{"audience":["United States","United Kingdom","Nordic Europe","English-speaking Europe","Worldwide","Businesses in Spain (B2B)"],"canonical":{"en":"https://salahnomad.com/privacy/","es":"https://salahnomad.com/privacy/es/"},"complaints_authority_for_spain":{"address":"C/ Jorge Juan, 6 · 28001 Madrid","complaint_url":"https://www.aepd.es/preguntas-frecuentes/13-reclamaciones/FAQ-1301-como-puedo-interponer-una-reclamacion-si-han-vulnerado-mis-datos-de-caracter-personal","eu_authorities":"https://www.edpb.europa.eu/about-edpb/about-edpb/members_en","name":"Agencia Española de Protección de Datos (AEPD)","note":"No lead supervisory authority applies while the publisher is not established in the EU (no one-stop-shop); each authority is competent for people in its territory","uk_ico":"https://ico.org.uk/make-a-complaint/","url":"https://www.aepd.es/"},"controller":{"contact_form":"https://salahnomad.com/contact/","data_protection_officer":"Not appointed (not required, art. 37 GDPR)","domain":"salahnomad.com","establishment":"Not yet established in Spain or the EU; planned: Málaga, Spain","eu_representative":"To be designated under art. 27 GDPR; will be named on this page","identity_status":"provisional","privacy_contact":"https://salahnomad.com/contact/","territorial_basis":"GDPR art. 3(2)(a): the site offers services to people in Spain and the EU","trade_name":"Salah Nomad"},"coverage":["Málaga","Costa del Sol","Marbella","Andalusia","Seville","Granada","Costa Blanca","Valencia","Costa Brava","Barcelona","Madrid","Balearic Islands","Mediterranean Spain"],"en":{"clauses":[{"audience":["reader","buyer","client","pro"],"group":"who","id":"controller","number":1,"sources":["gdpr","lopdgdd","edpb-3-2018"],"text":"The controller is Salah Nomad, trade name of the independent publisher behind salahnomad.com. The publisher is not yet established in Spain or anywhere else in the European Union; settling in Málaga is the plan. The full legal identity (legal name, tax number and postal address) will be published here and in the Legal Notice as soon as the activity is registered in Spain, as art. 13(1)(a) GDPR requires. Until then every privacy request reaches the publisher directly through https://salahnomad.com/contact/.\nBecause the publisher is not established in the EU, art. 27 GDPR calls for a representative in the Union, and no authority acts as lead authority (see \u0026ldquo;Complaints and supervisory authorities\u0026rdquo;). No Data Protection Officer is appointed because none is required (art. 37 GDPR: no large-scale systematic monitoring and no special-category data).\n","title":"Who is responsible for your data","url":"https://salahnomad.com/privacy/#c-controller"},{"audience":["reader","buyer","client","pro"],"group":"who","id":"scope","number":2,"sources":["gdpr","edpb-3-2018","lopdgdd","lssi-4","lssi-22-2"],"text":"This policy covers salahnomad.com and everything you do through it: reading, newsletters, forms, purchases, private services and the business Partnership Pact.\nWhy EU law applies. The site deliberately addresses people in Spain and the EU (Spanish pages, Spanish locations, prices in euros for private engagements). That is the \u0026ldquo;targeting\u0026rdquo; criterion of art. 3(2)(a) GDPR, so the GDPR governs our processing of their data wherever the publisher works from. Spanish rules are our reference standard: the LOPDGDD (consent from age 14, layered notice, blocking of data) and, for cookies and commercial e-mail, Ley 34/2002 (LSSI-CE) arts. 21 and 22, which the AEPD applies to providers established outside the EU when they direct their services specifically to Spain (art. 4.1).\nWe use one standard for everyone, wherever you live. Visitors from the UK, the US and other countries: see clause 16. This page is a layered notice (LOPDGDD art. 11): \u0026ldquo;In short\u0026rdquo; is the first layer, the clauses are the second.\n","title":"Scope and applicable law","url":"https://salahnomad.com/privacy/#c-scope"},{"audience":["reader","buyer","client","pro"],"group":"data","id":"collect","number":3,"sources":["gdpr","gdpr-9","nowpayments","abillio-help","ruul-terms"],"text":"You give us: name, e-mail, optional phone and your message; for private-service inquiries, drop-down answers (budget band, timeline, purpose, zone, financing, nationality and tax residency), notes and NDA acceptance; for purchases, e-mail and order details. For invoices (a private engagement, a business purchase or an invoice request): the details needed to issue a valid one, namely name or company, address, tax or VAT number and amounts.\nCollected automatically: IP address, browser and device type, pages requested and referrer, in technical logs kept by our host and security provider; interface choices stored on your device (see \u0026ldquo;Your choices\u0026rdquo;).\nFrom others: for professionals who apply to the Partnership Pact, public data from the official register of the profession and the professional\u0026rsquo;s own website.\nWhat we do not collect: card numbers, passports, bank details or private keys. We do not process special categories of data (art. 9 GDPR: racial or ethnic origin, political opinions, beliefs, trade-union membership, genetic or biometric data, health, sex life). Nationality and tax residency are not on that list, but we treat them as sensitive and only ask for them to scope tax and visa guidance. Please do not put special-category data or ID documents in free-text boxes; we may delete them.\n","title":"What we collect","url":"https://salahnomad.com/privacy/#c-collect"},{"audience":["buyer","client","pro"],"group":"data","id":"basis","number":4,"sources":["gdpr","lopdgdd"],"text":" Purpose Legal basis (GDPR) Answer your message or inquiry Pre-contractual steps at your request, art. 6(1)(b); otherwise legitimate interest in replying, art. 6(1)(f) Deliver a purchase, order e-mails, download link Contract, art. 6(1)(b) Issue invoices through our invoicing platforms Contract, art. 6(1)(b), and legal obligation, art. 6(1)(c) Keep accounting and tax records Legal obligation, art. 6(1)(c) Newsletter Consent, art. 6(1)(a), and LSSI-CE art. 21 Priority score for private-service inquiries Legitimate interest, art. 6(1)(f); balancing note on request Security, anti-abuse, bot checks Legitimate interest, art. 6(1)(f) Optional video, comments, weather Consent by your click, art. 6(1)(a), and LSSI-CE art. 22.2 Partnership Pact: verification and listing Art. 6(1)(b); register checks art. 6(1)(f); public listing by consent Where processing rests on legitimate interest you can object at any time (art. 21).\n","title":"Why we use it, and on what legal basis","url":"https://salahnomad.com/privacy/#c-basis"},{"audience":["reader","buyer","client","pro"],"group":"data","id":"retention","number":5,"sources":["codcom-30","lgt-66","cc-1964","lopdgdd"],"text":" Data Period Reason Newsletter subscription Until you unsubscribe, plus a minimal suppression record Consent; never re-adding you Contact messages 2 years after the last exchange, then deleted or anonymised Answering and follow-up Private-service inquiries without engagement, and scoring data 90 days, then deleted Capacity planning Orders, engagements, invoices 6 years from the last accounting entry Código de Comercio art. 30; tax limitation is 4 years (LGT art. 66) NDA acceptances 5 years Evidence for civil claims (Código Civil art. 1964) Download links 7 days Security Our security logs Up to 90 days; providers\u0026rsquo; own logs follow their policies Security Comments on GitHub Until you delete them there Consent Professional partner records While the relationship is active; deleted within one month of a removal request Pact administration When the law keeps a liability period open, data is blocked (LOPDGDD art. 32): kept only for authorities and courts, then destroyed. Erasure requests are honoured except where a legal duty requires us to keep the record (art. 17(3)(b) GDPR).\n","title":"How long we keep it","url":"https://salahnomad.com/privacy/#c-retention"},{"audience":["reader","buyer","client","pro"],"group":"third","id":"cookies","number":6,"sources":["lssi-22-2","aepd-cookies","aepd-youtube"],"text":"The site uses no advertising, analytics or cross-site tracking cookies. What sits on your device is listed in \u0026ldquo;Your choices\u0026rdquo;: strictly necessary or user-chosen items (theme, cart, reading route, security checks, the record of your choices) which need no consent under LSSI-CE art. 22.2.\nOptional third-party content (YouTube, GitHub-powered comments, OpenWeather) does not load until you click \u0026ldquo;Load\u0026rdquo; on a notice that tells you who will receive your IP address. Your click is the consent; it is recorded on your device; you can withdraw it in \u0026ldquo;Your choices\u0026rdquo; as easily as you gave it.\nTwo honest limits. Cloudflare may set a security cookie if its bot protection challenges your browser. And the site theme requests its typefaces from Google Fonts when a page loads, which sends your IP address to Google (legitimate interest, art. 6(1)(f); the page stays readable if you block it).\n","title":"Cookies and similar technologies","url":"https://salahnomad.com/privacy/#c-cookies"},{"audience":["reader","buyer","client","pro"],"group":"third","id":"recipients","number":7,"sources":["gdpr","resend","formspree","openweather","ruul-terms","abillio-help"],"text":"We do not sell, rent or trade personal data, we have no affiliate programme and we share nothing with advertisers. Data goes only to service providers that run the site for us (processors bound by an art. 28 GDPR agreement), to a payment gateway you choose to use, to the invoicing platforms below, and to authorities or courts where the law requires it.\nInvoicing platforms. When an invoice is needed, it may be issued through Abillio (Estonia) and Ruul (Ruul OÜ, Estonia, affiliated with Ruul Inc., United States). They process the details required for a legally valid invoice: name or company, address, tax or VAT number and amounts. Each applies its own privacy policy to the records it keeps for its own legal duties.\nEach recipient, its role, its location and its safeguard are listed in \u0026ldquo;Who receives what\u0026rdquo;. We never pass your inquiry to a lawyer, agent, notary or bank unless you ask us to.\n","title":"Who receives your data","url":"https://salahnomad.com/privacy/#c-recipients"},{"audience":["buyer","client","pro"],"group":"third","id":"transfers","number":8,"sources":["dpf","latombe","nowpayments","resend","formspree","openweather","ruul-privacy","ruul-terms"],"text":"Where we work from. The publisher currently works from outside the EU. Because the GDPR applies to us under art. 3(2), we apply it to all processing, including the data our providers receive on our behalf.\nSeveral providers are in the United States. Where a provider is certified under the EU–US Data Privacy Framework (Commission adequacy decision of 10 July 2023) we rely on it, with Standard Contractual Clauses as fallback. Resend and Formspree state that they use Standard Contractual Clauses. The General Court upheld the Framework on 3 September 2025 (case T-553/23); an appeal (C-703/25 P) is pending, and if the Framework fell we would rely on the Clauses and other safeguards alone.