Privacy policy

This site collects the minimum it needs to work and to answer you. We do not sell data, we build no advertising profiles, and we share nothing with third parties beyond what is set out here.

Who the controller is

The data controller is CatalunyaInfo. You can write to catalunyatinforma@gmail.com or use the contact form.

What we process, and why

Browsing the site. You can read everything without giving any data or accepting anything. The server keeps technical, short-lived request logs so pages can be served and protected from abuse; those logs are held by the hosting provider and we do not use them to identify anyone.

Audience measurement. If you accept measurement, Google Analytics 4 gives us aggregate data on which pages are read. Legal basis: your consent, which you can withdraw at any time. If you decline, nothing from Google is loaded — not a single request.

Contact form. We process the name, email address, subject and message you send us, for the sole purpose of replying. Legal basis: your consent and our legitimate interest in answering an enquiry. Without those details we cannot reply.

The "was this useful?" rating. We store only the page, the language and a yes or no. There is no identifier, no session and no IP address, so an answer cannot be linked to a person.

We do not process special-category data, we do not knowingly process children's data, and we make no automated decisions with legal effects on you.

How long we keep it

Contact messages: up to 24 months from the last exchange, so an enquiry or correction can be traced. They are deleted afterwards.

Google Analytics data: 14 months, the maximum configured on the property.

Page ratings: indefinitely, because they are anonymous and aggregate from the outset.

Who we share it with

Nobody, other than the providers that make the service work and act as processors on our behalf:

International transfers

Server functions are pinned to the Paris (EU) region. Some providers may process data outside the European Economic Area; where they do, the transfer relies on the European Commission's standard contractual clauses or on a current adequacy decision.

Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given.

To do so, write to catalunyatinforma@gmail.com saying which right you wish to exercise. We reply within one month at most.

If you believe your request was not handled properly, you can complain to the Spanish Data Protection Agency (aepd.es) or, in Catalonia, to the Catalan Data Protection Authority (apdcat.gencat.cat).

Security

The site is always served over HTTPS. Editorial panel passwords are stored using key derivation (scrypt) and sessions are stored only as a cryptographic digest, so even a copy of the database yields no usable sessions.

No configuration secret is kept in the code repository.

Cookies

Every cookie we set, with its purpose and duration, is listed in the cookie policy.

Changes to this policy

If we change anything material we will update this page and the verification date on it. If a change affects a purpose that requires consent, we will ask again.