Introduction
This Privacy Policy explains how B. Bordoy Barceló collects, uses, retains, and protects personal data associated with the use of the website www.bbordoybarcelo.com, communications with readers, the newsletter, and services related to his activities as an independent author.
Personal data is processed in accordance with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR), Spain’s Organic Law 3/2018, and Japan’s Act on the Protection of Personal Information (APPI).
1. Data Controller
Website owner: Bartolomé Bordoy Barceló.
Author name: B. Bordoy Barceló.
Country of residence: Japan.
Website: https://www.bbordoybarcelo.com.
Email: info@bbordoybarcelo.com.
The website owner acts as the data controller for processing activities whose purposes and means he determines in connection with his website, literary activities, and communications with readers.
External service providers may act as data processors or independent data controllers, depending on the nature of their services.
2. Your Data Protection Rights
Where applicable under relevant data protection laws, users may exercise the following rights:
- Right of access: To find out whether their personal data is being processed and obtain information about that processing.
- Right to rectification: To request the correction of inaccurate or incomplete personal data.
- Right to erasure: To request the deletion of personal data when the applicable legal conditions are met.
- Right to object: To object to certain types of personal data processing, particularly processing carried out for direct marketing purposes.
- Right to restriction of processing: To request that the processing of personal data be restricted in circumstances established by law.
- Right to data portability: To receive certain personal data in a structured, commonly used, machine-readable format and request its transmission where applicable.
- Right to withdraw consent: To withdraw previously granted consent without affecting the lawfulness of processing carried out before its withdrawal.
- Right to lodge a complaint: To submit a complaint to the competent data protection authority.
These rights may be subject to the conditions and exceptions established by applicable law.
To exercise these rights, please send a request to info@bbordoybarcelo.com.
Additional information to verify your identity will only be requested when necessary and proportionate.
Where the GDPR applies, requests will generally be answered within one month, subject to any extensions permitted by law.
3. What Information Do We Collect?
The information processed depends on how visitors use the website and its associated services.
Technical and Browsing Information
When visiting the website, technical records may be generated containing information such as IP addresses, access dates and times, requested pages, browser types, devices, and other data necessary for the operation and security of the website.
Cookie identifiers and interaction data may also be used where there is a valid legal basis and, when required, the user’s consent.
Information Provided Voluntarily
When someone contacts the author, their email address, any name they provide, and the content of their message are received.
Newsletter
Newsletter subscribers primarily provide an email address.
The subscription platform may also process information relating to subscription status, publication delivery, and interactions with its services.
Financial Transactions
When payments are made through external services such as Stripe, the payment provider processes the information necessary to manage the transaction.
Depending on the service configuration, the website owner may have access to limited transaction information, such as the email address provided, payment amount, transaction reference, or payment status.
The author does not directly request or receive complete payment card numbers used through Stripe.
4. How Do We Receive Information?
Personal data may be obtained through:
- Inquiries voluntarily submitted by email.
- Subscriptions to the author’s newsletter.
- Technical records generated while browsing the website.
- Analytics and measurement tools used on the website.
- Information provided by external service providers in connection with their services.
- Financial transactions processed through payment platforms.
Simply accessing the website does not constitute authorization for unrestricted processing of a visitor’s personal data.
5. Purposes of Processing and Legal Bases
Responding to Inquiries
Personal data received by email is used to respond to questions about books, interviews, collaborations, and other matters related to the author’s activities.
Where the GDPR applies, the legal basis may be the legitimate interest in responding to received communications or the implementation of pre-contractual measures or contractual obligations, where appropriate.
Newsletter and Editorial Communications
Subscription data is used to send publications, literary news, information about books, and other content related to the author’s work.
Promotional communications that require consent will be based on the subscriber’s authorization, which may be withdrawn using the corresponding unsubscribe options.
Website Operation and Security
Technical records may be used to ensure the proper operation of the website, prevent misuse, detect incidents, and protect its systems.
