Privacy

Data controller

ULLAL is the project name. The person or entity responsible for processing personal data has not yet been definitively identified, nor have their postal address and privacy contact details. We do not publish invented details. We will add this information before collecting email addresses.

Data, purposes and legal bases

When you visit the site, your browser sends the technical data needed to respond to the request: IP address, requested page, date and time, and browser information. When the site is published on Cloudflare Pages, Cloudflare may process this data to deliver pages and protect the service. We will verify the logging configuration and legal basis for this processing before publication.

The future mailing list will send ULLAL updates and launch information. The intended basis is freely given, explicit consent, with an unchecked box and subsequent email confirmation. Providing an address will be voluntary; without it, you will not receive these messages. No subscription requests are currently sent.

Providers and transfers

Cloudflare is planned as the hosting and delivery provider. Fonts are currently loaded from Google Fonts; this connection may disclose your IP address and technical request data to Google. The site code does not include analytics or advertising tools.

When the list opens, Brevo is planned for confirming and sending emails, and Cloudflare Turnstile for protection against automated form use. Brevo will also receive the request time, language, consent notice version and source, and record the confirmation. These subscription services do not receive form data while the list is disabled. Before enabling it, we will verify provider terms, any transfers outside the European Economic Area, and the applicable safeguards.

Retention

The disabled form does not retain email addresses. Before enabling the list, we will set the retention period or criteria for subscriptions and the unsubscribe procedure. We will also check the configuration and retention of technical hosting logs.

Your rights

Where applicable, you may request access to, rectification or erasure of your data, restriction of processing, or data portability, or object to processing. Once the list is active, you may withdraw consent at any time without affecting the lawfulness of earlier processing. We will publish a contact and procedure for exercising these rights before collecting data.

You may complain to the competent supervisory authority; in Spain, this is the Spanish Data Protection Agency (aepd.es).

Updates

We will update this policy when the controller is identified, provider terms and retention are confirmed, or site features change. The final version will be reviewed in Catalan, Spanish and English before subscriptions are enabled.