\nNOWPayments is operated by FD Transfers LLC, registered in Saint Vincent and the Grenadines, a country without an EU adequacy decision. We limit what we send to what is needed to create and confirm the payment you asked for (order reference, amount, currency, payment status). The transfer is necessary for that payment (art. 49(1)(b) GDPR). On its payment page NOWPayments applies its own policy, including any identity checks it runs.\nRuul contracts through Ruul OÜ in Estonia; its affiliate Ruul Inc. is in Delaware, United States, and Ruul\u0026rsquo;s own policy says data may be transferred to other countries. We send only what is needed to issue the invoice you need (art. 49(1)(b) GDPR for the contract concerned). Abillio is established in Estonia. OpenWeather is in the United Kingdom, covered by the EU\u0026rsquo;s UK adequacy decision.\nYou may ask for a copy of the safeguards we rely on (art. 46 GDPR).\n","title":"Transfers outside the EU","url":"https://salahnomad.com/privacy/#c-transfers"},{"audience":["reader","buyer","client","pro"],"group":"control","id":"rights","number":9,"sources":["gdpr","gdpr-12","lopdgdd"],"text":"You have the right to access (art. 15), rectify (16), erase (17), restrict (18), port (20) and object (21), to withdraw consent (7(3)) and not to be subject to a decision based solely on automated processing with legal or similarly significant effects (22).\nUse the form on this page or write to https://salahnomad.com/contact/; say which right and which e-mail address. We acknowledge within 48 hours on business days and answer within one month, extendable by two months for complex or numerous requests, in which case we tell you why within the first month (art. 12(3) GDPR). It is free unless a request is manifestly unfounded or excessive.\nIn Spain people aged 14 or over exercise their own rights; parents or guardians act for younger children (LOPDGDD art. 12).\n","title":"Your rights and how to use them","url":"https://salahnomad.com/privacy/#c-rights"},{"audience":["client"],"group":"control","id":"auto","number":10,"sources":["gdpr"],"text":"When you send a private-service inquiry, a score is computed from five answers you choose: budget band, timeline, financing structure, NDA acceptance and zone. It only orders the queue: priority reply within 24 hours, standard reply within 48 hours. Nationality and tax residency are not scoring inputs.\nA person takes every engagement decision; the score never accepts or refuses anyone on its own. Below the threshold you receive an automatic reply that points to relevant guides and is not a final refusal. You can ask at any time for manual review, answered within 72 hours, to give your view and contest the outcome (art. 22(3) GDPR). Legal basis: legitimate interest (art. 6(1)(f)); you may object (art. 21). A note on the assessment of this scoring is available on request.\n","title":"Priority score and automated steps","url":"https://salahnomad.com/privacy/#c-auto"},{"audience":["reader","buyer"],"group":"control","id":"email","number":11,"sources":["lssi-21","gdpr"],"text":"We send marketing e-mail only to people who subscribed, as LSSI-CE art. 21 requires prior consent; the only exception is a customer\u0026rsquo;s existing contract, for similar products, with a free way to opt out in every message. Every message carries an unsubscribe link. Order confirmations, download links and replies to you are service messages, not marketing.\nSign-up forms pass your e-mail address to the form and e-mail providers named in \u0026ldquo;Who receives what\u0026rdquo;.\n","title":"Newsletter and commercial messages","url":"https://salahnomad.com/privacy/#c-email"},{"audience":["reader","buyer","client","pro"],"group":"control","id":"complaints","number":12,"sources":["aepd-complaint","gdpr","edpb-3-2018"],"text":"Write to us first at https://salahnomad.com/contact/; we acknowledge within 48 hours on business days. You can always lodge a complaint with the authority of the country where you live or work (EDPB member list); in Spain that is the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, through its electronic office. UK visitors: the ICO. You also have the right to a judicial remedy (art. 79 GDPR).\nBecause the publisher is not yet established in the EU, the one-stop-shop mechanism does not apply and no authority acts as lead authority: each authority is competent for the people in its own territory.\n","title":"Complaints and supervisory authorities","url":"https://salahnomad.com/privacy/#c-complaints"},{"audience":["buyer","client"],"group":"special","id":"crypto","number":13,"sources":["nowpayments","gdpr"],"text":"Payments are made in Bitcoin, Lightning or USDC through NOWPayments. A public blockchain records transactions permanently and visibly, outside our control: no one, including us, can erase on-chain data. We never ask for private keys. We keep the payer address only as part of the order record needed to confirm payment and meet accounting duties. If you want less traceability, use a fresh address for each purchase.","title":"Crypto payments and public blockchains","url":"https://salahnomad.com/privacy/#c-crypto"},{"audience":["pro"],"group":"special","id":"professionals","number":14,"sources":["lopdgdd-19","gdpr","lopdgdd"],"text":"If you are a professional or a company that contacts us or applies to the Partnership Pact, we process your business contact data (name, role, firm, professional e-mail and phone, website, registration number) to answer you, verify your registration on the official register of your profession and, if accepted, list you.\nSources: you, the official register and your public website; where data does not come from you we tell you within one month (art. 14(3)(a) GDPR). Basis: pre-contractual steps (art. 6(1)(b)); register checks on legitimate interest (art. 6(1)(f)), where LOPDGDD art. 19 presumes that interest for professional contact data used only to keep a business relationship (we do not lean on that presumption for individuals we deal with personally); public listing only with your consent, which you can withdraw.\nNo money is paid or received in either direction. We never sell or exchange lists. A client\u0026rsquo;s brief reaches a partner only when that client asks. Each party is an independent controller of the data it holds; there is no joint controllership. Regulated acts stay with the licensed professional.\n","title":"Professionals and businesses (Partnership Pact)","url":"https://salahnomad.com/privacy/#c-professionals"},{"audience":["reader","buyer","client","pro"],"group":"special","id":"children","number":15,"sources":["lopdgdd-7","gdpr"],"text":"The site and its services are for adults. In Spain a minor\u0026rsquo;s own consent is valid from age 14 (LOPDGDD art. 7); below that, a parent or guardian must give it. We do not knowingly collect data from children under 14 (13 in the US) and our private services are for adults. If you think a child has sent us data, write to https://salahnomad.com/contact/ and we will delete it.","title":"Children","url":"https://salahnomad.com/privacy/#c-children"},{"audience":["reader","buyer","client","pro"],"group":"special","id":"outside","number":16,"sources":["ccpa","gdpr"],"text":"United Kingdom: UK GDPR and the Data Protection Act 2018 give you equivalent rights; complaints go to the ICO. Nordic and other EEA countries: the GDPR applies directly; complain to your national authority. United States: state privacy laws such as California\u0026rsquo;s CCPA/CPRA apply to businesses above thresholds (annual revenue over $26,625,000, or buying, selling or sharing data of 100,000 or more consumers or households, or earning half of revenue from selling or sharing data). We are below them, we do not sell or share personal information, and we apply the same rights to you anyway. Elsewhere: the same standard applies.","title":"Visitors outside the EU","url":"https://salahnomad.com/privacy/#c-outside"},{"audience":["reader","buyer","client","pro"],"group":"safety","id":"security","number":17,"sources":["gdpr"],"text":"We use encryption in transit (TLS), a security layer in front of the site (Cloudflare), bot checks on forms, short-lived limited download links, no card data on our systems, and access to order and inquiry records limited to the publisher and the processors listed here. We keep a record of processing activities (art. 30 GDPR) and have assessed whether an impact assessment is needed for the scoring (art. 35); a summary is available on request.\nIf a breach is likely to put your rights at risk we notify the competent supervisory authority or authorities within 72 hours (art. 33; the AEPD for people in Spain) and, if the risk is high, tell you without undue delay (art. 34).\n","title":"Security and breaches","url":"https://salahnomad.com/privacy/#c-security"},{"audience":["reader","buyer","client","pro"],"group":"safety","id":"changes","number":18,"sources":["lopdgdd"],"text":"The version in force is shown by the number and date on this page and in the version history. Material changes (new purposes, new recipients, new transfers) are announced in the newsletter at least 7 days before they take effect. Earlier versions are available on request. A machine-readable copy is at /privacy/privacy.json.","title":"Changes to this policy","url":"https://salahnomad.com/privacy/#c-changes"}],"commitments":[{"text":"to acknowledge your request on business days","value":"48 h"},{"text":"to answer; extendable by two months only for complex or numerous requests, and we tell you why within the first month (art. 12(3))","value":"1 month"},{"text":"charged, unless a request is manifestly unfounded or excessive (art. 12(5))","value":"0 €"}],"device_storage":[{"consent_needed":false,"duration":"Until you clear it","key":"theme · darkMode","purpose":"Light or dark mode you chose","type":"localStorage"},{"consent_needed":false,"duration":"Until you empty it or clear it","key":"sn_cart_v1","purpose":"Your shopping cart","type":"localStorage"},{"consent_needed":false,"duration":"Until you change it","key":"sn-persona · at-audience · ba-persona · cm-route · pk-profile · …","purpose":"The reading route or profile you picked","type":"localStorage"},{"consent_needed":false,"duration":"Until you clear it","key":"weatherDisplayUnit","purpose":"°C or °F you chose","type":"localStorage"},{"consent_needed":false,"duration":"Until you clear it","key":"sx-cta-dismissed · cv-subscribed","purpose":"Prompts you closed or already answered","type":"localStorage"},{"consent_needed":false,"duration":"Until you close the tab","key":"hb-draft · tc_welcome · pk-esbar","purpose":"An unsent form draft or banner state","type":"sessionStorage"},{"consent_needed":false,"duration":"Until you withdraw or clear it","key":"sn_consent_v1","purpose":"Remembers your choices in this panel (and nothing else)","type":"localStorage"},{"consent_needed":false,"duration":"Minutes to hours, set by Cloudflare","key":"__cf_bm · cf_clearance (only if challenged)","purpose":"Cloudflare security cookie, set only if its bot protection challenges your browser","type":"cookie"},{"consent_needed":true,"duration":"Set by the provider; see its policy","key":"YouTube · GitHub (Giscus) · OpenWeather","purpose":"Whatever those providers store once you click Load","type":"thirdparty"}],"faq":[{"answer":"Salah Nomad, the trade name of an independent publisher, is the controller. The publisher is not yet established in Spain or the EU; settling in Málaga is the plan. The full legal identity will be published in the Legal Notice and in the identity card on this page as soon as the activity is registered in Spain; until then privacy requests go through the contact page or the form on this page. Because the GDPR applies to the site under art. 3(2), an EU representative under art. 27 is to be designated and will be named here. No Data Protection Officer is appointed because none is required under art. 37 GDPR.","question":"Who is responsible for my data on salahnomad.com, and is the publisher based in the EU?"