Privacy policy
1. Data controller
The data controller is Emili Cerveró Moreno (NIF 53359743L), with registered address at Montserrat (València), Montserrat (la Ribera Alta, València) (València), España. Contact: info@diarimontserrat.es.
2. Purpose and legal basis
We process data for the following purposes:
- Contact and news submissions: handling your enquiries or the news stories you send us. Basis: your consent.
- Participation in the Blogs section: managing your proposal (contact, assessment, editing, translation, publication and related notices) and, if it is published, sharing the text under your byline. Basis: your consent and the publication authorisation you give us in the form.
- Audience measurement: producing aggregate statistics about use of the site through Google Analytics 4, only if you accept analytics cookies. Basis: your consent.
- Advertising: showing ads through Google AdSense, only if you accept advertising cookies. Basis: your consent.
No automated decisions are taken and no profiles are built from your data.
2.1. Participation in the Blogs section
When you fill in the participation form we collect: your full name, alias or pseudonym (optional), town, email address, telephone (optional) and the details of your proposal (title, subject, your connection to it, expected frequency and whether you have photographs), as well as the texts, images and emails you send us afterwards. Your name or alias, the title and the text of the blog are published; no other data is published.
The website form does not send data to any server of the paper: it opens your email programme with the message already written and you send it yourself, so the message also travels through your email provider (Google, Microsoft or another), under its own privacy policy. We receive it in the section mailbox, blogs@diarimontserrat.es.
If the text includes data about health, religion, sexual orientation, ethnic origin or trade-union membership, we need your explicit consent to publish it; the form has a specific box for this.
If you are under 18, publication requires your family’s authorisation. If you are under 14, consent for the processing of your data is given by your parent or guardian.
3. Data retention
In general, data is kept for as long as necessary to handle the enquiry or story submitted and, where applicable, for the relevant legal retention periods. In the Blogs section:
- Proposals that are never published: 12 months from the last communication, after which they are deleted.
- Active collaborations, texts and consents: for the duration of the collaboration and for 2 years afterwards, to address possible liabilities.
- Published blogs: they remain in the paper’s archive. You may ask for them to be withdrawn; this is assessed case by case, weighing the right to information and the archival function.
4. Recipients
Data is not shared with third parties except where required by law or where necessary to provide a requested service and an appropriate legal basis applies.
Email and website hosting run on Hostinger as technology provider and data processor, under the corresponding processing agreement. If the provider used services outside the European Economic Area, the safeguards laid down in the GDPR (standard contractual clauses) would apply.
For audience measurement and advertising, the site relies on Google Ireland Limited as a technology provider, with prior consent that you may give or refuse. Details of the cookies and the links to turn off personalised advertising are in the Cookie policy.
5. Rights of data subjects
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw your consent at any time, by writing to info@diarimontserrat.es or to blogs@diarimontserrat.es in the case of the Blogs section. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, nor does it by itself require a published blog to be withdrawn: its continuity in the archive is assessed under section 3.
6. Security measures
Appropriate technical and organisational measures are applied to ensure data security, in accordance with the GDPR, including restricted access to the mailbox, strengthened email authentication and minimisation of the data collected. If a security breach involving a risk to your rights occurred, it would be notified to the Spanish Data Protection Agency within 72 hours and, where the risk is high, also to the individuals affected.
7. Updates
This policy may be modified to adapt to regulatory or service changes. The date of the last update is shown at the top.