At Bajo Lupa Digital we collect the minimum personal data needed for the site to work and to answer those who write to us. This policy explains what that data is, what we use it for, how long we keep it and what rights you have.
1. Data controller
The controller is the editorial project Bajo Lupa Digital, whose editorial direction rests with Damia Huerta Barajas. You can reach the controller through the contact page or at contacto@bajolupadigital.com.
2. What data we process and how we obtain it
- Contact form. Name, email address, subject and the content of the message you choose to send us, including any documents you attach.
- Server technical logs. IP address, browser type, date and time of access and pages visited, generated automatically by the hosting provider for security and performance reasons.
- Cookies. Those described in the cookie policy.
We do not ask you to register, we sell nothing from the site and we do not build reader profiles.
3. Purposes and legal basis
- Answering your messages, handling replies and corrections and assessing the documents you send. Basis: your consent when submitting the form and the legitimate interest in carrying out journalism with a right of reply.
- Ensuring the security and operation of the site through technical logs. Basis: the controller’s legitimate interest.
- Complying with legal obligations when a competent authority so requires.
4. Data of people named in case files
Case files process data on people of public relevance obtained from public sources: judgments, official resolutions, company registries and reference media. That processing rests on freedom of information and the public interest, with source attribution, evidence levels and a right of reply. People named may request the rectification of inaccurate data through the contact channel.
5. Retention
Form messages are kept while the enquiry is handled and, afterwards, for as long as needed to evidence the replies and corrections added to a case file. Technical logs are kept for the period set by the hosting provider, normally under twelve months.
6. Recipients
We do not disclose your data to third parties except under a legal obligation. The web hosting provider and the email service receiving the forms process data on the site’s behalf as processors. There are no international transfers other than those these providers declare in their own policies.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to contacto@bajolupadigital.com, stating which right you are exercising and over which data. We will reply within the legal deadline. If you believe we have not handled your request properly, you may lodge a complaint with the data protection authority for your place of residence.
8. Security
The site is served over an encrypted connection (HTTPS) and applies reasonable technical measures to prevent unauthorised access. Access to the administration panel is restricted to the editorial team.
9. Changes to this policy
We will review this policy when the site’s tools or the applicable rules change. The version in force is the one published here, with its date.
Last updated: 8 October 2026.