Legal information

Privacy Policy

Last updated: April 20, 2026
Version: 1.0 · In compliance with GDPR (EU 2016/679)

1. Data controller

  • Identity: Pelayo José Lluna González
  • Region: Asturias, Spain
  • Contact email: info@pelayolluna.com
  • Website: https://pelayolluna.com

2. Information we collect

This website is exclusively informational. It has no contact forms, user registration, comments, or newsletter. The personal data that may be processed is as follows:

2.1 Navigation data (server logs)

The Nginx web server, hosted on a Raspberry Pi owned by the controller, automatically logs technical data for each request:

  • IP address (anonymized to the last octet in stored logs)
  • Date and time of the request
  • Requested URL
  • Browser type (User-Agent)
  • Referring page (Referer)

Legal basis: legitimate interest of the controller (Article 6.1.f GDPR) to ensure technical security of the service and prevent abuse.

Retention: logs are retained for a maximum of 30 days and then automatically deleted.

2.2 Analytics data (only with consent)

If the user accepts analytics cookies via the consent banner, Google Analytics 4 is activated with the following safeguards:

  • IP anonymization enabled
  • No data sharing with other Google products
  • No personalized advertising

Legal basis: explicit user consent (Article 6.1.a GDPR), revocable at any time.

Retention: according to Google Analytics settings (14 months by default).

3. Purpose of processing

  • Ensure proper technical functioning of the website.
  • Prevent and detect abusive uses or security attacks.
  • (Only with consent) Obtain aggregated usage statistics: most visited pages, average time, devices, etc.

4. Data recipients

Data is not shared with third parties except:

  • Google Ireland Limited (Google Analytics 4 data processor): only if the user has accepted analytics cookies. Google may transfer data to the United States, where it adheres to the EU-US Data Privacy Framework.
  • In case of legal obligation: to competent authorities that request it (courts, law enforcement).

5. User rights

In accordance with the GDPR, users may exercise the following rights:

  • Access: know what personal data is being processed.
  • Rectification: correct inaccurate data.
  • Erasure: request deletion of data when no longer necessary.
  • Object: object to processing based on legitimate interest.
  • Restriction: request limitation of processing in certain circumstances.
  • Portability: receive data in a structured format.
  • Withdraw consent: at any time, without retroactive effect.

To exercise these rights, the user may send an email to info@pelayolluna.com clearly stating the request and attaching a copy of an identity document.

6. Complaints to the supervisory authority

If the user believes that the processing of their data does not comply with applicable law, they may file a complaint with the supervisory authority in their country of residence or place of work.

7. Security measures

The data controller has adopted reasonable technical and organizational measures to ensure the security of personal data being processed. The server is protected with HTTPS (TLS), a firewall, and periodic security updates. However, no system is invulnerable, and the user acknowledges this inherent limitation of the Internet.

8. Modifications

This Privacy Policy may be modified to adapt to regulatory, jurisprudential, or technical changes. Users are advised to review it periodically.