Who is responsible for your data
The data controller for this website is:
- Mohamed Haytam
- NIF: 55008372E
- Address: Calle de Larios, 8, 29774 Málaga, Spain
- Email: creditbrief@gmail.com
CreditBrief is a trading name used by the above individual. Because the controller is established in the European Union, the General Data Protection Regulation (EU) 2016/679 and Spanish Organic Law 3/2018 (LOPDGDD) apply to the processing described here, regardless of where you are reading from.
What data we collect
Data you give us
- Newsletter sign-up: your email address and the date you subscribed. We use confirmed opt-in: entering an address only sends one email asking you to confirm it, and the address is not added to our list unless you click the link in that email. If you never click it, nothing is stored and we do not write to you again.
- Contact form or email: your name, email address, the topic you select, an optional article URL, and whatever you write in your message.
We ask for the minimum needed to reply. Please do not send account numbers, card numbers, national identity numbers or other sensitive financial details — we do not need them and cannot use them.
Data collected automatically
- Server logs: IP address, browser type, referring page and timestamp, recorded when your browser requests a page.
- Analytics: only if you consent. Google Analytics records usage data such as pages viewed and time on page.
- Advertising: only if you consent. Advertising partners may collect data to serve and measure advertising.
Analytics and advertising scripts are not loaded at all until you have given consent. Before that, your browser does not contact those services.
Legal bases for processing
| Processing | Legal basis (GDPR Art. 6) |
|---|---|
| Sending the newsletter | Consent — Art. 6(1)(a). Withdrawable at any time. |
| Replying to your enquiry | Legitimate interest — Art. 6(1)(f): answering someone who contacted us. |
| Analytics cookies | Consent — Art. 6(1)(a). |
| Advertising cookies | Consent — Art. 6(1)(a). |
| Server logs, security, abuse prevention | Legitimate interest — Art. 6(1)(f): keeping the site available and secure. |
| Meeting legal obligations | Legal obligation — Art. 6(1)(c). |
Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out beforehand. Where we rely on legitimate interest, you may object — see your rights below.
How long we keep it
- Newsletter address: until you unsubscribe, plus a short period to honour the unsubscribe request.
- Correspondence: as long as needed to handle the matter, and for a reasonable period afterwards in case you follow up.
- Server logs: a limited period for security and operational purposes.
- Consent record: stored in your own browser, not on our servers.
Who else is involved
We use the following categories of processor and third party. Each processes data under its own terms, and we encourage you to read them.
- Hosting and content delivery — Netlify, Inc., which serves the site and processes the connection data described above
- Analytics — Google Analytics, only with your consent
- Advertising — Google AdSense and its partners, only with your consent
- Email delivery — Resend (Plus Five Five, Inc.), which stores the addresses of confirmed newsletter subscribers and delivers both the newsletter and the automatic replies sent by our contact form
We do not sell your personal data, and we never share your email address with advertisers.
International transfers
Some of the providers above are established in the United States or process data there. Where personal data leaves the European Economic Area, the transfer relies on an adequacy decision, on the EU Standard Contractual Clauses, or on another safeguard permitted by Chapter V of the GDPR. You may request further information about the safeguards in place using the contact address above.
Cookies
We use three categories of cookie: necessary, analytics and advertising. Only the first is used without your permission, and it exists to remember the choice you made. The other two run only with consent, which you can give, refuse or change at any time using the Cookie preferences link in the footer. Refusing is as easy as accepting.
Full detail is in our cookie policy.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you;
- Have inaccurate data corrected;
- Have your data erased;
- Restrict how we process it;
- Receive your data in a portable, machine-readable format;
- Object to processing based on legitimate interest;
- Withdraw consent at any time;
- Not be subject to decisions based solely on automated processing — we make none.
To exercise any of these, write to creditbrief@gmail.com. We will respond within one month. We may need to verify your identity first, and we will not charge you unless a request is manifestly unfounded or excessive.
If you believe we have handled your data improperly, you have the right to complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), or to the supervisory authority where you live.
If you are in the United States
Several U.S. states grant their residents specific privacy rights. Where those laws apply to us, you may request access to, correction of, or deletion of your personal information, and you may opt out of the sale or sharing of personal information for cross-context behavioural advertising.
We do not sell personal information. Declining advertising cookies in our consent banner exercises the opt-out from sharing for this site. We are also structured to honour recognised opt-out preference signals, such as Global Privacy Control, where applicable law requires it. Requests go to creditbrief@gmail.com, and we will not discriminate against you for making one.
Children
This site is intended for adults. We do not knowingly collect personal data from children under 14 (the age of digital consent in Spain) or under 13 in the United States. If you believe a child has provided us with personal data, contact us and we will delete it.
Security
We apply reasonable technical and organisational measures to protect personal data, including HTTPS across the whole site, security headers, server-side validation of every form submission, and rate limiting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Changes to this policy
We will update this page when our practices change and revise the “last updated” date above. Material changes will be noted prominently.
Contact
Privacy questions and requests: creditbrief@gmail.com
Postal: Calle de Larios, 8, 29774 Málaga, Spain
See also our legal notice, which carries the publisher identification required by Spanish law.