Languages

Privacy policy

Updated

This policy explains which personal data are processed when you visit CrabChain.org, why, for how long and what rights you have. The website has no user accounts, comments, newsletters or forms where you enter personal data.

Data controller

The controller is Kilian O'Brien Prats, a private individual and the owner of CrabChain.org. You can get in touch at crabchainorg@gmail.com.

Which data are processed

  1. Technical connection data. The website is hosted by Cloudflare. When you visit it, Cloudflare's servers receive data such as your IP address, your browser, the page you request and the date and time. They are needed to send you the page and may be kept in their technical logs.
  2. Advertising data. The website uses Google AdSense. Google may process online identifiers, your IP address and information about your browsing to show ads, measure their performance, limit how often they repeat, prevent fraud and, if you agree, personalise them.
  3. Contact data. If you write to the contact address, your email address, the content of your message and anything you choose to share are processed. Please do not send sensitive information by email.

The website also stores your language and the state of the side menu in your browser. Those preferences never leave your device and the owner has no access to them, as the cookie policy explains.

The website uses Google Analytics, loaded through Google Tag Manager, for visit statistics. It only works if you accept it in the consent notice, and in that case Google processes data such as the pages you visit, how you reach the website and technical information about your browser and device.

The website also uses Cloudflare Web Analytics, a Cloudflare service that counts visits and measures how fast pages load. According to its documentation, it uses no cookies, stores no data in your browser and does not track you through your IP address, your browser or other data.

Purposes and legal bases

  1. Running and securing the website. Technical data are used to serve the website, keep it working and detect abuse or security incidents. The legal basis is the owner's legitimate interest in a secure and working website, under article 6(1)(f) of the General Data Protection Regulation (GDPR).
  2. Advertising. For advertising processing that requires your consent, such as storing or reading information on your device or personalising ads, the legal basis is the consent you give in Google's notice, under article 6(1)(a) of the GDPR and article 22.2 of Spanish Law 34/2002 (LSSI).
  3. Statistics. Google Analytics is used to find out how many people visit the website, which guides are read most and how visitors reach them, in order to improve the content. For Google Analytics, the legal basis is the consent you give in Google's notice, under article 6(1)(a) of the GDPR and article 22.2 of the LSSI. For Cloudflare Web Analytics, which uses no cookies, it is the owner's legitimate interest in knowing how the website is used, under article 6(1)(f) of the GDPR.
  4. Enquiries. Your contact data are used to read and answer your message. The legal basis is handling your request and the legitimate interest in answering the messages received.
  5. Legal obligations. Data may be processed to comply with legal obligations or valid requests from the authorities, under article 6(1)(c) of the GDPR.

Google AdSense

Google processes advertising data partly on behalf of the owner and partly as an independent controller for its own purposes, depending on the service and the processing. According to its privacy policy, Google Ireland Limited is the entity responsible for the information of users of Google services in the European Economic Area and Switzerland.

You can read Google's privacy policy, its page on how Google uses information from sites that use its services and its page on advertising technologies. Cookies and the consent notice are explained in the cookie policy.

Recipients

Personal data may be accessed by Cloudflare, Inc., the provider that hosts the website, acting as a processor, by Google and, depending on your choice in the consent notice, by other advertising providers. They may also be disclosed to the authorities where there is a legal obligation. The owner does not sell personal data.

International transfers

Google may process data outside the European Economic Area, including in the United States. Google explains that Google LLC and its US subsidiaries participate in the EU-U.S. Data Privacy Framework and that it uses standard contractual clauses when a transfer is not covered by an adequacy decision. You can find more information on its page on data transfer frameworks.

Cloudflare, Inc. is based in the United States. According to its privacy policy, it relies on its certification under the EU-U.S. Data Privacy Framework for transfers from the European Economic Area and, should that cease to apply, on standard contractual clauses.

Retention

Emails are kept for as long as needed to reply and then blocked for the legal periods during which liability may arise. Technical logs are kept according to Cloudflare's settings, and advertising data according to Google's policies. After those periods the data are deleted or anonymised.

Your rights

You can exercise the rights that data protection law gives you, in the cases and within the limits it sets.

  1. Access, to find out whether your data are processed and get information about that processing.
  2. Rectification, to correct inaccurate data.
  3. Erasure, to ask for your data to be deleted when the legal requirements are met.
  4. Objection, to object to certain processing, such as processing based on legitimate interest.
  5. Restriction of processing, to ask for the use of your data to be restricted in the cases provided by law.
  6. Portability, to receive certain data in a structured, commonly used format.
  7. Withdrawal of consent, at any time, without affecting what was done before with it.

To exercise them, write to crabchainorg@gmail.com stating the right you want to exercise. If there are reasonable doubts about your identity, you may be asked for the information needed to verify it. Exercising your rights is free, except in the exceptional cases provided by law. For data that Google processes as an independent controller, you can also contact Google.

If you believe your data are not processed lawfully, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), whose website is in Spanish.

Security

The website is always served over an encrypted connection (HTTPS) and the owner tries to apply appropriate technical and organisational measures to protect the data. Even so, no system can guarantee absolute security.

Links to other websites

External websites linked from the guides have their own privacy policies, which you should read before giving them personal data.

Minors

The website is not designed to collect data from minors. If you are under 14, do not send personal data without the permission of your parents or guardians. If the owner finds that data from a minor have been received without meeting the legal requirements, they will be deleted.

Changes to this policy

This policy will be updated when the services the website uses or the applicable law change. The date of the last update appears at the top of the page.