Where the GDPR applies, the legal basis will be the legitimate interest in maintaining the security and availability of the service, without prejudice to other applicable legal obligations.
Statistical Analysis
The website uses Google Analytics 4 to collect statistics about its use.
This tool makes it possible to analyze visits, pages viewed, interactions, and other website usage data.
Measurement activities requiring consent must only be activated after the user has granted the corresponding authorization.
The information collected is used to understand website performance and improve its content and navigation.
Search Engine Visibility
Google Search Console is used to access information about the website’s presence in Google Search results, including search queries, impressions, clicks, and indexing issues.
Google Search Console does not, by itself, constitute an additional system for collecting personal data through cookies installed on this website.
Financial Transactions
Where applicable, payment-related information is used to manage transactions, resolve issues, process eligible refunds, and comply with legal or tax obligations.
Legal Obligations and Claims
Certain personal data may be processed or retained to respond to lawful requests, comply with legal obligations, or establish, exercise, or defend legal claims.
6. Data Retention
Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and, where applicable, for the periods required by law.
Inquiries: Data will be retained for the time necessary to respond to inquiries, manage follow-up communications, and address any related legal responsibilities.
Newsletter: Subscription data will be retained while the subscription remains active. Following unsubscription, the minimum information necessary to document or respect that decision and comply with applicable obligations may be retained.
Technical Records: Technical data will be retained according to security and operational requirements, log rotation practices, and the actual conditions of the hosting service.
Google Analytics: Data will be retained according to the retention settings configured for the Analytics property and the applicable service conditions.
Financial Transactions: Required transaction records will be retained for the applicable legal and tax retention periods.
When personal data is no longer necessary and there is no legal reason to retain it, it will be deleted or anonymized.
7. Newsletter and Substack
B. Bordoy Barceló’s newsletter is managed through Substack.
The author uses this service to share publications related to his books, publishing news, literary projects, and other content intended for readers.
The primary personal information used by the author to manage subscriptions is the subscriber’s email address.
Substack provides the technical services required for subscriptions, publication delivery, and newsletter administration. It may also process information about the use of its platform and interactions with emails and published content.
For certain processing activities associated with the author’s subscriber list, Substack acts as a data processor. For its own purposes, it may act as an independent data controller.
The Spanish and English publications may maintain separate subscriber lists. Subscribers will not be automatically added to a different publication without an appropriate legal basis.
Readers may unsubscribe using the link included in newsletter emails or the options provided by Substack.
For more information about the platform’s terms and data processing practices, please refer to Substack’s Privacy Policy.
8. Service Providers and Data Recipients
Various technology providers are involved in maintaining the website and its associated services.
Hostinger
Hostinger provides web hosting services.
Its services enable WordPress content to be stored and delivered, maintain the hosting infrastructure, and generate technical records necessary for website operation and security.
Access logs may include information such as IP addresses, request dates and times, and resources accessed.
Google Analytics
Google Analytics is used to obtain statistics about website traffic and usage.
Google processes the relevant information according to its service terms, Analytics configuration, and applicable data protection mechanisms.
Google Search Console
Google Search Console provides reports about website performance in Google Search results and tools for managing indexing-related matters.
Substack
Substack provides the services necessary for newsletter subscriptions, administration, and distribution.
Stripe
Stripe provides payment processing services and may process information necessary to complete transactions, prevent fraud, and comply with financial and legal obligations.
The website owner does not directly store complete payment card details used during the payment process.
External Sales Platforms
Links to Amazon and other platforms allow visitors to access independent services where the author’s books may be purchased.
Purchases made through these platforms are subject to the terms and privacy policies established by their respective operators.
Other Technical Services
Additional providers of email, security, caching, and consent management services may be involved to the extent necessary for the website’s operation.
Subscriber lists are not sold or rented to third parties for commercial purposes.
Personal data may be disclosed to competent authorities when required by law or in response to a lawful request.
