Privacy policy
Four kinds of processing in one table, each with its legal basis and retention period.
Controller
The data controller is David Franco Aguirre (GoRandom), Avenida Lehendakari Aguirre, 81 — 48015 Bilbao (Bizkaia), Spain, [email protected]. This site has no user accounts, no registration and no newsletter, so no profile of you exists on it. Regulation (EU) 2016/679 (the GDPR) and Spain’s Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights apply. There is no data protection officer: the site is small enough for the person who builds it to be the one who answers.
Processing, one by one
There are four and there is no fifth. Two of the four do not write any cookie until you say yes.
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to a message from you | Name, email address and the text you write in the form | Your own request for a reply (Art. 6.1.b GDPR) | Twelve months, then deleted |
| Serving the pages and coping with automated traffic | IP address, browser identification, page requested and time of the request | Legitimate interest (Art. 6.1.f GDPR): a public website with no defences stops working | Rotated within weeks |
| Counting how many people read what | Pages viewed and generic device information, with the IP truncated before it is stored | Your consent (Art. 6.1.a GDPR) | Up to 26 months, in aggregate |
| Serving the advertising that pays for this | Advertising identifiers stored in cookies and the page you were reading | Your consent (Art. 6.1.a GDPR) | Cookie by cookie, in the cookie policy |
Recipients and transfers
Nobody buys this data and nobody receives it for their own purposes. Three processors are involved, each limited to its task: the hosting provider, which keeps the server in the European Union; Cloudflare, which delivers the pages and filters hostile traffic; and Google, which serves the measurement and advertising code and only writes or reads its cookies if you have consented; without that permission it receives only a cookieless signal that a page has been viewed (Google Consent Mode), with no identifier linking it to you. Google explains its part in how it uses data from sites that use its services. Part of that infrastructure is outside the European Economic Area; those flows rely on an adequacy decision of the European Commission where one exists for the country concerned and, if not, on its standard contractual clauses.
Your rights and how to exercise them
You can ask for access to whatever there is and a copy (Art. 15), the rectification of an error (16), erasure (17), restriction of processing (18) and portability (20), and you can object to processing based on legitimate interest (21); you can also withdraw your consent to measurement and advertising whenever you like, at no cost and without anything else changing. An email to [email protected] is enough, with no form or set wording. You will receive a reply within one month.
Complaints to the AEPD
If the reply does not satisfy you, you can go straight to the supervisory authority without going through us: the Spanish Data Protection Agency (Agencia Española de Protección de Datos), at aepd.es. If you live in another European Economic Area state you can also contact the authority in your own country.
Last updated: October 2026.