},{"answer":"There are no advertising, analytics or cross-site tracking cookies. What sits on your device (theme, cart, reading route, security checks, the record of your choices) is strictly necessary or chosen by you, which needs no consent under LSSI-CE art. 22.2. Anything optional waits behind a click that explains what will happen, so a banner would have nothing to ask. See \u0026lsquo;Your choices\u0026rsquo; for the full register.","question":"Do you use cookies, and why is there no cookie banner?"},{"answer":"Your click is the consent. Only then does your browser contact the provider (YouTube via its privacy-enhanced domain, or GitHub for comments), which receives your IP address and may set its own cookies. You can tick “remember”, and you can withdraw at any time in \u0026lsquo;Your choices\u0026rsquo;. The AEPD has treated YouTube cookies as requiring consent, which is why videos wait for you.","question":"What happens when I click “Load video” or “Load comments”?"},{"answer":"No. We do not sell, rent or trade personal data, we have no affiliate programme and we share nothing with advertisers. Data goes only to the providers listed in \u0026lsquo;Who receives what\u0026rsquo;, to a payment gateway you choose to use, and to authorities where the law requires it.","question":"Do you sell my data or share it with advertisers?"},{"answer":"Your e-mail, order ID, product, price in USD, payment status and the payer wallet address. The download link lasts 7 days; order and accounting records are kept for 6 years from the last accounting entry (Código de Comercio art. 30), then deleted. We never see a card number.","question":"What do you collect when I buy a guide, and how long do you keep it?"},{"answer":"No. Art. 9 GDPR lists racial or ethnic origin, political opinions, beliefs, trade-union membership, genetic and biometric data, health and sex life; nationality and tax residency are not on that list. We still treat them as sensitive, ask for them only through drop-down answers and use them solely to scope tax and visa guidance.","question":"Are my nationality and tax residency treated as special-category data?"},{"answer":"Use the form on this page or the contact page, saying which right you want and which e-mail address we hold. We acknowledge within 48 hours on business days and answer within one month (art. 12(3) GDPR), extendable by two months only for complex or numerous requests. It is free. We may ask for proof of identity if we have reasonable doubts.","question":"How do I access, correct or delete my data, and how long will it take?"},{"answer":"No. A priority score built from five answers you choose only orders the queue. A person takes every engagement decision. Below the threshold you get an automatic reply that is not a final refusal, and you can ask for manual review at any time, answered within 72 hours.","question":"Does a machine decide whether you work with me?"},{"answer":"Some does. Several providers are in the United States and rely on the EU–US Data Privacy Framework or Standard Contractual Clauses (Resend and Formspree use the Clauses). NOWPayments is run by FD Transfers LLC in Saint Vincent and the Grenadines, which has no EU adequacy decision, so we send only what is needed to create the payment you asked for. The register lists each provider, its location and its safeguard.","question":"Does my data leave the European Union?"},{"answer":"UK visitors have equivalent rights under UK GDPR and can complain to the ICO. Nordic and other EEA visitors are protected directly by the GDPR. US state laws such as California\u0026rsquo;s CCPA apply above revenue and data-volume thresholds that we do not reach, but we apply the same rights to everyone and we do not sell or share personal information.","question":"I live in the UK, the US or a Nordic country: which law protects me?"},{"answer":"We use your business contact data to answer you, verify your registration on the official register of your profession and, if you are accepted, list you, with your consent for the public listing. No money moves in either direction, lists are never sold, and a client\u0026rsquo;s brief reaches you only when that client asks. You can ask for removal at any time and we act within one month. A Spanish version for businesses is at /privacy/es/.","question":"I run a business in Spain. How is my data handled in the Partnership Pact?"},{"answer":"When an invoice is needed (a private engagement, a business purchase or an invoice request), it may be issued through Abillio (Estonia) or Ruul (Ruul OÜ in Estonia, affiliated with Ruul Inc. in the United States). They receive only what a valid invoice requires: name or company, address, tax or VAT number and amounts, and they keep their own legal records under their own privacy policies. We send only that data. See the register for each provider\u0026rsquo;s location and safeguard.","question":"Who issues my invoice, and who sees my invoice details?"},{"answer":"Write to us first; we acknowledge within 48 hours on business days. You can always complain to the authority of the country where you live or work (in Spain, the AEPD in Madrid), to the ICO if you are in the UK, and in court. Because the publisher is not yet established in the EU, no authority acts as lead authority.","question":"Where can I complain?"}],"journeys":[{"collects":["IP address and technical request data in security logs","Interface choices stored on your device (light/dark mode, route, cart)"],"control":"Clear site data in your browser at any time. Nothing is used for advertising.","id":"browse","legal_basis":"Legitimate interest in security (art. 6(1)(f) GDPR); device storage you choose is exempt (LSSI art. 22.2).","purpose":"Serve pages securely, block abuse, remember choices you made.","recipients":["cloudflare","google-fonts"],"retention":"Security logs up to 90 days. Device choices until you clear them.","title":"Reading the site"},{"collects":["E-mail address","The moment and source of your sign-up (proof of consent)"],"control":"One-click unsubscribe in every message, or write to https://salahnomad.com/contact/.","id":"subscribe","legal_basis":"Your consent (art. 6(1)(a) GDPR; LSSI art. 21).","purpose":"Send the newsletter you asked for.","recipients":["turnstile","formspree","resend","cloudflare"],"retention":"Until you unsubscribe; a minimal suppression record keeps you from being re-added.","title":"Joining the newsletter"},{"collects":["E-mail address","Order ID, product, price in USD, payment status","Payer wallet address (from the payment)","If you need an invoice: name or company, address, tax or VAT number"],"control":"You choose the wallet and address; no account is created and no card is ever seen by us.","id":"buy","legal_basis":"Contract (art. 6(1)(b)); legal obligation for accounting (art. 6(1)(c)).","purpose":"Take the payment, send your download link, keep the accounting records the law requires.","recipients":["nowpayments","abillio","ruul","resend","cloudflare","payhip"],"retention":"Download link 7 days. Order and accounting records 6 years from the last entry; invoicing platforms keep their own legal records.","title":"Buying a guide or manual"},{"collects":["Name, e-mail, optional phone, message","For private services: budget band, timeline, purpose, zone, financing, nationality and tax residency (drop-down choices), notes, NDA acceptance","For the invoice: name or company, address, tax or VAT number"],"control":"Object to the score or ask for manual review any time (clause 10). No special-category data is requested.","id":"ask","legal_basis":"Pre-contractual steps at your request (art. 6(1)(b)); legitimate interest for the priority score (art. 6(1)(f)).","purpose":"Answer you, scope the engagement and order the queue.","recipients":["turnstile","resend","abillio","ruul","cloudflare"],"retention":"Messages 2 years after the last exchange. Inquiries without engagement 90 days. Engagements 6 years.","title":"Asking or hiring"},{"collects":["Name, role, firm, professional e-mail and phone, website","Registration number checked on the official register of your profession"],"control":"Ask to be removed or corrected at any time. We never sell or exchange lists.","id":"partner","legal_basis":"Pre-contractual steps (art. 6(1)(b)); verification of public registers (art. 6(1)(f)); public listing only with your consent.","purpose":"Verify, answer and, if you are accepted, list your business. No money moves between us in either direction.","recipients":["turnstile","resend","cloudflare"],"retention":"While the relationship is active; removed within one month of your request.","title":"Professional or business"},{"collects":["Nothing until you click “Load”","After the click, the provider sees your IP address and device details"],"control":"Switch each service off in “Your choices” as easily as you switched it on.","id":"interact","legal_basis":"Your consent by clicking (art. 6(1)(a); LSSI art. 22.2).","purpose":"Show a video, a comment thread or the Málaga weather.","recipients":["youtube","giscus","openweather"],"retention":"Set by each provider; see its policy. Withdrawal clears our record of your choice.","title":"Watching, commenting, checking the weather"}],"recipients":[{"data":"IP address, request metadata, order records, e-mail","id":"cloudflare","kind":"hosting","loads":"always","location":"USA · 101 Townsend St, San Francisco, CA","name":"Cloudflare, Inc.","role":"Hosting, CDN, DDoS and bot protection, order database, file storage","safeguard":"dpf","safeguard_text":"EU–US Data Privacy Framework, with Standard Contractual Clauses as fallback","url":"https://www.cloudflare.com/privacypolicy/"},{"data":"Browser signals needed to tell humans from bots, IP address","id":"turnstile","kind":"security","loads":"form","location":"USA · Cloudflare, Inc.","name":"Cloudflare Turnstile","role":"Human check on forms (loads only when a form is near the screen)","safeguard":"dpf","safeguard_text":"EU–US Data Privacy Framework, with Standard Contractual Clauses as fallback","url":"https://www.cloudflare.com/application-services/products/turnstile/"},{"data":"Order