Privacy policy
Last updated: 17 September 2026 · A document of Archivo Bélico.
This policy explains what personal data Archivo Bélico processes, for what purpose and on what legal basis, how long it is kept, and how to exercise the rights granted by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018. For any data protection question: contacto@archivobelico.com.
1. Data controller
Controller: the publisher of Archivo Bélico, an independent editorial project (archivobelico.com). Full identifying details are provided on request at the contact address below.
Data protection contact: contacto@archivobelico.com. No Data Protection Officer has been appointed, as none of the cases in Article 37 GDPR applies.
2. Data processed and its source
Contact form: name, email address and the content of the message, provided voluntarily by the person concerned.
Technical connection data: IP address and server logs, processed for security purposes and to limit unauthorised access attempts to the private area of the site.
No special categories of data (Article 9 GDPR) and no data on children under 14 are processed. No data is collected from sources other than the person concerned.
3. Purposes of processing
1) To handle and reply to enquiries, suggestions or corrections sent through the form or the contact address.
2) To keep the site secure, prevent improper access and retain minimal technical logs.
3) To comply with applicable legal obligations.
No automated decision-making or profiling with legal effects on users takes place.
4. Legal basis (Article 6 GDPR)
Consent of the person concerned (Art. 6(1)(a)) for handling messages sent through the form; it may be withdrawn at any time without retroactive effect.
Legitimate interest of the controller (Art. 6(1)(f)) for site security and abuse prevention, after balancing it against users' rights.
Compliance with legal obligations (Art. 6(1)(c)) where retention or disclosure is required by law.
5. Retention periods
Contact messages are kept for the duration of the exchange and, afterwards, for a maximum of twelve months, unless a legal obligation or a possible claim requires longer.
Technical security logs are kept for a maximum of twelve months. Once those periods expire, data is deleted or anonymised.
6. Recipients and processors
Data is not disclosed to third parties except where required by law or by a competent authority. No disclosure takes place for commercial or advertising purposes.
Providers acting as processors under a contract compliant with Article 28 GDPR: the web hosting and deployment provider, and the database and storage provider.
7. International transfers
Some infrastructure providers may process data outside the European Economic Area. Where they do, transfers rely on European Commission adequacy decisions or on standard contractual clauses, with any additional safeguards required.
8. Your rights
You may exercise the rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to automated decisions, and may withdraw consent previously given.
To do so, send a request to contacto@archivobelico.com stating the right you wish to exercise and including a means of verifying your identity. Requests are answered within one month at most.
If you believe your rights have not been properly handled, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.
9. Security measures
Appropriate technical and organisational measures are applied under Article 32 GDPR: HTTPS traffic encryption, access control to the private area with credentials always stored in encrypted form (never in plain text), rate limiting on access attempts, and minimisation of the data collected.
10. Changes to this policy
This policy may be updated to reflect legal changes or new processing activities. The version in force is always the one published on this page.
11. Contact
For any question about this document: contacto@archivobelico.com.