1. Data controller
- Controller: Antonio Manzanero Munera
- Address: Puçol (Valencia), Spain
- Email: toni@notenoughbattery.com
- Website: notenoughbattery.com
This policy explains what personal data notenoughbattery.com collects, why it is processed, how long it is kept, who it is shared with and what rights users have. It has been drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
2. Data collected and its source
This site collects personal data only in the following situations:
a) Contact form. Name, email address, subject and whatever content the user chooses to include in the message. The data is provided by the user.
b) Article comments. Name or alias, email address and, optionally, a website, together with the comment itself, the IP address it was posted from and a timestamp. WordPress records this data automatically when a comment is submitted.
c) Browsing and analytics data. If the user consents through the cookie banner, aggregated usage data is collected via Google Analytics 4: pages visited, time spent, device type, browser, operating system and approximate origin. Google Analytics 4 does not store the full IP address; it anonymises it before recording.
e) Newsletter subscription. Email address and, optionally, a name. Sign-up uses double opt-in: after submitting the form, the user receives a message with a link that must be clicked to confirm the subscription. The date, time and IP address of that confirmation are recorded as proof of consent.
d) Server logs. The hosting provider automatically generates access logs containing the IP address, the date and time of the request and the resource requested. These logs serve technical and security purposes only.
The site carries out no profiling for advertising purposes and makes no automated decisions producing legal effects on users. Newsletter subscription is always voluntary and is never a condition of access to any content.
3. Purposes and legal bases
| Processing | Purpose | Legal basis (art. 6 GDPR) |
|---|---|---|
| Contact form | Handling and replying to the enquiry | Consent, art. 6(1)(a) |
| Comments | Enabling public participation, moderating and publishing comments | Consent, art. 6(1)(a) |
| Newsletter | Sending periodic content and site updates to subscribers | Consent, art. 6(1)(a) |
| Web analytics | Understanding site usage and improving content | Consent, art. 6(1)(a) |
| Server logs | Ensuring the security, availability and integrity of the site | Legitimate interest, art. 6(1)(f) |
| Handling rights requests | Processing requests to exercise data subject rights | Legal obligation, art. 6(1)(c) |
4. Retention periods
- Contact form enquiries: up to one year from the last communication with the user, unless they must be kept longer to address potential liabilities.
- Comments: for as long as the article remains published and the user has not requested deletion.
- Newsletter data: until the user unsubscribes. Proof of consent is kept while the subscription is active and for three years after unsubscribing, in order to demonstrate compliance to the supervisory authority.
- Analytics data: the retention period configured in Google Analytics 4, set at fourteen months.
- Server logs: the retention period applied by the hosting provider under its own policies.
Once those periods elapse, data is deleted or anonymised.
5. Recipients and processors
Personal data is not disclosed to third parties except where required by law. It is accessed by the providers whose services are necessary to run the site, acting as data processors:
- Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus). Web hosting and email. Data protection contact: gdpr@hostinger.com.
- Brevo SAS (106 boulevard Haussmann, 75008 Paris, France; Paris trade register 498 019 298). Newsletter management and delivery. Data is hosted on servers located in France, so this processing involves no international transfer.
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Web analytics via Google Analytics 4, only where the user has consented to analytics cookies.
Each provider processes data on the controller’s instructions under a data processing agreement containing the safeguards required by article 28 GDPR.
6. International transfers
Using Google Analytics 4 may involve transferring data to servers outside the European Economic Area. Such transfers rely on the EU-US Data Privacy Framework and, additionally, on the standard contractual clauses approved by the European Commission.
Users can avoid this transfer entirely by rejecting analytics cookies in the site’s cookie settings panel.
7. Your rights
Users may exercise the following rights at any time:
- Access: find out what personal data of theirs is being processed.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of their data where it is no longer necessary.
- Objection: object to processing based on legitimate interest.
- Restriction: request that processing be restricted in the cases provided for by law.
- Portability: receive their data in a structured, commonly used format.
- Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise any of these rights, write to toni@notenoughbattery.com stating which right is being exercised. Requests are answered within one month, extendable by a further two months in particularly complex cases, of which the user will be informed.
For the newsletter, users may also unsubscribe at any time using the link included at the foot of every message.
Users who believe their rights have not been properly addressed may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid; www.aepd.es), without prejudice to any other administrative or judicial remedy.
8. Security measures
The site is served over an encrypted HTTPS connection. The controller applies reasonable technical and organisational measures to protect data against loss, unauthorised access, alteration or disclosure, including regular backups and access control over administration systems.
No internet-connected system is invulnerable. Should a security breach occur that poses a risk to users’ rights and freedoms, it will be notified to the supervisory authority and, where applicable, to those affected, within the periods set out in articles 33 and 34 GDPR.
9. Minors
The content of this site is not specifically directed at minors. Under article 7 LOPDGDD, children under fourteen must not provide personal data through the contact form or comments without the consent of a parent or guardian. Any data found to have been collected from a child under fourteen without such consent will be deleted.
10. Embedded content from other sites
As of the date of this policy, the site contains no embedded third-party content (videos, players, social media posts or maps).
If such content is added in future, it will behave as though the user had visited the originating site directly, which may collect browsing data and set its own cookies. This policy and the cookie policy will be updated accordingly before any such content goes live.
11. Cookies
The use of cookies and similar technologies is set out in the site’s cookie policy, which forms an integral part of this privacy policy.
12. Changes to this policy
This policy may be amended to reflect regulatory changes or new processing activities. The version in force at any given time is the one published on this page, with its update date.
Last updated: September 2026