reference, amount, currency, payment status, payer wallet address; anything you enter on its page","id":"nowpayments","kind":"payments","loads":"checkout","location":"Saint Vincent and the Grenadines · Suite 305, Griffith Corporate Centre, Kingstown","name":"NOWPayments (FD Transfers LLC)","role":"Crypto payment gateway (Bitcoin, Lightning, USDC) on the page where you pay","safeguard":"art49","safeguard_text":"No adequacy decision: data minimised; art. 49(1)(b) GDPR","url":"https://nowpayments.io/doc/fd-privacy-policy.pdf"},{"data":"E-mail address, order details, message content","id":"resend","kind":"email","loads":"form","location":"USA","name":"Resend, Inc.","role":"Delivery of order, download-link, reply and newsletter e-mails","safeguard":"scc","safeguard_text":"Standard Contractual Clauses","url":"https://resend.com/legal/privacy-policy"},{"data":"E-mail address","id":"formspree","kind":"forms","loads":"form","location":"USA","name":"Formspree, Inc.","role":"Newsletter sign-up form in the sidebar","safeguard":"scc","safeguard_text":"Standard Contractual Clauses","url":"https://formspree.io/legal/privacy-policy/"},{"data":"Name or company, address, tax or VAT number, amounts","id":"abillio","kind":"invoicing","loads":"invoice","location":"Estonia · Tallinn (EU)","name":"Abillio","role":"Invoicing platform: issues legally valid invoices for engagements, business purchases and invoice requests","safeguard":"eea","safeguard_text":"Provider established in the EU/EEA","url":"https://intercom.help/abillio/en/articles/6435823-what-if-my-client-asks-for-a-signed-service-agreement-or-any-other-document"},{"data":"Name or company, address, tax or VAT number, amounts, identity checks it runs under its own policy","id":"ruul","kind":"invoicing","loads":"invoice","location":"Estonia (Ruul OÜ, EU) · affiliate Ruul Inc., Delaware, United States","name":"Ruul (Ruul OÜ · Ruul Inc.)","role":"Invoicing and payout platform (Agent of Record) for international engagements","safeguard":"ruul","safeguard_text":"Contracting entity in the EU (Estonia); only invoicing data is sent; onward transfers to its US affiliate follow Ruul's own policy","url":"https://ruul.io/privacy-policy"},{"data":"IP address and browser details sent to Google's font servers","id":"google-fonts","kind":"fonts","loads":"always","location":"USA / Ireland","name":"Google Fonts (Google)","role":"Delivers the typefaces of the site theme","safeguard":"dpf","safeguard_text":"EU–US Data Privacy Framework, with Standard Contractual Clauses as fallback","url":"https://policies.google.com/privacy"},{"data":"IP address, device details and, if you play, viewing data and Google cookies","id":"youtube","kind":"video","loads":"click","location":"Ireland / USA","name":"YouTube (Google)","role":"Embedded videos, loaded only after you click “Load video”","safeguard":"dpf","safeguard_text":"EU–US Data Privacy Framework, with Standard Contractual Clauses as fallback","url":"https://policies.google.com/privacy"},{"data":"IP address; if you comment: GitHub username, comment, timestamp","id":"giscus","kind":"comments","loads":"click","location":"USA · GitHub, Inc.","name":"GitHub Discussions (Giscus)","role":"Article comments, loaded only after you click “Load comments”","safeguard":"dpf","safeguard_text":"EU–US Data Privacy Framework, with Standard Contractual Clauses as fallback","url":"https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement"},{"data":"IP address and browser details (OpenWeather states it does not store API-request parameters or IP addresses)","id":"openweather","kind":"weather","loads":"click","location":"United Kingdom · 30 St Mary's Axe, London","name":"OpenWeather Ltd","role":"Málaga weather widget, loaded only after you click “Show weather”","safeguard":"uk","safeguard_text":"EU adequacy decision for the UK","url":"https://openweather.co.uk/privacy-policy"}],"rights":[{"clause":"rights","description":"Know whether we hold your data and get a copy (art. 15).","right":"Access"},{"clause":"rights","description":"Correct what is wrong or incomplete (art. 16).","right":"Rectification"},{"clause":"retention","description":"Have your data deleted when the law allows it (art. 17).","right":"Erasure"},{"clause":"rights","description":"Freeze the use of your data while a dispute is settled (art. 18).","right":"Restriction"},{"clause":"rights","description":"Receive your data in a common machine-readable format (art. 20).","right":"Portability"},{"clause":"auto","description":"Object to processing based on legitimate interest, including the priority score (art. 21).","right":"Objection"},{"clause":"cookies","description":"As easily as you gave it, any time (art. 7(3)).","right":"Withdraw consent"},{"clause":"auto","description":"Ask a person to review any automated step (art. 22(3)).","right":"Human review"},{"clause":"complaints","description":"To the AEPD or your own authority, and in court (arts. 77–79).","right":"Complain"}],"short_answer":"salahnomad.com is run by Salah Nomad, an independent publisher not yet established in Spain or the EU (settling in Málaga is the plan), who collects only what is needed to answer you, deliver your order and keep the records the law requires. There are no advertising or cross-site tracking cookies, no affiliate links and no sale of personal data. Optional third-party content (YouTube, comments, weather) loads only after you click. The GDPR applies because the site addresses people in the EU. You can access, correct, erase, restrict, port or object to your data, withdraw consent at any time, and complain to the data protection authority of your country, in Spain the AEPD. Requests are acknowledged within 48 hours on business days and answered within one month.","title":"The Kasbah · Privacy Policy","url":"https://salahnomad.com/privacy/","version_history":[{"changes":"Identity card aligned with /terms/ (art. 10 LSSI-CE): trade name, contact link, business register and the identity-publication note. Privacy requests now go through the contact page instead of a published e-mail address, to avoid spam.","date":"2026-11-01","title":"Identity card and contact link","version":"2.2"},{"changes":"Clarified that the publisher is not yet established in Spain or the EU: the GDPR applies through art. 3(2), art. 27 calls for an EU representative (to be designated), and no lead authority applies. Abillio (Estonia) and Ruul (Ruul OÜ, Estonia; affiliate Ruul Inc., United States) added as invoicing platforms, with the invoice details collected. Breach notification and complaints clauses adjusted accordingly.","date":"2026-11-01","title":"Establishment, EU law and invoicing platforms","version":"2.1"},{"changes":"Nationality and tax residency are no longer described as special-category data (art. 9 GDPR). Accounting retention corrected to 6 years (Código de Comercio art. 30). NOWPayments identified as FD Transfers LLC (Saint Vincent and the Grenadines) with its transfer basis. Resend and Formspree safeguards corrected to Standard Contractual Clauses. Optional embeds (YouTube, comments, weather) now load only after a click. Response time stated as one month (art. 12(3)).","date":"2026-10-31","title":"New Kasbah hub, English and Spanish","version":"2.0"},{"changes":"Replaced by version 2.0.","date":"2024-05-08","title":"Original privacy policy","version":"1.x"}]},"es":{"clauses":[{"audience":["reader","buyer","client","pro"],"group":"who","id":"controller","number":1,"sources":["gdpr","lopdgdd","edpb-3-2018"],"text":"El responsable es Salah Nomad, nombre comercial del editor independiente de salahnomad.com. El editor aún no está establecido en España ni en ningún otro lugar de la Unión Europea; instalarse en Málaga es el proyecto. La identidad legal completa (nombre o razón social, NIF y domicilio postal) se publicará aquí y en el Aviso Legal en cuanto la actividad quede registrada en España, como exige el art. 13.1.a RGPD. Hasta entonces, toda solicitud de privacidad llega directamente al editor a través de https://salahnomad.com/contact/.\nAl no estar establecido en la UE, el art. 27 RGPD exige un representante en la Unión y ninguna autoridad actúa como autoridad principal (vea «Reclamaciones y autoridades de control»). No se ha designado Delegado de Protección de Datos porque no es obligatorio (art. 37 RGPD: no hay observación habitual y sistemática a gran escala ni categorías especiales de datos).\n","title":"Quién es el responsable de sus datos","url":"https://salahnomad.com/privacy/es/#c-controller"},{"audience":["reader","buyer","client","pro"],"group":"who","id":"scope","number":2,"sources":["gdpr","edpb-3-2018","lopdgdd","lssi-4","lssi-22-2"],"text":"Esta política abarca salahnomad.com y todo lo que usted hace a través del sitio: lectura, newsletter, formularios, compras, servicios privados y el Pacto de Colaboración para empresas.\nPor qué se aplica el derecho de la UE. El sitio se dirige deliberadamente a personas en España y en la UE (páginas en español, ubicaciones españolas, precios en euros para los encargos privados). Es el criterio de «orientación» del art. 3.2.a RGPD, de modo que el RGPD rige nuestro tratamiento de sus datos desde donde trabaje el editor. La normativa española es nuestro estándar de referencia: la LOPDGDD (consentimiento desde los 14 años, información por capas, bloqueo de datos) y, para cookies y correo comercial, los arts. 21 y 22 de la Ley 34/2002 (LSSI-CE), que la AEPD aplica a los prestadores establecidos fuera de la UE cuando dirigen sus servicios específicamente a España (art. 4.1).\nUsamos un único estándar para todos, resida donde resida. Visitantes del Reino Unido, EE. UU. y otros países: vea la cláusula 16. Esta página es una información por capas (art. 11 LOPDGDD): «En breve» es la primera capa y las cláusulas, la segunda.\n","title":"Ámbito y normativa aplicable","url":"https://salahnomad.com/privacy/es/#c-scope"},{"audience":["reader","buyer","client","pro"],"group":"data","id":"collect","number":3,"sources":["gdpr","gdpr-9","nowpayments","abillio-help","ruul-terms"],"text":"Usted nos facilita: nombre, correo, teléfono opcional y su mensaje; en consultas de servicios privados, respuestas de listas desplegables (tramo de presupuesto, plazo, finalidad, zona, financiación, nacionalidad y residencia fiscal), notas y aceptación del NDA; en compras, correo y datos del pedido. Para facturas (un encargo privado, una compra de empresa o una solicitud de factura): los datos necesarios para emitir una válida, es decir, nombre o empresa, domicilio, NIF o número de IVA e importes.\nRecogidos automáticamente: dirección IP, tipo de navegador y dispositivo, páginas solicitadas y página de origen, en registros técnicos que conservan nuestro proveedor de alojamiento y seguridad; elecciones de interfaz guardadas en su dispositivo (vea «Sus elecciones»).\nDe otras fuentes: para profesionales que solicitan el Pacto de Colaboración, datos públicos del registro oficial de la profesión y de la web del propio profesional.