Legal
Privacy Policy.
Last updated: May 2026
1. Who is responsible for your data?
The data controller is Enrique Velasco Mairal, a freelance
Rigging Supervisor based in Spain.
Contact: enriquevelmai[at]hotmail.com
2. What data is collected and why?
The only personal data collected on this site is your email address, and only if you voluntarily subscribe to blog notifications.
- Purpose: to send you an email when a new blog post is published.
- Legal basis: your explicit, freely given consent (Art. 6.1(a) GDPR / LOPD-GDD Art. 6).
- Double opt-in: after submitting the form you will receive a confirmation email. Your address is only added to the mailing list once you click the confirmation link.
- You may withdraw consent at any time by unsubscribing.
No other personal data (name, location, browsing behaviour) is collected or stored.
3. How long is your data retained?
Your email address is retained until you unsubscribe or request deletion. Unsubscribing deletes your address immediately and permanently from the self-hosted database — there is no retention period and no backup copies in a third-party service.
4. Where is your data stored and who can access it?
Subscriber email addresses are stored in a self-hosted, encrypted-at-rest database (SQLite) running on a private server operated by Nominalia (CDMON Network S.L.) (nominalia.com), a Spanish hosting provider located in the EU. No external email marketing platform, mailing-list SaaS, or analytics service receives or stores your address.
When a new post notification is sent, your email address is passed to Nominalia's SMTP infrastructure solely for the purpose of delivering that single email. Data processed within the EU by Nominalia, a Spanish hosting provider subject to GDPR. Nominalia privacy policy →
Your data is never sold, rented, or shared with any other party.
5. Your rights
Under GDPR (Art. 15–22) and LOPD-GDD, you have the right to:
- Access — request a copy of the data held about you.
- Rectification — correct inaccurate data.
- Erasure — request deletion of your data ("right to be forgotten").
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing of your data.
- Withdraw consent — at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, email enriquevelmai[at]hotmail.com. Requests will be handled within 30 days.
If you believe your rights have been violated, you may lodge a complaint with Spain's supervisory authority:
Agencia Española de Protección de Datos (AEPD) —
aepd.es
6. Unsubscribe
You can unsubscribe at any time using the link included at the bottom of every notification email, or by visiting the unsubscribe page directly.
7. Cookies
This site uses only strictly necessary cookies for basic functionality (such as maintaining a session). No tracking, analytics, advertising, or third-party cookies are used. Under the ePrivacy Directive, consent is not required for essential cookies only.
If this changes in future (for example, if analytics are added), this policy will be updated and a consent banner will be shown.
8. Changes to this policy
This policy may be updated from time to time. The "last updated" date at the top of this page will reflect any changes. Significant changes will be communicated via the blog.