Privacy Policy

1. Data Controller

The data controller for this website is:

José Carlos Alarcón Murillo
Málaga, Spain
Email: [email protected]

2. Data Collected

This website does not collect personal data directly from users (such as forms, accounts, or subscriptions).

However, limited technical data may be processed automatically:

• IP address (processed transiently)
• HTTP request metadata (browser type, timestamps, etc.)
• Security and system logs (server, firewall, fail2ban, backend)

3. Purpose of Processing

Data is processed strictly for:

• Ensuring proper operation of the website
• Maintaining system security and preventing abuse
• Debugging and infrastructure monitoring

No profiling, behavioral tracking, or analytics are performed.

4. Legal Basis

Processing is based on:

• Legitimate interest (Article 6(1)(f) GDPR) to ensure system security and functionality

5. Data Storage and Retention

• Logs are minimal and retained only for operational and security purposes
• No long-term storage of identifiable personal data is intended
• Data is periodically deleted or overwritten

6. Data Sharing and Processors

Data may be processed by the following service providers:

• Clouding.io (hosting infrastructure – EU)
• Google Firebase (Auth & Firestore) (EU region)
• Cloudflare (security and network services)

These providers process data strictly to deliver infrastructure and security services.

7. International Transfers

Some providers (e.g., Cloudflare or Google) may process data outside the European Economic Area under appropriate safeguards.

8. Cookies

This website:

• Does not use tracking cookies
• Does not use analytics tools
• Does not perform user tracking

Only strictly necessary technical mechanisms may be used to ensure functionality and security.

9. User Rights

Under GDPR, you have the right to:

• Access your data
• Request rectification or deletion
• Object to processing

To exercise your rights, contact:

[email protected]

10. Security Measures

Appropriate technical measures are implemented, including:

• HTTPS encryption
• Firewall and intrusion protection systems
• Access control for administrative areas
• Secure infrastructure configuration

11. Changes

This policy may be updated to reflect legal or technical changes.