\nLo que no recogemos: números de tarjeta, pasaportes, datos bancarios ni claves privadas. No tratamos categorías especiales de datos (art. 9 RGPD: origen étnico o racial, opiniones políticas, convicciones, afiliación sindical, datos genéticos o biométricos, salud, vida sexual). La nacionalidad y la residencia fiscal no figuran en esa lista, pero las tratamos como datos sensibles y solo las pedimos para orientar sobre fiscalidad y visados. No incluya datos de categorías especiales ni documentos de identidad en los cuadros de texto libre; podemos eliminarlos.\n","title":"Qué datos recogemos","url":"https://salahnomad.com/privacy/es/#c-collect"},{"audience":["buyer","client","pro"],"group":"data","id":"basis","number":4,"sources":["gdpr","lopdgdd"],"text":" Finalidad Base jurídica (RGPD) Responder a su mensaje o consulta Medidas precontractuales a petición suya, art. 6.1.b; en otro caso, interés legítimo en responder, art. 6.1.f Entregar una compra, correos de pedido, enlace de descarga Contrato, art. 6.1.b Emitir facturas mediante nuestras plataformas de facturación Contrato, art. 6.1.b, y obligación legal, art. 6.1.c Llevar los registros contables y fiscales Obligación legal, art. 6.1.c Newsletter Consentimiento, art. 6.1.a, y art. 21 LSSI-CE Puntuación de prioridad de consultas de servicios privados Interés legítimo, art. 6.1.f; nota de ponderación a petición Seguridad, prevención de abusos, controles antibots Interés legítimo, art. 6.1.f Vídeo, comentarios y tiempo opcionales Consentimiento mediante clic, art. 6.1.a, y art. 22.2 LSSI-CE Pacto de Colaboración: verificación y listado Art. 6.1.b; comprobación de registros art. 6.1.f; listado público con consentimiento Cuando el tratamiento se basa en el interés legítimo, puede oponerse en cualquier momento (art. 21).\n","title":"Para qué los usamos y con qué base jurídica","url":"https://salahnomad.com/privacy/es/#c-basis"},{"audience":["reader","buyer","client","pro"],"group":"data","id":"retention","number":5,"sources":["codcom-30","lgt-66","cc-1964","lopdgdd"],"text":" Dato Plazo Motivo Suscripción a la newsletter Hasta que se dé de baja, más un registro mínimo de supresión Consentimiento; no volver a incluirle Mensajes de contacto 2 años desde el último intercambio; después se eliminan o anonimizan Atención y seguimiento Consultas de servicios privados sin encargo y datos de puntuación 90 días; después se eliminan Planificación de capacidad Pedidos, encargos, facturas 6 años desde el último asiento contable Art. 30 del Código de Comercio; la prescripción tributaria es de 4 años (art. 66 LGT) Aceptaciones del NDA 5 años Prueba ante reclamaciones civiles (art. 1964 del Código Civil) Enlaces de descarga 7 días Seguridad Nuestros registros de seguridad Hasta 90 días; los de los proveedores siguen sus políticas Seguridad Comentarios en GitHub Hasta que los elimine allí Consentimiento Registros de profesionales colaboradores Mientras la relación esté activa; se eliminan en un mes desde la solicitud de baja Administración del Pacto Cuando la ley mantiene abierto un plazo de responsabilidad, los datos se bloquean (art. 32 LOPDGDD): solo quedan a disposición de autoridades y tribunales y después se destruyen. Atendemos las solicitudes de supresión salvo que una obligación legal nos exija conservar el registro (art. 17.3.b RGPD).\n","title":"Cuánto tiempo los conservamos","url":"https://salahnomad.com/privacy/es/#c-retention"},{"audience":["reader","buyer","client","pro"],"group":"third","id":"cookies","number":6,"sources":["lssi-22-2","aepd-cookies","aepd-youtube"],"text":"El sitio no usa cookies publicitarias, analíticas ni de seguimiento entre sitios. Lo que hay en su dispositivo figura en «Sus elecciones»: elementos estrictamente necesarios o elegidos por usted (tema, carrito, ruta de lectura, controles de seguridad, el registro de sus elecciones), que no requieren consentimiento según el art. 22.2 LSSI-CE.\nEl contenido opcional de terceros (YouTube, comentarios de GitHub, OpenWeather) no se carga hasta que usted pulsa «Cargar» en un aviso que le dice quién recibirá su dirección IP. Su clic es el consentimiento; se registra en su dispositivo y puede retirarlo en «Sus elecciones» tan fácilmente como lo dio.\nDos límites, con franqueza. Cloudflare puede instalar una cookie de seguridad si su protección antibots desafía a su navegador. Y el tema del sitio solicita sus tipografías a Google Fonts al cargar una página, lo que envía su dirección IP a Google (interés legítimo, art. 6.1.f; la página sigue siendo legible si lo bloquea).\n","title":"Cookies y tecnologías similares","url":"https://salahnomad.com/privacy/es/#c-cookies"},{"audience":["reader","buyer","client","pro"],"group":"third","id":"recipients","number":7,"sources":["gdpr","resend","formspree","openweather","ruul-terms","abillio-help"],"text":"No vendemos, alquilamos ni intercambiamos datos personales, no tenemos programa de afiliados y no compartimos nada con anunciantes. Los datos solo llegan a proveedores que hacen funcionar el sitio por nuestra cuenta (encargados del tratamiento vinculados por un contrato del art. 28 RGPD), a una pasarela de pago que usted decide usar, a las plataformas de facturación que se indican abajo y a autoridades o tribunales cuando la ley lo exige.\nPlataformas de facturación. Cuando hace falta una factura, puede emitirse mediante Abillio (Estonia) y Ruul (Ruul OÜ, Estonia, afiliada a Ruul Inc., Estados Unidos). Tratan los datos necesarios para una factura legalmente válida: nombre o empresa, domicilio, NIF o número de IVA e importes. Cada una aplica su propia política de privacidad a los registros que conserva para sus propias obligaciones legales.\nCada destinatario, su función, su ubicación y su garantía figuran en «Quién recibe qué». Nunca trasladamos su consulta a un abogado, agente, notario o banco salvo que usted nos lo pida.\n","title":"Quién recibe sus datos","url":"https://salahnomad.com/privacy/es/#c-recipients"},{"audience":["buyer","client","pro"],"group":"third","id":"transfers","number":8,"sources":["dpf","latombe","nowpayments","resend","formspree","openweather","ruul-privacy","ruul-terms"],"text":"Desde dónde trabajamos. El editor trabaja actualmente desde fuera de la UE. Como el RGPD se nos aplica en virtud del art. 3.2, lo aplicamos a todo el tratamiento, incluidos los datos que reciben nuestros proveedores por nuestra cuenta.\nVarios proveedores están en Estados Unidos. Cuando un proveedor está certificado en el Marco de Privacidad de Datos UE-EE. UU. (decisión de adecuación de la Comisión de 10 de julio de 2023), nos apoyamos en él, con cláusulas contractuales tipo como respaldo. Resend y Formspree indican que usan cláusulas contractuales tipo. El Tribunal General confirmó el Marco el 3 de septiembre de 2025 (asunto T-553/23); hay un recurso de casación pendiente (C-703/25 P) y, si el Marco cayera, nos apoyaríamos solo en las cláusulas y otras garantías.\nNOWPayments lo opera FD Transfers LLC, registrada en San Vicente y las Granadinas, país sin decisión de adecuación de la UE. Limitamos lo que enviamos a lo necesario para crear y confirmar el pago que usted solicita (referencia del pedido, importe, divisa, estado del pago). La transferencia es necesaria para ese pago (art. 49.1.b RGPD). En su página de pago, NOWPayments aplica su propia política, incluidas las verificaciones de identidad que realice.\nRuul contrata a través de Ruul OÜ, en Estonia; su filial Ruul Inc. está en Delaware, Estados Unidos, y la propia política de Ruul indica que los datos pueden transferirse a otros países. Solo enviamos lo necesario para emitir la factura que usted necesita (art. 49.1.b RGPD para el contrato de que se trate). Abillio está establecida en Estonia. OpenWeather está en el Reino Unido, amparado por la decisión de adecuación de la UE para ese país.\nPuede pedirnos copia de las garantías en que nos apoyamos (art. 46 RGPD).\n","title":"Transferencias fuera de la UE","url":"https://salahnomad.com/privacy/es/#c-transfers"},{"audience":["reader","buyer","client","pro"],"group":"control","id":"rights","number":9,"sources":["gdpr","gdpr-12","lopdgdd"],"text":"Tiene derecho de acceso (art. 15), rectificación (16), supresión (17), limitación (18), portabilidad (20) y oposición (21), a retirar el consentimiento (7.3) y a no ser objeto de una decisión basada únicamente en un tratamiento automatizado con efectos jurídicos o similares (22).\nUse el formulario de esta página o escriba a https://salahnomad.com/contact/; indique qué derecho ejerce y qué correo tenemos de usted. Acusamos recibo en 48 horas en días laborables y respondemos en un mes, ampliable dos meses si la solicitud es compleja o hay muchas, en cuyo caso le explicamos el motivo dentro del primer mes (art. 12.3 RGPD). Es gratuito salvo solicitudes manifiestamente infundadas o excesivas.\nEn España, las personas de 14 años o más ejercen sus propios derechos; los progenitores o tutores actúan por los menores de esa edad (art. 12 LOPDGDD).\n","title":"Sus derechos y cómo ejercerlos","url":"https://salahnomad.com/privacy/es/#c-rights"},{"audience":["client"],"group":"control","id":"auto","number":10,"sources":["gdpr"],"text":"Cuando envía una consulta de servicios privados, se calcula una puntuación a partir de cinco respuestas que usted elige: tramo de presupuesto, plazo, estructura de financiación, aceptación del NDA y zona. Solo ordena la cola: respuesta prioritaria en 24 horas, respuesta estándar en 48 horas. La nacionalidad y la residencia fiscal no se usan en la puntuación.\nUna persona toma cada decisión sobre un encargo; la puntuación nunca acepta ni rechaza a nadie por sí sola. Por debajo del umbral recibe una respuesta automática que remite a guías pertinentes y que no es una negativa definitiva. Puede pedir en cualquier momento una revisión manual, respondida en 72 horas, para expresar su punto de vista e impugnar el resultado (art. 22.3 RGPD). Base jurídica: interés legítimo (art. 6.1.f); puede oponerse (art. 21). Está disponible, previa petición, una nota sobre la evaluación de esta puntuación.\n","title":"Puntuación de prioridad y pasos automatizados","url":"https://salahnomad.com/privacy/es/#c-auto"},{"audience":["reader","buyer"],"group":"control","id":"email","number":11,"sources":["lssi-21","gdpr"],"text":"Solo enviamos correo comercial a quienes se han suscrito, pues el art. 21 LSSI-CE exige consentimiento previo; la única excepción es el contrato previo con un cliente, para productos similares y con una vía gratuita de baja en cada mensaje. Todos los mensajes incluyen un enlace de baja. Las confirmaciones de pedido, los enlaces de descarga y las respuestas a usted son mensajes de servicio, no comerciales.\nLos formularios de suscripción trasladan su correo a los proveedores de formularios y de correo indicados en «Quién recibe qué».\n","title":"Newsletter y comunicaciones comerciales","url":"https://salahnomad.com/privacy/es/#c-email"},{"audience":["reader","buyer","client","pro"],"group":"control","id":"complaints","number":12,"sources":["aepd-complaint","gdpr","edpb-3-2018"],"text":"Escríbanos primero a https://salahnomad.com/contact/; acusamos recibo en 48 horas en días laborables. Siempre puede presentar una reclamación ante la autoridad del país donde vive o trabaja (lista de autoridades del CEPD); en España es la Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, a través de su sede electrónica. Visitantes del Reino Unido: la ICO. Tiene además derecho a la tutela judicial (art. 79 RGPD).