This policy explains what personal data King of Dumbs processes and why, under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Controller
- Controller: Jaime Novillo Benito, private individual.
- Privacy contact: [email protected]
What data is processed and why
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Newsletter | Email and chosen language | Emailing you when there’s new content, in your language | Your consent (art. 6.1.a GDPR), with an unticked box and double opt-in | Until you unsubscribe. Every email has a link to do so |
| Analytics (Google Analytics 4) | Page views, usage events, device type, approximate location | Learning what gets read and improving it | Your consent (art. 6.1.a GDPR and art. 22.2 LSSI-CE). Without it, nothing loads | 14 months |
| Running the site | IP address and technical request data | Serving the site and protecting it from abuse | Legitimate interest (art. 6.1.f GDPR) | Whatever the hosting provider sets for its logs |
| Email contact | Whatever you include in your message | Replying to you | Your consent when you write | As long as needed to handle your request |
The newsletter isn’t active yet: the site doesn’t show the form or collect emails. What this page says about it will apply once it’s switched on.
No profiling and no automated decisions about you. Your site preferences (theme, look, explanation level, the jester’s voice) and your progress stay only in your browser and are never sent to a server. See the cookie policy.
Who receives the data
These providers process data on the controller’s behalf (processors):
- Brevo (Sendinblue SAS, France, EU): sending the newsletter. The controller accepts its data processing agreement (DPA).
- Google Ireland Limited: Google Analytics 4, only if you accept analytics.
- Cloudflare, Inc.: hosting the site and the newsletter form, which goes through a Cloudflare function before reaching Brevo.
Data isn’t shared with anyone else unless the law requires it.
International transfers
Google and Cloudflare may process data in the United States. Both companies are certified under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and also use standard contractual clauses.
Your rights
You can request access, rectification, erasure, restriction or portability of your data, or object to its processing, by writing to the contact email. You can withdraw your consent at any time: unsubscribe from any newsletter email, or change your cookie choice with the “Cookie settings” link in the footer.
If you think your rights haven’t been respected, you can complain to the Spanish Data Protection Agency (aepd.es).
Children
The site isn’t aimed at children under 14 and doesn’t knowingly collect their data.
Changes
If this policy changes, the date above will be updated. The Spanish version prevails in case of discrepancy.