DRAFT STRUCTURE. Bracketed parts need legal review before launch. Spanish version at /es/privacidad/.
1. Who is responsible
[Controller: Tim Akhtyamov, autónomo, address and tax ID in Spain. To be completed with legal review.]
2. What we collect
Your email address, the newsletters you chose (EN, ES or both), the page you subscribed from, and the date you subscribed and confirmed. [Whether emails are opened and links clicked — only if open and click tracking is switched on in Brevo; decide before launch.]
3. Why, and on what legal basis
To send the newsletters you asked for. Legal basis: your consent (GDPR art. 6(1)(a)), which you can withdraw at any time by unsubscribing.
4. Who processes it for us
[Brevo (Sendinblue SAS, France) — subscriber list and email delivery. Vercel Inc. (USA) — website hosting; transfer safeguards to be listed. No analytics or advertising tools.]
5. How long we keep it
[While you are subscribed, plus a short period after unsubscribing to honour the unsubscribe. Exact period to be set.]
6. Your rights
Access, correction, deletion, portability, objection and withdrawal of consent. Write to the contact below. You can also complain to the Agencia Española de Protección de Datos (AEPD).
7. Cookies
The website sets no cookies and loads no third-party scripts. Fonts are served from xyrails.com itself.
8. Contact
[Privacy email address]. Telegram @timur77 for general questions.