Privacy Policy

Last updated: 16 October 2026. Versión en español. This is a translation for convenience; if there is any difference, the Spanish version prevails.

This page explains which personal data we process when you use rockbottom.es, what we use it for and what rights you have. We do so in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

1. Who is responsible for your data

Controller: Asociación Cultural Rock Bottom Magazine.
Tax ID (CIF): G23921919.
Address: Parque Alto 6-A, 11408 Jerez de la Frontera (Cádiz), Spain.
Contact email: info@rockbottom.es.

We are a small cultural association and we do not have a data protection officer, because the law does not require us to. For any question about your data, write to the email above.

2. What data we process and why

You do not need to give us any data to read the website or download the magazine issues. We only process personal data in these cases:

2.1. If you write to us through the contact form

Data: your name, your email, the subject and your message.
Purpose: to read your message and reply to you.
Legal basis: your consent, which you give by ticking the box on the form (article 6.1.a GDPR).
Where it is stored: the message is not stored on the website; it reaches us by email at info@rockbottom.es.
How long: as long as needed to deal with your message and, at most, one year after our last reply, unless a law requires us to keep it longer.

Spam protection. On the contact page we use Google reCAPTCHA v3, from Google Ireland Limited. This service analyses how the page is used (for example, your IP address and browser data) to tell people apart from automated programs that send spam. We do this based on our legitimate interest in protecting the form (article 6.1.f GDPR). Google may process this data in the United States. More information in Google’s privacy policy.

2.2. If you subscribe to our email notices

Data: your email and, if you wish, your name. As proof that you subscribed yourself, we also keep the subscription date and the IP address from which you subscribed and confirmed your subscription.
Purpose: to let you know by email about every new publication on the website: issues, articles and news such as the printed yearbook.
Legal basis: your consent, which you give by ticking the box on the form and confirming your subscription from the email we send you (article 6.1.a GDPR).
How long: until you unsubscribe. You can do so at any time with the link at the bottom of every email or by writing to us. When you unsubscribe we stop writing to you; we keep your email marked as unsubscribed only so that we do not send you anything again, and you can ask us to delete it completely.
How: we use MailPoet, a program installed on our own website. Emails are sent from our own mail server. We do not track whether you open the emails or which links you click.

2.3. Visit statistics

If you accept it in the cookie notice, we use Jetpack Stats, from Automattic Inc., to know how many visits the website gets and which content is read the most. Jetpack Stats receives data about your visit, such as the page you view, your browser and your IP address. It only runs with your consent (article 6.1.a GDPR) and you can withdraw it at any time from «Configurar cookies» (cookie settings) at the bottom of every page. Automattic may process this data in the United States. More information in Automattic’s privacy policy.

When someone downloads a magazine issue, the website records which issue was downloaded, the date and the page the download was made from. We do not store the IP address or browser data, so we cannot know who downloaded it.

2.4. Content from other services

Some pages include videos, podcasts or magazine viewers from YouTube, iVoox, SoundCloud, Yumpu, FlipHTML5 or Ko-fi. This content only loads if you accept it, because when it loads those services receive data about your visit and set their own cookies. Each service is responsible for how it handles that data. We explain this in detail in the Cookie Policy.

2.5. If you make a donation

Donations are made through PayPal or Ko-fi. Payment takes place on their services, not on our website; the Ko-fi panel on the Shop page loads from Ko-fi and only if you accept third-party content. These services give us your name, your email, the amount and the date of the donation and, in the case of Ko-fi, also the message you write. We use this data to manage the donation and to meet our tax and accounting obligations, which are the legal basis for this processing (articles 6.1.b and 6.1.c GDPR). We keep it for the periods required by tax and accounting law. PayPal and Ko-fi handle your payment data under their own privacy policies.

2.6. If you buy the printed yearbook

The printed yearbook is sold by external bookshops and stores, such as the one we link to on the website. The purchase takes place on their website, not ours, and that store handles your data.

2.7. Your cookie choice

To be able to prove that we respect your choice, we keep a record each time you accept or reject cookies in the notice: a random identifier (the same one stored in your browser), the date, what you chose, the policy version, the language and the page. We do not store your IP address or browser data. We do this to meet our legal obligation to be able to prove consent (article 6.1.c and article 7.1 GDPR) and we delete it after 3 years.

2.8. Website security

To protect access to the administration panel against attacks we use Jetpack, from Automattic, which may process the IP address of anyone trying to log in. We do this based on our legitimate interest in keeping the website secure (article 6.1.f GDPR). This does not affect people who only read the website.

3. Who we share your data with

We do not sell or pass on your data to anyone, unless a law requires us to. To run the website we work with these providers, which process data on our behalf with the safeguards required by law:

Webempresa: website and email hosting.
Automattic Inc.: Jetpack (statistics, only if you accept them, and security).
Google Ireland Limited: reCAPTCHA on the contact page.

4. Transfers outside the European Union

Google and Automattic may process data in the United States. Both companies participate in the EU-US Data Privacy Framework, which the European Commission recognises as an adequate safeguard. The third-party content services (YouTube, iVoox, SoundCloud, Yumpu, FlipHTML5 and Ko-fi) may also process data outside the EU, but they only load if you accept them.

5. Your rights

At any time you can ask us for:

Access: to know whether we process your data and which data.
Rectification: to correct inaccurate data.
Erasure: to delete your data.
Objection: to stop processing your data in a specific case.
Restriction: to keep your data but not use it, for example while we review a complaint from you.
Portability: to receive your data in a format you can take elsewhere.
Withdrawal of consent at any time, without affecting what we did with it before.

To exercise them, write to info@rockbottom.es saying which right you want to exercise. If we have doubts about your identity, we may ask you for some information to verify it. We will reply within one month at the latest.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Minors

If you are under 14, do not send us personal data without the permission of your parent or guardian.

7. Security

The website uses an encrypted connection (HTTPS) and we take reasonable measures to protect your data against loss, unauthorised access or misuse.

8. Changes to this policy

If we change the way we handle your data, we will update this page and the date at the top. If the change is significant, we will let you know.