Controller
- Site
- Campo Aplicado
- Controller
- Ismael Maldonado, in a personal capacity.
- Contact
- [email protected]
Data processed
The site processes the data needed for accounts and for the features each person uses:
- Account: username, email address, password stored in encrypted form, registration date and verification status.
- Contact: name, email address, category, message and the technical data attached to the submission, such as IP address and browser.
- Security: sessions, sign-in attempts, blocks and the logs needed to detect abuse or resolve incidents.
- Activity: comments, downloads and content changes where the feature requires it.
- Tools: the information each user chooses to enter, calculate or save.
Use of the information
The data is used to manage accounts, answer enquiries, run the tools, store the information chosen by the user and protect the site.
Legal basis
Each processing activity rests on one of these bases under article 6 of the GDPR:
- Account and tools: providing the service the person requests by registering and accepting the terms of use, article 6(1)(b).
- Contact messages: dealing with the enquiry of whoever writes in, article 6(1)(b).
- Security and abuse prevention: legitimate interest in keeping the site standing against bots, unauthorised access and overload, article 6(1)(f).
- Technical cookies: those strictly necessary for the session and for security, exempt from consent.
Providers and hosting
The site is hosted on a server contracted within the European Economic Area. Account email may be sent through an external delivery provider, also established in the EEA, where one is configured. There are no international data transfers outside the EEA, and no disclosures to third parties for commercial or advertising purposes.
To protect against automated access, spam and brute-force attempts on key forms (registration, contact and password recovery), Cloudflare Turnstile is used. This service evaluates technical browser parameters and the IP address solely to confirm that the request comes from a human user rather than a bot, without setting advertising cookies, without tracking browsing habits and without building user profiles.
Retention
Account data is kept while the account remains active or while it is needed to provide the service. Security and support logs are kept for a reasonable period to investigate incidents, defend rights or meet obligations. Once they are no longer needed, they are deleted or anonymised as appropriate.
Rights
You may request access, rectification, erasure, restriction of processing, objection and portability where applicable. To do so, write to [email protected] stating what you need and how we can verify that the request relates to your account.
If you believe the processing has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency, at aepd.es.