9. Cookies and Similar Technologies
This website uses technologies necessary for its operation and may use preference cookies, analytics cookies, and other technical services.
Google Analytics may use cookies and other measurement technologies to collect website usage statistics.
Where these technologies require consent, the preferences selected by the user must be respected.
Strictly necessary technical cookies may be used without prior consent when the applicable legal requirements are met.
Visitors can find information about cookie purposes, categories, and preference management options in the Cookie Policy.
10. External Resources and Third-Party Links
This website includes links to services such as Amazon, Substack, and other external platforms.
When visitors voluntarily leave this website to use those services, they become subject to the policies and terms established by the respective providers.
This Privacy Policy governs processing activities carried out by B. Bordoy Barceló and does not replace the privacy policies of entities acting as independent data controllers.
External resources loaded directly while browsing the website must comply with applicable information, data protection, and consent requirements.
11. International Data Transfers
The website owner operates from Japan and uses technology providers that may process information in different countries.
Certain processing activities may involve international transfers of personal data, including transfers outside the European Economic Area (EEA).
Japan benefits from a European Commission adequacy decision within the scope covered by that decision.
Where personal data is transferred to other destinations and the GDPR applies, legally required transfer mechanisms must be used, such as applicable adequacy decisions or appropriate contractual safeguards.
Service providers are also subject to their own data protection obligations and applicable terms.
Individuals may request additional information about international transfers affecting their personal data and the corresponding safeguards by contacting the email address provided.
12. Information Security
Protecting personal data requires technical and organizational measures appropriate to the risks associated with each processing activity.
Reasonable measures will be implemented to control access, maintain and update systems, and protect the services used, according to their characteristics and applicable legal obligations.
Although precautions are taken, no system connected to the Internet can guarantee absolute security.
If a security incident affecting personal information occurs, the necessary response and notification measures will be taken in accordance with applicable law.
13. Marketing and Promotional Communications
Information about books, releases, publications, and the author’s projects will be sent to individuals who have subscribed to the newsletter or otherwise authorized the corresponding communications.
Providing an email address to submit an inquiry does not automatically enroll that person in a promotional mailing list.
Readers may unsubscribe using the mechanisms provided for that purpose.
This website contains commercial and affiliate links, but their presence does not, by itself, imply the use of personalized advertising systems.
If new advertising or tracking tools are introduced, the applicable information and consent requirements must be fulfilled.
14. Minors
This website provides literary and informational content and is not specifically designed to collect personal data from minors.
The use of external subscription services is subject to the terms established by their respective providers and to applicable age and consent requirements.
Where parental or guardian consent is required, it must be obtained in accordance with applicable law.
If a parent or legal guardian believes that a minor’s personal data has been processed improperly, they may contact info@bbordoybarcelo.com.
15. Changes in Ownership or Management
If ownership or management of the author’s publishing activities changes and the transition involves transferring personal data, the transfer must have a valid legal basis and comply with applicable obligations.
Users will be informed when legally required and will retain all rights granted to them under applicable law.
16. Data Protection Authorities
Users may contact the competent data protection authorities if they believe their rights have been violated.
In Spain, the relevant national authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
In Japan, the authority responsible for personal information protection is the Personal Information Protection Commission.
The jurisdiction of each authority depends on the circumstances and the processing activities involved.
17. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect legislative, technical, or organizational changes, or modifications to the services used.
When changes require users to be informed directly or new consent to be obtained, the appropriate measures will be taken.
Continuing to browse the website does not, by itself, constitute consent to new purposes that legally require authorization.
The current version will remain available on this page.
18. How to Contact Us
For inquiries regarding the website, personal data, or the exercise of applicable data protection rights:
B. Bordoy Barceló
Data Controller: Bartolomé Bordoy Barceló.
Email: info@bbordoybarcelo.com.
Website: www.bbordoybarcelo.com.
Last updated: November 2, 2026.