Privacy policy
Legal information must be completed through the Vercel environment variables before publication.
1. Data controller
Controller: Pending configuration. Country: Pending configuration. Privacy contact: Pending configuration.
2. Data, purpose and legal basis
We process your email address, language, form source and strictly necessary technical data to manage registration, demonstrate consent, send Endo Up to Date and protect the service against abuse. The legal basis is your consent, which you may withdraw at any time without affecting previous lawful processing.
Providing an email address is necessary to receive the newsletter. We do not make automated decisions with legal effects or create medical profiles.
3. Service providers and recipients
We use Brevo to manage subscriptions and deliveries. Brevo acts as a processor and states that its databases are stored in the European Union. The site is hosted by Vercel, which may process technical data needed to provide, secure and maintain the service under its terms and data processing agreement.
Where a provider or subprocessor handles data outside the European Economic Area, safeguards required by law will apply, such as adequacy decisions or standard contractual clauses.
4. Analytics
We use Vercel Web Analytics for aggregated statistics. According to its documentation, it uses no third-party cookies, does not retain IP addresses linked to visits, and does not allow a person to be identified or their browsing reconstructed across sites. We do not send emails or other identifying data as analytics events.
5. Retention
We retain data while you remain subscribed. After unsubscribing, we may retain the minimum information in a suppression list and proof of consent for the periods needed to address legal claims. It will then be deleted or anonymised.
6. Your rights
You may request access, correction, erasure, objection, restriction or portability, and withdraw consent, by writing to Pending configuration. You can also unsubscribe from every email and lodge a complaint with the Spanish Data Protection Agency or another competent authority.