Last updated: 21 September 2026
Who I am
Esther López Pérez Contact: info@estherlopezdev.com Website: estherlopezdev.com
I am the controller of the personal data collected on this site.
What data I process, why, and on what basis
1. Web server logs
What is collected: IP address, date and time of the request, path requested, response code, and the browser and operating system your client reports.
Why: to keep the service running, to detect and block unauthorised access attempts, and to diagnose errors.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR). A server exposed to the internet receives intrusion attempts continuously, and these logs are the mechanism that detects and blocks them.
How long: 14 days, after which they are deleted automatically.
This collection is inherent to running the server and does not depend on whether you accept cookies.
2. Newsletter subscription form
This site offers a newsletter hosted on Substack.
The form does not load until you allow it. Until then you will see a notice in its place. If you allow it, content from Substack is loaded, which may set its own cookies and receive your IP address.
What is collected, if you subscribe: your email address, which Substack handles.
Legal basis: your consent (Art. 6(1)(a) GDPR).
Who processes it: Substack Inc., based in the United States, acts as an independent controller for subscription data. This involves an international transfer of data outside the European Economic Area. Their terms and privacy policy are available at substack.com.
How to unsubscribe: from the link at the bottom of every issue, or by writing to me.
3. Web analytics
There is currently no analytics running on this site.
If any is added in future, it will only be activated with your prior consent, and this policy will be updated beforehand to state which tool it is, what it collects, and for how long.
4. Progress through the interactive journey
Not available yet.
When it is, the site will be able to save how far you have got through the sections so you can pick it up on a later visit. It will work like this:
- If you do not consent, the journey still works, but your progress lives only in your browser’s memory and is lost when you close the tab. Nothing is stored on the server.
- If you do consent, a random identifier unrelated to your identity is created and your progress is stored against it. No name, no email, and nothing that could identify you is collected.
Legal basis: your consent.
This policy will be updated with the specifics before the feature goes live.
Cookies and browser storage
| What | Purpose | Duration | Consent needed? |
|---|---|---|---|
elp_consent (local storage) | Remembering your cookie choice so you are not asked again | Until you clear the site’s data | No. It is essential in order to respect your choice |
| Substack cookies | Operating their subscription form | Set by Substack | Yes |
| Analytics | To be defined | To be defined | Yes |
You can change your decision at any time from the Cookie preferences link in the footer of every page. Withdrawing consent is as easy as giving it.
Declining does not restrict access to any content on this site.
Where your data is processed
The site is hosted on a server of my own contracted with IONOS, located in the European Union.
The only transfer outside the EEA is the one described in the Substack section, and it only happens if you allow their form to load.
Your rights
You may at any time exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent where processing is based on it.
To do so, write to info@estherlopezdev.com. I will reply within one month at the latest.
If you believe your data is not being handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Automated decision-making
No automated decision-making or profiling is carried out with your data.
Changes to this policy
If anything material changes, this page will be updated and the date in the header amended. If the change affects processing that relies on your consent, you will be asked again.