\nComo el editor aún no está establecido en la UE, no se aplica el mecanismo de ventanilla única y ninguna autoridad actúa como autoridad principal: cada autoridad es competente respecto de las personas de su territorio.\n","title":"Reclamaciones y autoridades de control","url":"https://salahnomad.com/privacy/es/#c-complaints"},{"audience":["buyer","client"],"group":"special","id":"crypto","number":13,"sources":["nowpayments","gdpr"],"text":"Los pagos se realizan en Bitcoin, Lightning o USDC mediante NOWPayments. Una cadena de bloques pública registra las transacciones de forma permanente y visible, fuera de nuestro control: nadie, tampoco nosotros, puede borrar datos en la cadena. Nunca pedimos claves privadas. Conservamos la dirección del pagador solo como parte del registro del pedido necesario para confirmar el pago y cumplir deberes contables. Si desea menor trazabilidad, use una dirección nueva en cada compra.","title":"Pagos en cripto y cadenas de bloques públicas","url":"https://salahnomad.com/privacy/es/#c-crypto"},{"audience":["pro"],"group":"special","id":"professionals","number":14,"sources":["lopdgdd-19","gdpr","lopdgdd"],"text":"Si es usted un profesional o una empresa que nos contacta o solicita el Pacto de Colaboración, tratamos sus datos de contacto profesional (nombre, cargo, empresa, correo y teléfono profesionales, web, número de colegiado o registro) para responderle, verificar su inscripción en el registro oficial de su profesión y, si se le acepta, incluirle en el listado.\nFuentes: usted, el registro oficial y su web pública; cuando los datos no procedan de usted se lo comunicamos en el plazo de un mes (art. 14.3.a RGPD). Base: medidas precontractuales (art. 6.1.b); comprobación de registros por interés legítimo (art. 6.1.f), pues el art. 19 LOPDGDD presume ese interés para los datos de contacto profesional tratados solo para mantener relaciones con la persona jurídica o con el empresario o profesional en tal condición (no nos apoyamos en esa presunción con personas físicas con quienes tratamos a título personal); listado público únicamente con su consentimiento, que puede retirar.\nNo se paga ni se cobra nada en ningún sentido. Nunca vendemos ni intercambiamos listados. El encargo de un cliente solo llega a un colaborador cuando ese cliente lo pide. Cada parte es responsable independiente de los datos que conserva; no hay corresponsabilidad. Los actos regulados siguen en manos del profesional habilitado.\n","title":"Profesionales y empresas (Pacto de Colaboración)","url":"https://salahnomad.com/privacy/es/#c-professionals"},{"audience":["reader","buyer","client","pro"],"group":"special","id":"children","number":15,"sources":["lopdgdd-7","gdpr"],"text":"El sitio y sus servicios son para adultos. En España el consentimiento de un menor es válido a partir de los 14 años (art. 7 LOPDGDD); por debajo, debe darlo un progenitor o tutor. No recogemos a sabiendas datos de menores de 14 años (13 en EE. UU.) y nuestros servicios privados son para adultos. Si cree que un menor nos ha enviado datos, escriba a https://salahnomad.com/contact/ y los eliminaremos.","title":"Menores","url":"https://salahnomad.com/privacy/es/#c-children"},{"audience":["reader","buyer","client","pro"],"group":"special","id":"outside","number":16,"sources":["ccpa","gdpr"],"text":"Reino Unido: el RGPD británico y la Data Protection Act 2018 le reconocen derechos equivalentes; las reclamaciones van a la ICO. Países nórdicos y otros del EEE: el RGPD se aplica directamente; reclame ante su autoridad nacional. Estados Unidos: las leyes estatales como la CCPA/CPRA de California se aplican a empresas que superan umbrales (ingresos anuales superiores a 26.625.000 dólares, o comprar, vender o compartir datos de 100.000 o más consumidores u hogares, o obtener la mitad de los ingresos de vender o compartir datos). No los alcanzamos, no vendemos ni compartimos información personal y aplicamos igualmente los mismos derechos. En otros países: rige el mismo estándar.","title":"Visitantes de fuera de la UE","url":"https://salahnomad.com/privacy/es/#c-outside"},{"audience":["reader","buyer","client","pro"],"group":"safety","id":"security","number":17,"sources":["gdpr"],"text":"Usamos cifrado en tránsito (TLS), una capa de seguridad delante del sitio (Cloudflare), controles antibots en formularios, enlaces de descarga de corta duración y número limitado, ningún dato de tarjeta en nuestros sistemas y acceso a los registros de pedidos y consultas limitado al editor y a los encargados aquí indicados. Llevamos un registro de actividades de tratamiento (art. 30 RGPD) y hemos evaluado si la puntuación exige una evaluación de impacto (art. 35); hay un resumen disponible previa petición.\nSi una brecha puede suponer un riesgo para sus derechos, la notificamos a la autoridad o autoridades de control competentes en 72 horas (art. 33; la AEPD para personas en España) y, si el riesgo es alto, se lo comunicamos sin dilación indebida (art. 34).\n","title":"Seguridad y brechas","url":"https://salahnomad.com/privacy/es/#c-security"},{"audience":["reader","buyer","client","pro"],"group":"safety","id":"changes","number":18,"sources":["lopdgdd"],"text":"La versión vigente se identifica por el número y la fecha de esta página y del historial de versiones. Los cambios sustanciales (nuevas finalidades, nuevos destinatarios, nuevas transferencias) se anuncian en la newsletter al menos 7 días antes de que surtan efecto. Las versiones anteriores están disponibles previa petición. Hay una copia legible por máquina en /privacy/privacy.json.","title":"Cambios en esta política","url":"https://salahnomad.com/privacy/es/#c-changes"}],"commitments":[{"text":"para acusar recibo de su solicitud en días laborables","value":"48 h"},{"text":"para responder; ampliable dos meses solo si es compleja o hay muchas solicitudes, y le explicamos el motivo dentro del primer mes (art. 12.3)","value":"1 mes"},{"text":"de coste, salvo solicitudes manifiestamente infundadas o excesivas (art. 12.5)","value":"0 €"}],"device_storage":[{"consent_needed":false,"duration":"Hasta que lo borre","key":"theme · darkMode","purpose":"Modo claro u oscuro elegido por usted","type":"localStorage"},{"consent_needed":false,"duration":"Hasta que lo vacíe o lo borre","key":"sn_cart_v1","purpose":"Su carrito de la compra","type":"localStorage"},{"consent_needed":false,"duration":"Hasta que lo cambie","key":"sn-persona · at-audience · ba-persona · cm-route · pk-profile · …","purpose":"La ruta de lectura o el perfil que eligió","type":"localStorage"},{"consent_needed":false,"duration":"Hasta que lo borre","key":"weatherDisplayUnit","purpose":"°C o °F elegido por usted","type":"localStorage"},{"consent_needed":false,"duration":"Hasta que lo borre","key":"sx-cta-dismissed · cv-subscribed","purpose":"Avisos que cerró o ya respondió","type":"localStorage"},{"consent_needed":false,"duration":"Hasta que cierre la pestaña","key":"hb-draft · tc_welcome · pk-esbar","purpose":"Un borrador de formulario sin enviar o el estado de un aviso","type":"sessionStorage"},{"consent_needed":false,"duration":"Hasta que las retire o lo borre","key":"sn_consent_v1","purpose":"Recuerda sus elecciones en este panel (y nada más)","type":"localStorage"},{"consent_needed":false,"duration":"De minutos a horas, fijado por Cloudflare","key":"__cf_bm · cf_clearance (only if challenged)","purpose":"Cookie de seguridad de Cloudflare, solo si su protección antibots desafía a su navegador","type":"cookie"},{"consent_needed":true,"duration":"Fijado por el proveedor; vea su política","key":"YouTube · GitHub (Giscus) · OpenWeather","purpose":"Lo que esos proveedores almacenen tras pulsar Cargar","type":"thirdparty"}],"faq":[{"answer":"Salah Nomad, nombre comercial de un editor independiente, es el responsable del tratamiento. El editor aún no está establecido en España ni en la UE; instalarse en Málaga es el proyecto. La identidad legal completa se publicará en el Aviso Legal y en la ficha de identidad de esta página en cuanto la actividad quede registrada en España; hasta entonces las solicitudes de privacidad van por la página de contacto o por el formulario de esta página. Como el RGPD se aplica al sitio por el art. 3.2, se designará un representante en la UE conforme al art. 27, que se indicará aquí. No se ha designado Delegado de Protección de Datos porque no es obligatorio según el art. 37 RGPD.","question":"¿Quién es el responsable de mis datos en salahnomad.com y está el editor establecido en la UE?"},{"answer":"No hay cookies publicitarias, analíticas ni de seguimiento entre sitios. Lo que hay en su dispositivo (tema, carrito, ruta de lectura, controles de seguridad, el registro de sus elecciones) es estrictamente necesario o elegido por usted, y no requiere consentimiento según el art. 22.2 LSSI-CE. Todo lo opcional espera tras un clic que explica lo que ocurrirá, de modo que un banner no tendría nada que preguntar. En «Sus elecciones» está el registro completo.","question":"¿Usan cookies y por qué no hay banner de cookies?"},{"answer":"Su clic es el consentimiento. Solo entonces su navegador contacta con el proveedor (YouTube mediante su dominio de privacidad mejorada, o GitHub para los comentarios), que recibe su dirección IP y puede instalar sus propias cookies. Puede marcar «recordar» y retirar su elección en cualquier momento en «Sus elecciones». La AEPD ha considerado que las cookies de YouTube requieren consentimiento, por eso los vídeos esperan su clic.","question":"¿Qué ocurre cuando pulso «Cargar vídeo» o «Cargar comentarios»?"},{"answer":"No. No vendemos, alquilamos ni intercambiamos datos personales, no tenemos programa de afiliados y no compartimos nada con anunciantes. Los datos solo llegan a los proveedores de «Quién recibe qué», a una pasarela de pago que usted decida usar y a autoridades cuando la ley lo exige.","question":"¿Venden mis datos o los comparten con anunciantes?"},{"answer":"Su correo, ID de pedido, producto, precio en USD, estado del pago y la dirección de monedero del pagador. El enlace de descarga dura 7 días; los pedidos y registros contables se conservan 6 años desde el último asiento (art. 30 del Código de Comercio) y después se eliminan. Nunca vemos un número de tarjeta.","question":"¿Qué datos recogen cuando compro una guía y cuánto tiempo los conservan?"},{"answer":"No. El art. 9 RGPD enumera origen étnico o racial, opiniones políticas, convicciones, afiliación sindical, datos genéticos y biométricos, salud y vida sexual; la nacionalidad y la residencia fiscal no figuran en esa lista. Aun así las tratamos como datos sensibles, las pedimos solo en listas desplegables y las usamos únicamente para orientar sobre fiscalidad y visados.","question":"¿La nacionalidad y la residencia fiscal son datos de categorías especiales?"