Legal
Privacy Policy
Effective date: [EFFECTIVE DATE, e.g. January 1, 2027]
This policy explains how personal data is handled on Simple Insurance Guide ([https://YOUR-DOMAIN]). We are established in Spain, so the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD) apply to us, even though this website is written for readers in the United States.
1. Who is responsible for your data
- Controller: Rafael Javier [SURNAMES, exactly as on your ID (DNI/NIE)] (trading as Astexus)
- Tax ID (NIF): [NIF / CIF / NIE OF THE OWNER]
- Location: [CITY AND PROVINCE, SPAIN (a full street address is optional)]
- Email for privacy questions and requests: rafapeja37@gmail.com
2. What we process, why, and on what basis
- Messages you send us. If you email us, we receive your email address and whatever you write. We use it to reply, to check and fix errors on the site, and to keep a reasonable record of the conversation. Legal basis: your request, and our legitimate interest in answering messages and keeping the site accurate (GDPR art. 6.1(f)).
- Your state choice. If you choose a state, the site saves that choice in your browser's local storage so it can show the same state on your next visit. It stays on your device and is not sent to us. We use it only to provide the feature you ask for. You can remove it with the “Clear my state” button or by clearing your browser's site data.
- Estimator inputs. Numbers you type into the life insurance estimator are processed in your browser and are not sent to us.
- Technical data. Our hosting provider automatically records standard server data such as IP address, browser type and pages requested, for security and reliable delivery. Legal basis: our legitimate interest in keeping the site secure and available (GDPR art. 6.1(f)).
We do not use your data for automated decisions or profiling that has legal effects on you, and we do not ask you to create an account.
3. Cookies and similar technologies
The site's own code does not set cookies. It uses local storage only for the state choice described above. If we ever add advertising or analytics, we will ask for your consent where the law requires it and update this policy before they start.
4. Who receives your data
We do not sell your personal data. We share it only with service providers that act for us and help run the site: our hosting provider ([HOSTING PROVIDER AND COUNTRY, e.g. Vercel Inc., United States]) and the email service we use to receive your messages. We may also disclose data when the law requires it or to protect rights and safety. Links on this site lead to other websites, such as government agencies, that have their own privacy practices.
5. Transfers outside the European Economic Area
Some of these providers are based in, or process data in, countries outside the European Economic Area, including the United States. When that happens, we rely on a lawful transfer mechanism such as a European Commission adequacy decision (for example, the EU-US Data Privacy Framework for certified companies) or standard contractual clauses. You can ask us for more information at rafapeja37@gmail.com.
6. How long we keep data
We keep messages you send us for as long as needed to answer them and to keep a reasonable record, and then delete them, unless the law requires us to keep them longer. Server data is kept by the hosting provider for its standard retention period.
7. Your rights
You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you gave. To exercise a right, email rafapeja37@gmail.com. We will reply within one month, and we may need to confirm your identity first.
If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the data protection authority of the country where you live.
8. Readers in the United States
If you live in a US state with a consumer privacy law, you may have similar rights to know, correct and delete your personal information. We do not sell personal information and do not share it for cross-context behavioral advertising. To make a request, email rafapeja37@gmail.com.
9. Children
This site is intended for adults. It is not directed to children under 14 (or under 13 in the United States), and we do not knowingly collect personal data from them.
10. Security
We use reasonable technical and organizational measures to protect personal data, but no method of transmission or storage is completely secure.
11. Changes to this policy
We may update this policy. When we do, we will change the effective date above. If we add advertising, analytics or other tools that affect your privacy, we will update this page first.
12. Contact
Rafael Javier [SURNAMES, exactly as on your ID (DNI/NIE)] (trading as Astexus)
[CITY AND PROVINCE, SPAIN (a full street address is optional)]
Email: rafapeja37@gmail.com