atroz.network
ES EN
Data protection

Privacy Policy

Last updated: July 2026

1. Information about the data controller

  • Controller: Diego Villalobos (Sole Trader / Self-Employed)
  • NIF (Tax ID): 29130439L
  • Address: Pl. Luis López Allué 2, coLABORATORIO Unit 4, 22001 Huesca, Spain.
  • Email: [email protected]
  • Website: https://atroz.network

2. Purpose of the processing

This website is purely informational and institutional in nature. During normal browsing, it does not collect personal data through forms or user accounts.

The only scenario in which the owner might process identifying personal data would be if the user decides to get in touch via email ([email protected]). In that case, the purpose of the processing would be:

  • To manage and respond to the request for information, inquiry or contact received.
  • To comply with the legal obligations that may arise from such communication.

The lawful basis for this processing is the user's express consent when initiating contact (art. 6.1.a GDPR) and, where appropriate, the legitimate interest of the controller in handling communications (art. 6.1.f GDPR).

3. Data retention

Personal data derived from an email communication will be kept for the time necessary to handle the request and, subsequently, for a general maximum period of 5 years to deal with possible contractual, legal or professional liabilities, unless a different legal period applies.

4. Recipients of the data

Personal data will not be transferred or communicated to third parties, except by legal obligation. Service providers necessary for the operation of the website, including Cloudflare as a provider of delivery, security and technical measurement services, the hosting provider, the email provider and Google Fonts if fonts are loaded from its servers, may process technical data to the extent strictly necessary to provide their services.

These providers may act as data processors or independent technology providers depending on the specific service. Where international data transfers occur, the safeguards provided by the GDPR will be used, such as adequacy decisions, standard contractual clauses or other valid mechanisms where applicable.

5. Rights of the data subjects

The user has the right to obtain confirmation as to whether the owner is processing personal data concerning them. Any data subject is entitled to:

  • Access: obtain information on whether their data is being processed and, where appropriate, access it.
  • Rectification: request the correction of inaccurate data or the completion of incomplete data.
  • Erasure («right to be forgotten»): request the deletion of their data when it is no longer necessary.
  • Restriction of processing: request the restriction of processing in certain circumstances.
  • Objection to processing: object to the processing of their data for reasons related to their particular situation.
  • Data portability: receive the data concerning them in a structured format.

To exercise these rights, the user may contact the controller by email ([email protected]). Additional documentation to verify identity will only be requested where there are reasonable doubts about the identity of the requester, and only the strictly necessary information will be requested.

Likewise, and especially if you consider that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), through its electronic headquarters (www.aepd.es) or by the legally provided means.

6. Security measures

The controller has adopted the technical and organizational measures necessary to guarantee the security of personal data and to prevent its alteration, loss, processing or unauthorized access, in accordance with the provisions of article 32 of the GDPR. The hosting of the website is carried out through providers that comply with the guarantees required by data protection regulations.

7. Web browsing and traffic data

During browsing, technical data necessary to deliver the website securely may be processed, such as IP address, access date and time, requested URL, HTTP headers, browser technical identifiers, operating system, access provider and security logs. These data are processed to provide the website, ensure its security, prevent abuse, debug errors and obtain aggregated technical metrics on operation and performance.

The website uses Cloudflare for content delivery, security, protection against malicious traffic and aggregated technical measurement through Cloudflare Web Analytics. This measurement is configured as necessary for security and performance, and is not used by the owner for behavioral advertising or commercial profiling.

The website may also use browser local storage to remember the language preference and the cookie notice acknowledgement. Detailed information is included in the Cookie Policy.

8. Changes to the Privacy Policy

The controller reserves the right to modify this Privacy Policy to adapt it to new legislative or jurisprudential developments, as well as to possible changes in the provision of services. In such cases, the changes introduced will be announced on this page sufficiently in advance of their implementation.

9. Language

This Privacy Policy is drafted in Spanish and in English for informational purposes. In the event of any discrepancy between the two versions, the Spanish version shall prevail and is the legally binding one.