Privacy and cookies policy

Data controller

LIGHT NOTES SL — tax number ESB88361274
Matilde Hernández 31, 1C. 28019 Madrid, Spain
Telephone: +34 691 480 862
Email: hello@lightnotes.es

Please use that email address for any question relating to the protection of your data.

Applicable law

This policy complies with Spanish and European data protection legislation, specifically:

• Regulation (EU) 2016/679 of 27 April 2016, the General Data Protection Regulation (GDPR).
• Spanish Organic Act 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
• Spanish Act 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

What data we collect, and why

This website only collects personal data when you write to us voluntarily, through the contact form or by email. The data processed is identifying data: your name, your email address and whatever you choose to write in your message. No special categories of data within the meaning of Article 9 GDPR are processed.

The purpose is to answer your enquiry, prepare any proposal you request and, where applicable, maintain the commercial relationship arising from it.

In addition, and only if you expressly allow it, this site uses Google Analytics 4 to compile usage statistics: pages visited, time spent, device and browser type, approximate country or city, and referring page. Google truncates the IP address before storing it, so it is never kept in full, and that information is not combined with any other data you have given us. The purpose is purely statistical: understanding which content is of interest so we can improve it. If you do not consent, none of this data is collected.

Legal basis

The legal basis is your consent, given when you send us the form, together with the performance of pre-contractual measures at your request. You may withdraw your consent at any time by writing to hello@lightnotes.es. Withdrawing consent is as easy as giving it and does not affect the lawfulness of processing carried out beforehand.

Retention period

We keep your data for as long as the commercial relationship lasts and thereafter for the periods required by law to address any liabilities — generally six years under Spanish commercial law and four under tax law. If your enquiry does not lead to a commercial relationship, your data is deleted within a maximum of one year.

Recipients

Your data is not disclosed to third parties except where required by law. Our web hosting provider and our email provider may access it as data processors, solely in order to provide their service, under a data processing agreement and with servers located within the European Economic Area.

International transfers. If you accept analytics cookies, the statistical data described under «Cookies» is processed by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as data processor, which may transfer it to Google LLC in the United States. That transfer relies on the European Commission adequacy decision of 10 July 2023 concerning the EU–US Data Privacy Framework, to which Google LLC is certified, supplemented by the standard contractual clauses in Google's data processing terms. If you do not accept analytics cookies, no international transfer of data takes place.

Your rights

You may exercise the following rights at any time by writing to hello@lightnotes.es or to the postal address above, quoting the reference «RGPD-lightnotes.es» and proving your identity:

• Access: find out whether we process your data and obtain a copy of it.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask for your data to be deleted when it is no longer necessary.
• Restriction: ask for processing to be suspended in certain circumstances.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to the processing of your data.
• Not to be subject to automated decisions, including profiling.

If you believe your data is not being handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.

Minors

Under Article 7 LOPDGDD, only those aged 14 or over may give consent to the processing of their personal data. Below that age, the consent of a parent or guardian is required.

Security

We apply technical and organisational measures appropriate to the risk in order to guarantee the security and confidentiality of your data. The Website is served entirely over an encrypted SSL connection. Should a security breach occur that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

Cookies

A cookie is a small file a website stores in your browser. This site uses a single analytics tool, Google Analytics 4, and only if you allow it. There are no advertising pixels, no personalisation cookies, no commercial profiling, and no sale or disclosure of your data to advertisers.

This site sets no first-party cookies at all. Everything described below is a third-party analytics cookie, subject to your consent.

Prior consent

The first time you visit, a notice appears at the bottom of the screen with two buttons of equal size and equal ease of use: Accept and Reject. Until you press «Accept», no Google script is downloaded and no analytics cookie is set.

Making no choice counts as rejection. Continuing to browse, scrolling or dismissing the notice are not treated as acceptance, and nothing is sent until you allow it.

Your decision is stored in your browser's local storage (localStorage, key ln-consent), not in a cookie, and expires after twelve months, at which point you are asked again.

Cookies set if you accept

• _ga — Provider: Google. Purpose: distinguishing visitors by means of a random identifier. Duration: 2 years.
• _ga_XPSV9QDBV4 — Provider: Google. Purpose: maintaining Google Analytics 4 session state. Duration: 2 years.

These are third-party cookies with an analytics purpose. They cannot identify you by name or access the contents of your device. You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Changing your mind

You may withdraw your consent — or give it, if you rejected before — at any time through the «Cookie preferences» link in the footer of any page. On rejection, any _ga cookies are deleted from your browser and nothing further is sent. Withdrawing consent is as easy as giving it.

You can also install the Google Analytics opt-out browser add-on, which blocks measurement across every website you visit.

YouTube and Vimeo videos

Project pages and journal entries include videos hosted on YouTube and Vimeo. Those videos are not loaded until you press play: until then you only see a still image served from this site, and no connection is made to those platforms, nor is any of their cookies set.

Once you press play, YouTube or Vimeo may set their own cookies in your browser, subject to their respective policies. We use the tracking-limited modes — youtube-nocookie.com and Vimeo's «do not track» parameter — but the processing is those platforms' responsibility:

• YouTube (Google): policies.google.com/technologies/cookies
• Vimeo: vimeo.com/cookie_policy

Disabling cookies in your browser

You can disable, reject and delete the cookies stored on your device from your browser settings. The procedure varies by browser, so it is worth checking its instructions. If you reject third-party cookies you can still use the Website normally, although embedded videos may not play.

Changes to this policy

We may amend this policy to reflect changes in legislation or in how the Website works. Changes are not notified individually, so we recommend checking this page from time to time. The date of the latest update is always shown at the end of the document.