1. Controller
Lennart Ludwig, Calle Ancha de la Virgen 9, 18009 Granada, España · Email: hola@deinspanien.com
2. Which data do I process, for what purpose and on what legal basis?
| Purpose | Data | Legal basis | Storage period |
|---|---|---|---|
| Hosting / server logs | IP address, time, browser | legitimate interest (Art. 6(1)(f) GDPR) | briefly, as specified by the host |
| Contact form | Name, email, message | consent / pre-contractual measures (Art. 6(1)(a), (b)) | until the request is dealt with, then statutory periods |
| Newsletter / checklist | Email, first name if given | consent (double opt-in) | until you unsubscribe |
| Invoices | Billing data | legal obligation (Art. 6(1)(c)) | statutory retention periods under Spanish law |
| Statistics (if activated) | pseudonymised usage data | consent via cookie banner | depending on the tool |
3. Recipients / processors
IONOS (hosting, EU) and, where used, email marketing and appointment booking services. Any transfers to third countries take place on the basis of an adequacy decision (e.g. EU-US Data Privacy Framework) or standard contractual clauses.
4. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw any consent you have given. Requests to: hola@deinspanien.com.
Right to lodge a complaint with the supervisory authority: Agencia Española de Protección de Datos (AEPD), www.aepd.es.
5. Automated decisions
No automated decision-making or profiling takes place.
Audience measurement without cookies
This website counts page views and clicks on individual buttons with its own tool on its own server. No cookies are set, no IP addresses are stored and no user profiles are created. The only thing stored is how often a page was viewed on a given day. No data is transferred to third parties.
Waiting list
If you sign up to be notified about a playbook or news, we store your email address, the chosen topic and the time. We only write to you after you have clicked the link in the confirmation email (double opt-in). The legal basis is your consent. You can withdraw it at any time: a message to hola@deinspanien.com is enough, and we will delete your address. The data is stored on our server at IONOS and is not passed on to third parties.
Newsletter and checklist
If you sign up for the checklist and the newsletter, I store your email address, optionally your first name, the interest you stated, the page on which you signed up, and the date and time of sign-up and confirmation. To protect against misuse, I also store a shortened, non-reversible check value of your IP address. Sign-up uses the double opt-in procedure: you only receive emails after clicking the link in the confirmation email.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every email or by sending a message to hola@deinspanien.com. The newsletter is sent with my own software on my web server at IONOS; the data is not passed on to other newsletter services.
Analysis: The emails contain a small tracking pixel and links with a personal identifier. This lets me see whether and when an email was opened and which links were clicked. This analysis serves to improve the content and is part of your consent. If you do not want this, you can unsubscribe or switch off image loading in your email program.
Storage period: Your data remains stored until you unsubscribe. After you unsubscribe, I only keep your email address and the date of unsubscription so that I can prove you no longer receive emails. On request, I will delete this information completely as well.
Appointment booking
If you book an initial consultation, I store your name, email address, optionally your phone number, topic, message, appointment and the page on which you booked, in order to prepare and hold the consultation (Art. 6(1)(b) GDPR). The consultation takes place via Jitsi Meet (meet.jit.si, operated by 8×8 Inc., USA). Technical connection data is transferred to the operator in the process. You do not need an account. I delete the data when it is no longer needed for the assignment and for legal obligations.
Purchase of playbooks
Payment is handled by a payment service provider (for example Stripe Payments Europe Ltd., Ireland). You only enter your payment details there. I receive your name, email address, amount and time in order to send you the PDF and to meet my accounting obligations (Art. 6(1)(b) and (c) GDPR).
Customer reviews
After an assignment, I ask you by email for a review. Your review only appears with your express consent and with the name you provide yourself (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by email, and I will then remove the review.