},{"answer":"Use el formulario de esta página o la página de contacto, indicando el derecho que ejerce y el correo que tenemos de usted. Acusamos recibo en 48 horas en días laborables y respondemos en un mes (art. 12.3 RGPD), ampliable dos meses solo si la solicitud es compleja o hay muchas. Es gratuito. Podemos pedir un justificante de identidad si tenemos dudas razonables.","question":"¿Cómo accedo a mis datos, los corrijo o los elimino, y cuánto se tarda?"},{"answer":"No. Una puntuación de prioridad construida con cinco respuestas que usted elige solo ordena la cola. Una persona toma cada decisión sobre un encargo. Por debajo del umbral recibe una respuesta automática que no es una negativa definitiva y puede pedir revisión manual en cualquier momento, respondida en 72 horas.","question":"¿Decide una máquina si trabajamos juntos?"},{"answer":"Algunos sí. Varios proveedores están en Estados Unidos y se apoyan en el Marco de Privacidad de Datos UE-EE. UU. o en cláusulas contractuales tipo (Resend y Formspree usan las cláusulas). NOWPayments la opera FD Transfers LLC en San Vicente y las Granadinas, país sin decisión de adecuación de la UE, por lo que solo enviamos lo necesario para crear el pago que usted solicita. El registro indica cada proveedor, su ubicación y su garantía.","question":"¿Salen mis datos de la Unión Europea?"},{"answer":"Los visitantes del Reino Unido tienen derechos equivalentes con el RGPD británico y pueden reclamar ante la ICO. Los de países nórdicos y del EEE están protegidos directamente por el RGPD. Las leyes estatales de EE. UU., como la CCPA de California, se aplican por encima de umbrales de ingresos y volumen de datos que no alcanzamos, pero aplicamos los mismos derechos a todos y no vendemos ni compartimos información personal.","question":"Vivo en el Reino Unido, EE. UU. o un país nórdico: ¿qué ley me protege?"},{"answer":"Usamos sus datos de contacto profesional para responderle, verificar su inscripción en el registro oficial de su profesión y, si se le acepta, incluirle en el listado, con su consentimiento para el listado público. No circula dinero en ningún sentido, nunca se venden listados y el encargo de un cliente solo le llega cuando ese cliente lo pide. Puede pedir su baja en cualquier momento y actuamos en un mes. Vea también el hub de Partners.","question":"Tengo una empresa en España. ¿Cómo se tratan mis datos en el Pacto de Colaboración?"},{"answer":"Cuando hace falta una factura (un encargo privado, una compra de empresa o una solicitud de factura), puede emitirse mediante Abillio (Estonia) o Ruul (Ruul OÜ en Estonia, afiliada a Ruul Inc. en Estados Unidos). Reciben solo lo que exige una factura válida: nombre o empresa, domicilio, NIF o número de IVA e importes, y conservan sus propios registros legales según sus propias políticas de privacidad. Nosotros solo enviamos esos datos. El registro indica la ubicación y la garantía de cada proveedor.","question":"¿Quién emite mi factura y quién ve mis datos de facturación?"},{"answer":"Escríbanos primero; acusamos recibo en 48 horas en días laborables. Siempre puede reclamar ante la autoridad del país donde vive o trabaja (en España, la AEPD en Madrid), ante la ICO si está en el Reino Unido y ante los tribunales. Como el editor aún no está establecido en la UE, ninguna autoridad actúa como autoridad principal.","question":"¿Dónde puedo reclamar?"}],"journeys":[{"collects":["Dirección IP y datos técnicos de la petición en registros de seguridad","Elecciones de interfaz guardadas en su dispositivo (modo claro/oscuro, ruta, carrito)"],"control":"Borre los datos del sitio en su navegador cuando quiera. Nada se usa para publicidad.","id":"browse","legal_basis":"Interés legítimo en la seguridad (art. 6.1.f RGPD); el almacenamiento que usted elige está exento (art. 22.2 LSSI).","purpose":"Servir las páginas con seguridad, bloquear abusos y recordar lo que usted eligió.","recipients":["cloudflare","google-fonts"],"retention":"Registros de seguridad hasta 90 días. Elecciones del dispositivo hasta que las borre.","title":"Leer el sitio"},{"collects":["Dirección de correo electrónico","Momento y origen de la suscripción (prueba del consentimiento)"],"control":"Baja con un clic en cada mensaje, o escriba a https://salahnomad.com/contact/.","id":"subscribe","legal_basis":"Su consentimiento (art. 6.1.a RGPD; art. 21 LSSI).","purpose":"Enviarle la newsletter que ha pedido.","recipients":["turnstile","formspree","resend","cloudflare"],"retention":"Hasta que se dé de baja; un registro mínimo de supresión evita volver a incluirle.","title":"Suscribirse a la newsletter"},{"collects":["Correo electrónico","ID de pedido, producto, precio en USD, estado del pago","Dirección de monedero del pagador (del propio pago)","Si necesita factura: nombre o empresa, domicilio, NIF o número de IVA"],"control":"Usted elige monedero y dirección; no se crea cuenta y nunca vemos una tarjeta.","id":"buy","legal_basis":"Contrato (art. 6.1.b); obligación legal contable (art. 6.1.c).","purpose":"Cobrar, enviar el enlace de descarga y llevar los registros contables que exige la ley.","recipients":["nowpayments","abillio","ruul","resend","cloudflare","payhip"],"retention":"Enlace de descarga 7 días. Pedidos y registros contables 6 años desde el último asiento; las plataformas de facturación conservan sus propios registros legales.","title":"Comprar una guía o manual"},{"collects":["Nombre, correo, teléfono opcional, mensaje","En servicios privados: tramo de presupuesto, plazo, finalidad, zona, financiación, nacionalidad y residencia fiscal (listas desplegables), notas, aceptación del NDA","Para la factura: nombre o empresa, domicilio, NIF o número de IVA"],"control":"Oponerse a la puntuación o pedir revisión manual cuando quiera (cláusula 10). No se piden datos de categorías especiales.","id":"ask","legal_basis":"Medidas precontractuales a petición suya (art. 6.1.b); interés legítimo para la puntuación de prioridad (art. 6.1.f).","purpose":"Responderle, definir el encargo y ordenar la cola.","recipients":["turnstile","resend","abillio","ruul","cloudflare"],"retention":"Mensajes 2 años desde el último intercambio. Consultas sin encargo 90 días. Encargos 6 años.","title":"Consultar o contratar"},{"collects":["Nombre, cargo, empresa, correo y teléfono profesionales, web","Número de colegiación o registro comprobado en el registro oficial de su profesión"],"control":"Puede pedir su baja o corrección en cualquier momento. Nunca vendemos ni intercambiamos listados.","id":"partner","legal_basis":"Medidas precontractuales (art. 6.1.b); verificación en registros públicos (art. 6.1.f); listado público solo con su consentimiento.","purpose":"Verificar, responder y, si se le acepta, incluir su empresa en el listado. No hay dinero entre las partes en ningún sentido.","recipients":["turnstile","resend","cloudflare"],"retention":"Mientras la relación esté activa; se elimina en un mes desde su solicitud.","title":"Profesional o empresa"},{"collects":["Nada hasta que pulse «Cargar»","Tras el clic, el proveedor ve su dirección IP y datos del dispositivo"],"control":"Desactive cada servicio en «Sus elecciones» con la misma facilidad con que lo activó.","id":"interact","legal_basis":"Su consentimiento mediante clic (art. 6.1.a; art. 22.2 LSSI).","purpose":"Mostrar un vídeo, un hilo de comentarios o el tiempo en Málaga.","recipients":["youtube","giscus","openweather"],"retention":"Lo fija cada proveedor; vea su política. Al retirar la elección se borra nuestro registro.","title":"Ver vídeos, comentar, consultar el tiempo"}],"recipients":[{"data":"Dirección IP, metadatos de la petición, registros de pedidos, correo electrónico","id":"cloudflare","kind":"hosting","loads":"always","location":"USA · 101 Townsend St, San Francisco, CA","name":"Cloudflare, Inc.","role":"Alojamiento, CDN, protección DDoS y antibots, base de pedidos, almacenamiento de archivos","safeguard":"dpf","safeguard_text":"Marco de Privacidad de Datos UE-EE. UU., con cláusulas contractuales tipo como respaldo","url":"https://www.cloudflare.com/privacypolicy/"},{"data":"Señales del navegador necesarias para distinguir personas de bots, dirección IP","id":"turnstile","kind":"security","loads":"form","location":"USA · Cloudflare, Inc.","name":"Cloudflare Turnstile","role":"Verificación humana en formularios (solo se carga cuando un formulario está cerca de la pantalla)","safeguard":"dpf","safeguard_text":"Marco de Privacidad de Datos UE-EE. UU., con cláusulas contractuales tipo como respaldo","url":"https://www.cloudflare.com/application-services/products/turnstile/"},{"data":"Referencia del pedido, importe, divisa, estado del pago, dirección de monedero del pagador; lo que usted introduzca en su página","id":"nowpayments","kind":"payments","loads":"checkout","location":"Saint Vincent and the Grenadines · Suite 305, Griffith Corporate Centre, Kingstown","name":"NOWPayments (FD Transfers LLC)","role":"Pasarela de pagos cripto (Bitcoin, Lightning, USDC) en la página donde usted paga","safeguard":"art49","safeguard_text":"Sin decisión de adecuación: datos minimizados; art. 49.1.b RGPD","url":"https://nowpayments.io/doc/fd-privacy-policy.pdf"},{"data":"Correo electrónico, datos del pedido, contenido del mensaje","id":"resend","kind":"email","loads":"form","location":"USA","name":"Resend, Inc.","role":"Envío de correos de pedido, enlace de descarga, respuestas y newsletter","safeguard":"scc","safeguard_text":"Cláusulas contractuales tipo","url":"https://resend.com/legal/privacy-policy"},{"data":"Correo electrónico","id":"formspree","kind":"forms","loads":"form","location":"USA","name":"Formspree, Inc.","role":"Formulario de suscripción a la newsletter en la barra lateral","safeguard":"scc","safeguard_text":"Cláusulas contractuales tipo","url":"https://formspree.io/legal/privacy-policy/"},{"data":"Nombre o empresa, domicilio, NIF o número de IVA, importes","id":"abillio","kind":"invoicing","loads":"invoice","location":"Estonia · Tallinn (EU)","name":"Abillio","role":"Plataforma de facturación: emite facturas válidas para encargos, compras de empresas y solicitudes de factura","safeguard":"eea","safeguard_text":"Proveedor establecido en la UE/EEE","url":"https://intercom.help/abillio/en/articles/6435823-what-if-my-client-asks-for-a-signed-service-agreement-or-any-other-document"},{"data":"Nombre o empresa, domicilio, NIF o número de IVA, importes, verificaciones de identidad que realice según su propia política","id":"ruul","kind":"invoicing","loads":"invoice","location":"Estonia (Ruul OÜ, EU) · affiliate Ruul Inc., Delaware, United States","name":"Ruul (Ruul OÜ · Ruul Inc.)","role":"Plataforma de facturación y pagos (Agent of Record) para encargos internacionales","safeguard":"ruul","safeguard_text":"Entidad contratante en la UE (Estonia); solo se envían datos de facturación; las transferencias posteriores a su filial estadounidense siguen la política de Ruul","url":"https://ruul.io/privacy-policy"},{"data":"Dirección IP y datos del navegador enviados a los servidores de fuentes de Google","id":"google-fonts","kind":"fonts","loads":"always","location":"USA / Ireland","name":"Google Fonts (Google)","role":"Sirve las tipografías del tema del sitio","safeguard":"dpf","safeguard_text":"Marco de Privacidad de Datos UE-EE. UU., con cláusulas contractuales tipo como respaldo","url":"https://policies.google.com/privacy"},{"data":"Dirección