Privacy Policy
Last updated: [DD Month YYYY]
This policy explains what personal data this website collects, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and applicable national law.
1. Who is responsible (data controller)
Roberto Marín Muñoz
[Full postal address]
Email: roberto@robertomarinmunoz.com
2. What data we collect and why
| Where | Data collected | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Contact form | Name, email address, subject, message content | To respond to your enquiry (booking, press, collaboration) | Art. 6(1)(a) consent, given via the form's checkbox; Art. 6(1)(f) legitimate interest in handling correspondence |
| Newsletter | Email address | To send updates about releases and shows | Art. 6(1)(a) consent, confirmed by double opt-in |
| Server access logs | IP address, browser/user agent, date and time of the request, page requested | Security, abuse prevention and fault diagnosis | Art. 6(1)(f) legitimate interest in a secure, working website |
| Video playback (opt-in) | Data processed by YouTube once you click play on an embedded video | Displaying the video you chose to load | Art. 6(1)(a) consent, given by clicking play after accepting the "external media" cookie category |
3. Recipients and processors
Your data may be processed by the following providers acting on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (Lightsail) | Web hosting | [hosting region, e.g. EU (Ireland)] |
| Strato AG | Domain registration and email | Germany (EU) |
| Sendy (self-hosted) | Newsletter delivery | [server location / outbound SMTP provider, e.g. Amazon SES – EU region] |
We do not sell personal data to anyone, and we do not use it for advertising.
4. International transfers
Where a provider listed above processes data outside the European Economic Area, transfers are safeguarded by that provider's Standard Contractual Clauses or an equivalent adequacy mechanism. [Confirm and name the safeguard actually in place once providers/regions are finalised.]
5. How long we keep your data
- Contact form messages: kept only for as long as needed to handle your enquiry, then deleted — typically within [12 months].
- Newsletter: kept until you unsubscribe.
- Server logs: kept for a short period for security purposes, typically [14–30 days], then deleted or anonymised.
6. Cookies and similar technologies
Details of every cookie and locally-stored value used on this site, and how to control them, are in our Cookie Policy.
7. Your rights
Under the GDPR you have the right to:
- request access to your personal data (Art. 15);
- request correction of inaccurate data (Art. 16);
- request erasure of your data (Art. 17);
- request restriction of processing (Art. 18);
- receive your data in a portable format (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent at any time, without affecting processing carried out before withdrawal;
- lodge a complaint with your national data protection supervisory authority.
To exercise any of these rights, contact roberto@robertomarinmunoz.com.
8. Children
This website is not directed at children, and we do not knowingly collect personal data from children.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.