Privacy policy
Last updated: 6 October 2026
Draft pending legal review. Details in square brackets will be completed before publication.
This is a translation. In case of discrepancy, the Spanish version prevails.
This policy explains what personal data we process when you visit this website or write to us, what we use it for and what rights you have. It follows Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Once the Elisaber platform is available, its use will have its own privacy policy.
1. Data controller
- Controller: [Razón social o nombre del titular]
- Tax ID: [NIF]
- Address: [Domicilio completo]
- Contact: contacto@elisaber.example
2. What data we process and why
We only process the data needed for each purpose:
| When | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| You email us, including to request early access | Email address, your name if you include it, and the content of your message | Replying to you and, if you ask, letting you know when you can start using Elisaber | Your consent, given by writing to us (art. 6.1.a GDPR), which you can withdraw at any time | Until you withdraw your consent or, at most, 12 months after launch |
| You browse the site | IP address, browser, requested page, date and time (server technical logs) | Serving the site and keeping it secure | Legitimate interest in the secure operation of the site (art. 6.1.f GDPR) | The hosting provider’s technical period, limited to what security requires |
| You browse the site (visit statistics) | Page visited and referring page, browser, operating system, device type, screen size, language and country. Your IP address is only used on the fly to work out the country and an anonymous identifier that changes every month; it isn’t stored | Knowing, in aggregate and anonymously, how many visits the site gets and how it’s used, to improve it | Legitimate interest in understanding how the site is used (art. 6.1.f GDPR) | 25 months |
We don’t use your data for profiling or automated decision-making, and we don’t sell it. This site doesn’t use tracking cookies (see the cookie policy) and serves its fonts from its own server, without connecting to third parties. For visit statistics we use Umami, an open-source tool we host ourselves (analytics.elisaber.com): it doesn’t use cookies, doesn’t identify you, respects your browser’s “Do Not Track” setting and its data isn’t shared with anyone.
3. Who else accesses the data
We don’t share your data with third parties unless required by law. We rely on providers acting as data processors, under contracts that comply with article 28 GDPR:
- Website hosting: [Proveedor de alojamiento]
- Email: [Proveedor de correo electrónico]
4. International transfers
If any of these providers processes data outside the European Economic Area, it will only do so with the safeguards required by the GDPR: a country covered by a European Commission adequacy decision (such as companies certified under the EU-U.S. Data Privacy Framework) or the Commission’s standard contractual clauses.
5. Your rights
You can exercise the following rights at any time, free of charge:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete your data.
- Objection and restriction: object to processing or ask us to restrict it.
- Portability: receive your data in a structured format.
- Withdraw your consent, without affecting prior processing.
Email us at contacto@elisaber.example stating the right you want to exercise. We’ll reply within one month. If you believe we haven’t handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority of your country.
6. Minors
If you are under 14, please ask your parent or legal guardian to write to us on your behalf: in Spain, processing the data of children under 14 based on consent requires the consent of their legal representatives (art. 7 LOPDGDD). If we find we have received data from a child under 14 without that consent, we will delete it.
7. If you are outside the European Union
We apply this same policy to everyone, wherever they are. If the law of your country grants you additional rights, you can exercise them through the same channel.
8. Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access, such as encrypting the site’s communications (HTTPS).
9. Changes to this policy
If we change this policy, we will publish the new version on this page with its update date. If the change is significant and we have your email, we will let you know.