Privacy policy

Data controller: Santiago Lucerón Carrión, Tax ID 06264104P, Calle Alcalá, 122, Madrid (Spain), contact email flow@moventemag.com. Under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), this individual is the controller for the data processing described below.

Newsletter. When you subscribe from any form on the site (/en/suscribete/, or the sign-up blocks on the home page, articles, and issues), your email address is stored in Listmonk, open-source newsletter software that we install and run ourselves on our own server, hosted by Hetzner Online in Germany (EU). We do not use any third-party newsletter platform. Sign-up is single opt-in: we don't send a prior email asking you to confirm the address — you are subscribed as soon as you submit the form with the consent box ticked. As proof of that consent we record the date and the IP address you subscribed from. To learn which content is of interest, Listmonk records individually whether you open each email and which links you click. Emails are sent through Namecheap's email service (Private Email). Legal basis: your consent (GDPR Art. 6.1.a), which you can withdraw at any time via the unsubscribe link in every email or by writing to flow@moventemag.com. If someone subscribed you without your permission, write to us and we'll delete the address.

Purchases and payments. Purchases of The Compendium (PDF mini manuals) and advertiser payments are processed by Stripe. You pay on Stripe's secure page: we never see or store your card details; Stripe shares with us your name, email address, country, the amount, and the purchase ID. Legal basis: performance of the sales contract (GDPR Art. 6.1.b) and compliance with tax and accounting obligations (GDPR Art. 6.1.c).

Advertiser contact form. If you fill in the form at /en/anunciantes/, your name, company (if provided), email, and message are sent through an automated workflow (n8n, self-hosted by the controller) that notifies us via Telegram so we can reply. Legal basis: handling your own request (GDPR Art. 6.1.b).

Business outreach. To introduce Movente to schools, associations, and manufacturers in the industry, we use the professional contact details those organizations publish. Legal basis: legitimate interest in making the magazine known to industry professionals (GDPR Art. 6.1.f). Every email identifies the sender, and you can object by replying BAJA (or UNSUBSCRIBE): your address goes on a suppression list and we won't write to you again.

Instagram integration. If you connect your professional Instagram account to Movente, we store the access token, your username, profile picture, and account type, provided by Meta Platforms. Legal basis: your consent when authorizing the connection. How to delete them: /en/delete-data/.

Site analytics. We use Plausible, self-hosted on our Hetzner server (Germany) and cookieless, for aggregated, anonymous traffic metrics: it doesn't identify individuals, so it doesn't require your consent. Only if you accept the cookie banner do we also enable Google Analytics 4 via Google Tag Manager, which does use cookies and identifies your browser in more detail (pages viewed, referrer, behavior). Legal basis: your consent (GDPR Art. 6.1.a). You can withdraw it at any time from the "Cookie settings" link in the footer of every page or from the Cookie Policy: when you do, we turn off Google Analytics, delete its cookies, and the banner appears again.

Site security and delivery. All traffic to moventemag.com goes through Cloudflare, which acts as a content delivery network (CDN) and security proxy and therefore processes your IP address and the technical data of each request. Legal basis: our legitimate interest in keeping the site available and protected against attacks (GDPR Art. 6.1.f).

Who we share your data with. Only the providers necessary to deliver the service, acting as data processors: Hetzner Online GmbH (Germany) — hosting of the site, the newsletter (Listmonk), and analytics (Plausible); Cloudflare, Inc. (US) — CDN and proxy, sees your IP address; Stripe Payments Europe, Ltd. (Ireland) and Stripe, Inc. (US) — payments for The Compendium and advertisers; Namecheap, Inc. (US) — email (Private Email), through which the newsletter and our emails are sent; Google Ireland Ltd. / Google LLC (US) — Google Tag Manager and Google Analytics, only with your consent; Telegram — internal notification of advertiser form contacts (n8n, the workflow that sends it, is self-hosted); and Meta Platforms — only if you connect your Instagram account. We do not sell or share your data with third parties for purposes other than those described here.

International transfers. Some of these providers (Cloudflare, Stripe, Namecheap, Google, Meta, and Telegram) process data outside the European Economic Area, mainly in the US. Those transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, or on the Standard Contractual Clauses approved by the European Commission (GDPR Art. 46.2.c) included in their data processing terms. The newsletter (Listmonk) and the cookieless analytics (Plausible) are hosted entirely in the EU.

How long we keep your data. Newsletter data is kept while you remain subscribed; when you unsubscribe, your address is flagged as unsubscribed so we never write to you again, and we delete it completely if you ask us to. Purchase and payment data is kept for the periods required by tax and commercial law (generally up to six years). Contact-form data is kept for as long as needed to handle your request. Analytics data, where cookies apply, follows the retention periods configured in Google Analytics 4.

Your rights. You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability, and withdraw your consent at any time, by writing to flow@moventemag.com. You can also file a complaint with the Spanish Data Protection Agency (aepd.es) if you believe the processing doesn't comply with the regulation.

This site is not directed at children under 16, and we do not knowingly collect data from anyone under that age.