Privacy policy

Last updated: 2 September 2026

1. Data controller

  • Controller: Pablo García-López
  • Tax ID (DNI): 45885276T
  • Address: Calle Teruel nº 2, Córdoba, Spain
  • Data protection contact: info@pablogarcialopez.es

2. What data we process and why

This website has no contact forms, user registration, newsletter or online sales. Accordingly, we do not request or store identifying personal data provided voluntarily by the user.
The only processing that may occur is:
  • Server logs (hosting). The hosting provider automatically records technical data such as IP address, date and time of access, browser type and pages visited, in order to deliver the service, ensure security and prevent fraudulent use.
  • Audience measurement. We use Vercel Web Analytics, a tool that measures visits in an aggregated, cookieless way (page views, country, device type), without identifying users or building profiles.
  • Embedded YouTube content. When a video is played — or, on the Discography page, when the background video loads — Google / YouTube may process data in accordance with its own privacy policy. See the Cookie Policy.

3. Legal basis

  • The controller's legitimate interest in the maintenance, security and proper operation of the site (Art. 6(1)(f) GDPR).
  • Legitimate interest in understanding site usage anonymously, given the minimal interference of cookieless analytics.
  • The user's consent when interacting with embedded third-party content.

4. Retention period

Technical logs are kept only for as long as strictly necessary for the stated purposes and any legally required periods. Analytics data is processed in aggregate and does not allow individuals to be identified.

5. Recipients and processors

No data is shared with third parties except where legally required. The following act as data processors:
  • Vercel Inc. (hosting and audience measurement) — USA.
  • Sanity AS and Airtable Inc. (site content management; no access to visitor data).
  • Google Ireland Ltd. / Google LLC (YouTube), for embedded content.

6. International transfers

Some of these providers are located outside the European Economic Area (mainly the USA). Such transfers rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, on current adequacy frameworks (Data Privacy Framework).

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by contacting info@pablogarcialopez.es and providing proof of identity. If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Minors

This site is not aimed at children under 14 and does not knowingly collect data from them.

9. Changes to this policy

This privacy policy may be updated to reflect legislative developments or changes to the site. The date of the last update will always be shown.