Your data
Privacy policy
We collect as little as we can: no advertising trackers, no analytics cookies, no user accounts. This page explains the little we do process and why.
Who is responsible (data controller)
- Controller
- [TO FILL: company legal name]
- Tax ID (CIF/NIF)
- [TO FILL: CIF]
- Address
- [TO FILL: registered address, Spain]
- Privacy contact
- privacy@kerfandpress.com
We are based in the European Union, so the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD) apply to everything we do, whoever you are.
What we process, why, and on what legal basis
| Activity | Data | Purpose | Legal basis | Kept for |
|---|---|---|---|---|
| Delivering the website | IP address, browser user agent, requested URL, time (processed by Cloudflare) | Serve pages, protect against attacks and abuse | Legitimate interest (Art. 6(1)(f) GDPR): running a secure website | Per Cloudflare’s log retention; we do not keep our own copy |
| Visit statistics | Page views, referrer, country, device type, in aggregate (Cloudflare Web Analytics, no cookies) | Know which pages are useful | Legitimate interest (Art. 6(1)(f)) | Aggregates only |
Retailer link clicks (/go/) | Product, retailer, page and link position, country derived by Cloudflare, time. No IP address, no cookie, no identifier. | Count clicks, check links work, reconcile commissions | Legitimate interest (Art. 6(1)(f)) | Raw events about 3 months (Cloudflare Analytics Engine retention); monthly totals kept longer |
| Newsletter | Email address, sign-up date and page, consent wording version | Send the newsletter you asked for | Consent (Art. 6(1)(a)); you can withdraw any time | Until you unsubscribe, then deleted within 30 days (a suppression record may be kept so we never email you again) |
| Spam protection on forms | Browser and device signals checked by Cloudflare Turnstile | Stop automated sign-ups | Legitimate interest (Art. 6(1)(f)) | Not stored by us |
| Emails you send us | Your address, name if given, message | Reply and keep a record of corrections | Legitimate interest (Art. 6(1)(f)) | Up to 3 years |
We do not sell personal data, share it for cross-context behavioral advertising, or use it for automated decisions that affect you.
Who processes data for us
- Cloudflare, Inc. (hosting, security, statistics, click counting, newsletter database, Turnstile), under Cloudflare’s data processing addendum.
- Email delivery provider for the newsletter: [TO FILL: newsletter email provider name + link to its privacy policy].
- Email hosting for our mailboxes: [TO FILL: mailbox provider (Cloudflare Email Routing forwards to …)].
International transfers
Cloudflare is a US company with servers worldwide. Transfers outside the EU/EEA rely on the EU–U.S. Data Privacy Framework where the recipient is certified, and on the European Commission’s Standard Contractual Clauses included in the processor’s data processing terms. [TO FILL: confirm transfer mechanism for each processor]
When you leave for a retailer
When you click a "Check price" link, you go to the retailer’s site. The retailer or affiliate network may set its own cookies to record that you came from us, so they can pay a commission. That happens on their site under their privacy and cookie policies, not ours.
Your rights
You can ask us to access, correct or delete your data, to restrict or object to processing, and to receive your data in a portable format. Where we rely on consent, you can withdraw it at any time (every newsletter has an unsubscribe link). Write to privacy@kerfandpress.com; we reply within one month.
You can also complain to a data protection authority. Ours is the Spanish Agencia Española de Protección de Datos (aepd.es); you may also contact the authority where you live.
Readers in the US, UK, Canada and Australia
We apply the same GDPR-level protections to all readers. UK readers may also complain to the Information Commissioner’s Office. California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we honor Global Privacy Control signals by default because we do no such selling or sharing.
Children
This site is for adults running businesses. We do not knowingly collect data from children under 16.
Changes
If we change how we process data, we update this page and its date. Material changes (for example, adding a new processor or any cookie that needs consent) will be announced on the site before they take effect.
Sources
Every spec and number on this page links back to where it came from.