Privacy policy

This policy complies with the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

Data controller

• Controller: Daniel Matilla Parrilla
• Tax ID (NIF): [NIF]
• Address: c/Marià Aguiló 44
• Contact email: dmatilla@periodistes.org

Appointing a data protection officer is not mandatory for this activity.

What data I process, what for and why

If you write to me through the form or by email

• Data: name, email address, organisation if you give it, the service you are interested in and your message.
• Purpose: to reply to you and, if you ask, to prepare a proposal.
• Legal basis: your consent and the pre-contractual steps you request (Article 6(1)(a) and 6(1)(b) GDPR).
• How long: as long as needed to deal with your enquiry. If it does not become an assignment, I delete the messages within 12 months at most.

If you book a call

• Bookings are made on the Google Calendar appointment page, run by Google Ireland Limited. There you enter your name, email and time, and a Google Meet video call is created.
• Purpose: to hold the call you requested.
• Legal basis: pre-contractual steps at your request (Article 6(1)(b) GDPR).
• How long: the same as for form messages.

If you take the ‘What does your communication need?’ test

• Data: your answers, your name, your email address and, if you give it, your organisation.
• Purpose: to prepare the free analysis, send it to you and suggest a call to present it.
• Legal basis: your consent (Article 6(1)(a) GDPR).
• How long: up to 12 months after sending you the analysis, unless you hire me. If you tick the newsletter box, I also use your email to send it to you until you unsubscribe.

If you subscribe to the newsletter

• Data: your email address.
• Purpose: to send you the newsletter, with ideas about communication and news about my services.
• Legal basis: your consent (Article 6(1)(a) GDPR and Article 21 LSSI-CE). You confirm your subscription through a double opt-in email.
• How long: until you unsubscribe, using the link at the end of each email.

If you hire me

• Data: the contact and billing details needed for the assignment.
• Purpose: to provide and invoice the service and to meet my tax and accounting obligations.
• Legal basis: the contract and legal obligations (Article 6(1)(b) and 6(1)(c) GDPR).
• How long: for as long as the relationship lasts and, afterwards, for the periods set by law. In general, 6 years for commercial records and 4 for tax records.

If you comment on the blog

• Data: name, email address, website if you give it, the comment and the IP address.
• Purpose: to publish the comment and prevent spam.
• Legal basis: your consent (Article 6(1)(a) GDPR).
• How long: for as long as the comment stays published.

When you browse the website

The server logs technical data, such as IP address, browser and page visited, to keep the website secure and fix errors. The legal basis is the legitimate interest in website security (Article 6(1)(f) GDPR). These logs are kept for a limited time.

I do not use analytics or advertising tools. YouTube and Vimeo videos only load if you accept them. I explain this in the cookie policy.

Who I share your data with

I do not sell or share your data with anyone, except where required by law. So that the website and my services work, these providers process some data on my behalf, under contract and with GDPR safeguards:

• Hostinger International Ltd. (Cyprus, EU): website hosting.
• My professional email provider, where I receive form messages.
• Brevo (France, EU): newsletter delivery.
• Google Ireland Limited (Ireland, EU): call bookings, video calls and, if you accept them, YouTube videos.
• Vimeo.com, Inc. (United States): Vimeo videos, only if you accept them.

Transfers outside the EU

Google and Vimeo may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework, recognised by the European Commission in its adequacy decision of 10 July 2023, or by the standard contractual clauses approved by the Commission.

Your rights

You can ask me at any time for access to your data, to correct or erase it, to restrict its processing or to give it to you so you can take it to another service. You can also object to processing and withdraw your consent, without affecting anything done before.

Write to me at dmatilla@periodistes.org with the subject ‘Data protection’. I will reply within one month at most.

If you believe I have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.

Minors

This website is not aimed at minors. If you are under 18, do not send me personal data without permission from your parent or guardian.

Security

I apply appropriate technical and organisational measures: an encrypted connection, password-protected access and providers that offer GDPR safeguards.

Changes to this policy

If I change this policy, I will say so on this page with a new update date.