post (threads, replies, reactions and images).
  • Technical data generated by any visit (IP address and browser) in the server logs, for security only.
  • Aggregated, anonymous visit statistics (page views, country, device) with Umami, which uses no cookies and doesn't identify anyone.

Purposes and legal basis

  • Sending you the newsletter and the material you request (PDF, repo guide, cohort announcement). Legal basis: your consent, confirmed through double opt-in by email.
  • Replying to your messages. Legal basis: your consent when you write to me.
  • Delivering the services you buy (calls, workshops, rollouts, cohort) and invoicing them. Legal basis: performance of the contract and legal accounting and tax obligations.
  • Managing your community account and showing what you post. Legal basis: providing the service you request when you sign up. Kept until you delete your account, which you can do from the community itself.
  • Keeping the website secure and preventing abuse. Legal basis: legitimate interest.

I don't make automated decisions or build profiles with your data, and I never sell it or share it for advertising.

How long I keep it

  • Newsletter and lists: until you unsubscribe. Every email has a one-click unsubscribe link.
  • Messages: as long as needed to reply.
  • Customers: as long as the law requires (generally 6 years for commercial and 4 for tax obligations in Spain).
  • Server logs: the minimum needed for security.

Who else processes it

I use providers that process data on my behalf, under contract and with safeguards:

  • Kit (Kit Inc., USA): newsletter delivery and subscriber management.
  • Stripe (Stripe Payments Europe, Ltd., Ireland): payments for services.
  • Supabase (Supabase Inc., USA): database, accounts and image storage for the community.
  • Cal.com (Cal.com, Inc., USA): booking calendar for the diagnostic call.
  • Google (Google Ireland Ltd.): email (Google Workspace), calendar and video call link for bookings.
  • Vercel (Vercel Inc., USA): hosting of this website. It logs technical data from visits, such as IP addresses, for security and operation.

All other services run on my own servers in Spain.

Kit, Cal.com, Supabase and Vercel are based in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Your rights

You can request access, rectification, erasure, objection, restriction and portability of your data, and withdraw your consent at any time, by writing to ismael@elrincondeisma.com. I'll reply within one month at most.

If you think I haven't handled your data properly, you can file a complaint with the Spanish Data Protection Agency (aepd.es) or your local authority.

Minimum age

The forms on this website are for people aged 14 or over. If you're younger, please don't send me your data.

Changes

If I change this policy you'll see it here with the update date. If the change is significant, I'll let you know by email.