Privacy policy

Usanzia handles very little personal data. We have no advertising, analytics, newsletter, comments or forms. This page explains what data we process, why, and what your rights are.

Who is responsible for your data

Data controller: Usanzia, the party responsible for the usanzia.com website.
Contact: hola@usanzia.com

For any privacy question, email us at that address.

What data we process and where it comes from

If you email us. We process your email address, your name if you include it, and whatever you tell us in your message. You provide this when you write to us. Please don't include anything that isn't needed for your enquiry.

If you visit the website. The site is hosted on Cloudflare. To serve pages and protect the site against attacks and automated traffic, Cloudflare processes technical data about each visit, such as your IP address, traffic routing data and browser or system configuration data. We don't use this data to identify you or to build profiles.

Why we use it

Emails: to read and reply to your message and, if you're reporting a mistake, to review it in line with our editorial policy.
Technical data: to keep the website running smoothly and protected against abuse and attacks.

We don't use your data to send you marketing or to make automated decisions about you.

Legal basis

Emails: our legitimate interest in responding to the messages we receive (Article 6(1)(f) GDPR). You start the conversation, and we only use your data to reply.
Technical data: our legitimate interest in running a secure, properly functioning website (Article 6(1)(f) GDPR).

How long we keep it

Emails: only for as long as we need to deal with your enquiry. We then delete them, and in any case within 12 months of receipt, unless we need to keep them to establish, exercise or defend legal claims. In that case they'll be kept, with access restricted, only for the relevant statutory period.
Technical data: retained by Cloudflare under its own policies, for as long as needed to provide the service and keep it secure.

Who else processes your data

We don't sell or share your data with third parties. The only providers with access are the ones we need to run the website and our email, acting as data processors on our behalf:

Cloudflare, Inc. Hosts the website (Cloudflare Pages), manages the domain and the network that serves our pages, and forwards emails sent to hola@usanzia.com (Cloudflare Email Routing). When forwarding, it checks that the sender is authentic and applies spam filters. See Cloudflare's privacy policy.
Our email provider, which hosts the mailbox that messages are forwarded to and from which we reply.

We may also have to disclose data to public authorities or courts where the law requires it.

International transfers

Cloudflare is headquartered in the United States and may process data outside the European Economic Area. According to Cloudflare, these transfers rely on its certification under the EU-U.S. Data Privacy Framework, which the European Commission has recognised through an adequacy decision (Article 45 GDPR), with the Commission's standard contractual clauses as an additional safeguard.

Cookies

Usanzia doesn't set any cookies of its own and uses no analytics, advertising or social media cookies. Posts from X that we cite are plain links, not embedded content.

Cloudflare may set a technical cookie when certain security features are switched on. For example, the __cf_bm cookie is used on sites with Cloudflare's bot protection features: it helps tell human visitors apart from automated traffic, expires after 30 minutes of inactivity and, according to Cloudflare, isn't used to track you across sites. If Cloudflare needs to show you a security check, it may store another cookie (cf_clearance) to remember that you've passed it. These cookies are strictly necessary for the site's security, so they don't require your consent under Spanish law (Article 22(2) of Law 34/2002, the LSSI). You can see the full list in Cloudflare's cookie documentation.

If we ever add analytics or third-party content that uses cookies, we'll only do so with a tool that asks for your consent, and we'll update this policy first.

Your rights

You can ask us at any time for:

Access: to find out whether we hold data about you and get a copy.
Rectification: to correct inaccurate data.
Erasure: to have your data deleted.
Objection: to stop processing your data on grounds relating to your particular situation.
Restriction: to keep your data but not use it, in the cases set out by law.
Portability: to receive your data in a structured format, where the legal conditions apply.

Email hola@usanzia.com and tell us which right you'd like to exercise. If we have reasonable doubts about your identity, we may ask for further information to confirm it. We'll reply within one month; for complex requests this can be extended by two further months, and we'll let you know.

For technical data processed by Cloudflare, please still contact us: we'll handle the request with Cloudflare as far as we're able.

Complaints to the AEPD

If you believe we haven't handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency, the Agencia Española de Protección de Datos (aepd.es), or with the supervisory authority in the EU country where you live or work. We'd appreciate the chance to put things right first, so please get in touch.

Children

Usanzia is aimed at professionals. If you're under 14, please don't send us personal data without the consent of your parent or guardian. If we find that we've received data from a child under 14 without that consent, we'll delete it.

Changes to this policy

We'll update this policy if the way we handle data changes — for example, if we add a form, a newsletter or analytics. We'll do so before the change takes effect and update the date below.