IP, datos del dispositivo y, si reproduce, datos de visionado y cookies de Google","id":"youtube","kind":"video","loads":"click","location":"Ireland / USA","name":"YouTube (Google)","role":"Vídeos incrustados, cargados solo después de pulsar «Cargar vídeo»","safeguard":"dpf","safeguard_text":"Marco de Privacidad de Datos UE-EE. UU., con cláusulas contractuales tipo como respaldo","url":"https://policies.google.com/privacy"},{"data":"Dirección IP; si comenta: usuario de GitHub, comentario, fecha y hora","id":"giscus","kind":"comments","loads":"click","location":"USA · GitHub, Inc.","name":"GitHub Discussions (Giscus)","role":"Comentarios de los artículos, cargados solo después de pulsar «Cargar comentarios»","safeguard":"dpf","safeguard_text":"Marco de Privacidad de Datos UE-EE. UU., con cláusulas contractuales tipo como respaldo","url":"https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement"},{"data":"Dirección IP y datos del navegador (OpenWeather indica que no almacena parámetros de las peticiones ni direcciones IP)","id":"openweather","kind":"weather","loads":"click","location":"United Kingdom · 30 St Mary's Axe, London","name":"OpenWeather Ltd","role":"Widget del tiempo de Málaga, cargado solo después de pulsar «Mostrar el tiempo»","safeguard":"uk","safeguard_text":"Decisión de adecuación de la UE para el Reino Unido","url":"https://openweather.co.uk/privacy-policy"}],"rights":[{"clause":"rights","description":"Saber si tratamos sus datos y obtener una copia (art. 15).","right":"Acceso"},{"clause":"rights","description":"Corregir lo inexacto o incompleto (art. 16).","right":"Rectificación"},{"clause":"retention","description":"Que se eliminen sus datos cuando la ley lo permita (art. 17).","right":"Supresión"},{"clause":"rights","description":"Congelar el uso de sus datos mientras se resuelve una disputa (art. 18).","right":"Limitación"},{"clause":"rights","description":"Recibir sus datos en un formato común legible por máquina (art. 20).","right":"Portabilidad"},{"clause":"auto","description":"Oponerse al tratamiento basado en interés legítimo, incluida la puntuación de prioridad (art. 21).","right":"Oposición"},{"clause":"cookies","description":"Tan fácilmente como lo dio y en cualquier momento (art. 7.3).","right":"Retirar el consentimiento"},{"clause":"auto","description":"Pedir que una persona revise cualquier paso automatizado (art. 22.3).","right":"Revisión humana"},{"clause":"complaints","description":"Ante la AEPD o su autoridad, y ante los tribunales (arts. 77 a 79).","right":"Reclamar"}],"short_answer":"salahnomad.com lo gestiona Salah Nomad, un editor independiente aún no establecido en España ni en la UE (instalarse en Málaga es el proyecto), que solo recoge lo necesario para responderle, entregar su pedido y llevar los registros que exige la ley. No hay cookies publicitarias ni de seguimiento entre sitios, enlaces de afiliado ni venta de datos personales. El contenido opcional de terceros (YouTube, comentarios, el tiempo) solo se carga cuando usted pulsa. El RGPD se aplica porque el sitio se dirige a personas de la UE. Puede acceder a sus datos, rectificarlos, suprimirlos, limitar su tratamiento, portarlos u oponerse, retirar su consentimiento en cualquier momento y reclamar ante la autoridad de protección de datos de su país, en España la AEPD. Acusamos recibo en 48 horas en días laborables y respondemos en un mes.","title":"La Kasbah · Política de Privacidad","url":"https://salahnomad.com/privacy/es/","version_history":[{"changes":"Ficha de identidad alineada con /terms/ (art. 10 LSSI-CE): nombre comercial, enlace de contacto, registro mercantil y nota de publicación de la identidad. Las solicitudes de privacidad se canalizan por la página de contacto en lugar de un correo publicado, para evitar spam.","date":"2026-11-01","title":"Ficha de identidad y enlace de contacto","version":"2.2"},{"changes":"Se aclara que el editor aún no está establecido en España ni en la UE: el RGPD se aplica por el art. 3.2, el art. 27 exige un representante en la UE (por designar) y no hay autoridad principal. Se añaden Abillio (Estonia) y Ruul (Ruul OÜ, Estonia; filial Ruul Inc., Estados Unidos) como plataformas de facturación, con los datos de factura recogidos. Se ajustan las cláusulas de brechas y reclamaciones.","date":"2026-11-01","title":"Establecimiento, derecho de la UE y plataformas de facturación","version":"2.1"},{"changes":"La nacionalidad y la residencia fiscal dejan de describirse como categorías especiales (art. 9 RGPD). Conservación contable corregida a 6 años (art. 30 Código de Comercio). NOWPayments identificada como FD Transfers LLC (San Vicente y las Granadinas) con su base de transferencia. Garantías de Resend y Formspree corregidas a cláusulas contractuales tipo. El contenido opcional (YouTube, comentarios, tiempo) solo se carga tras un clic. Plazo de respuesta indicado en un mes (art. 12.3).","date":"2026-10-31","title":"Nuevo hub Kasbah, en inglés y español","version":"2.0"},{"changes":"Sustituida por la versión 2.0.","date":"2024-05-08","title":"Política de privacidad original","version":"1.x"}]},"first_published":"2024-05-08","generated":"2026-11-02T00:24:09Z","in_force_since":"2026-11-01","key_facts":{"accounting_retention_years":6,"advertising_cookies":0,"affiliate_links":false,"age_of_digital_consent_spain":14,"automated_decisions":"none made solely by automated means; priority score only orders the queue; manual review on request","invoicing_platforms":["Abillio (Estonia)","Ruul OÜ (Estonia), affiliate Ruul Inc. (Delaware, United States)"],"lead_supervisory_authority":"none (one-stop-shop unavailable until established in the EU)","nationality_and_tax_residency_are_art9_data":false,"optional_third_party_content_requires_click":true,"personal_data_sold":false,"response_time":"one month (art. 12(3) GDPR), acknowledgement within 48 hours on business days","special_category_data_processed":false},"languages":["en","es"],"last_reviewed":"2026-11-01","legal_framework":["Regulation (EU) 2016/679 (GDPR)","Ley Orgánica 3/2018 (LOPDGDD)","Ley 34/2002 (LSSI-CE) arts. 21 and 22 (applies to non-EU providers directing services to Spain, art. 4.1)","EDPB Guidelines 3/2018 (territorial scope, art. 27 representative)","UK GDPR and Data Protection Act 2018 (UK visitors)","US state privacy laws such as CCPA/CPRA (thresholds not met; same rights applied voluntarily)"],"legal_review":"none declared","related":{"legal_notice_terms":"https://salahnomad.com/terms/","llms_txt":"https://salahnomad.com/llms.txt","methodology":"https://salahnomad.com/methodology/","partners_hub":"https://salahnomad.com/partners/"},"schema":"salah-nomad/privacy/2","sources":[{"area":"gdpr","citation":"Regulation (EU) 2016/679 (GDPR) · arts. 6, 9, 12, 13, 14, 22, 27, 33, 37, 49","grade":"B","id":"gdpr","url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng","verified":"2026-10-31"},{"area":"gdpr","citation":"GDPR · art. 9 (list of special categories)","grade":"B","id":"gdpr-9","url":"https://www.legislation.gov.uk/eur/2016/679/article/9/adopted","verified":"2026-10-31"},{"area":"rights","citation":"GDPR · art. 12(3) (one month, +2 months)","grade":"B","id":"gdpr-12","url":"https://www.legislation.gov.uk/eur/2016/679/article/12/adopted","verified":"2026-10-31"},{"area":"spain","citation":"LO 3/2018 (LOPDGDD) · arts. 6–7, 11–13","grade":"A","id":"lopdgdd","url":"https://www.boe.es/buscar/act.php?id=BOE-A-2018-16673","verified":"2026-10-30"},{"area":"spain","citation":"AEPD · age of consent (LOPDGDD art. 7: 14 years)","grade":"A","id":"lopdgdd-7","url":"https://www.aepd.es/es/preguntas-frecuentes/10-menores-y-educacion/FAQ-1001-cual-es-la-edad-para-que-los-menores-puedan-prestar-consentimiento-para-tratar-sus-datos-personales","verified":"2026-10-31"},{"area":"spain","citation":"LOPDGDD · art. 19 (professional contact data), quoted in AEPD legal report 2025-0079","grade":"B","id":"lopdgdd-19","url":"https://www.aepd.es/documento/2025-0079.pdf","verified":"2026-10-31"},{"area":"cookies","citation":"Ley 34/2002 (LSSI-CE) · art. 21 (commercial e-mail)","grade":"A","id":"lssi-21","url":"https://www.boe.es/buscar/act.php?id=BOE-A-2002-13758","verified":"2026-10-31"},{"area":"cookies","citation":"Ley 34/2002 (LSSI-CE) · art. 22.2 (cookies)","grade":"A","id":"lssi-22-2","url":"https://www.boe.es/buscar/act.php?id=BOE-A-2002-13758","verified":"2026-10-30"},{"area":"cookies","citation":"AEPD · Guide on the use of cookies (updated 11 July 2023)","grade":"A","id":"aepd-cookies","url":"https://www.aepd.es/prensa-y-comunicacion/notas-de-prensa/aepd-actualiza-guia-cookies-para-adaptarla-a-nuevas-directrices-cepd","verified":"2026-10-30"},{"area":"cookies","citation":"AEPD resolution A-00010-2019 (YouTube cookies need consent)","grade":"A","id":"aepd-youtube","url":"https://www.aepd.es/documento/a-00010-2019.pdf","verified":"2026-10-31"},{"area":"transfers","citation":"EU–US Data Privacy Framework · Commission adequacy decision of 10 July 2023","grade":"B","id":"dpf","url":"https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/eu-us-data-transfers_en","verified":"2026-10-31"},{"area":"transfers","citation":"General Court T-553/23 Latombe v Commission (3 Sept 2025); appeal C-703/25 P pending","grade":"B","id":"latombe","url":"https://digitalpolicyalert.org/event/35459-latombe-filed-appeal-against-general-court-dismissal-of-challenge-to-european-unionunited-states-data-protection-framework-adequacy-decision-in-latombe-v-commission","verified":"2026-10-31"},{"area":"retention","citation":"Código de Comercio · art. 30 (6 years)","grade":"B","id":"codcom-30","url":"https://www.boe.es/buscar/act.php?id=BOE-A-1885-6627","verified":"2026-10-31"},{"area":"retention","citation":"Ley 58/2003 (LGT) · art. 66 (4 years)","grade":"B","id":"lgt-66","url":"https://www.boe.es/buscar/act.php?id=BOE-A-2003-23186","verified":"2026-10-31"},{"area":"retention","citation":"Código Civil · art. 1964 (5 years, Ley 42/2015)","grade":"B","id":"cc-1964","url":"https://www.boe.es/buscar/act.php?id=BOE-A-1889-4763","verified":"2026-10-31"},{"area":"processors","citation":"NOWPayments (FD Transfers LLC) Privacy Policy, 15 Dec 2025","grade":"A","id":"nowpayments","url":"https://nowpayments.io/doc/fd-privacy-policy.pdf","verified":"2026-10-31"},{"area":"processors","citation":"Resend · GDPR page (US storage, SCCs in the DPA)","grade":"A","id":"resend","url":"https://resend.com/security/gdpr","verified":"2026-10-31"},{"area":"processors","citation":"Formspree · security page (SCCs as processor)","grade":"A","id":"formspree","url":"https://formspree.io/security","verified":"2026-10-31"},{"area":"processors","citation":"OpenWeather Ltd · privacy policy (UK controller)","grade":"A","id":"openweather","url":"https://openweather.co.uk/privacy-policy","verified":"2026-10-31"},{"area":"rights","citation":"AEPD · how to file a complaint","grade":"A","id":"aepd-complaint","url":"https://www.aepd.es/preguntas-frecuentes/13-reclamaciones/FAQ-1301-como-puedo-interponer-una-reclamacion-si-han-vulnerado-mis-datos-de-caracter-personal","verified":"2026-10-30"},{"area":"gdpr","citation":"EDPB Guidelines 3/2018 on the territorial scope of the GDPR (art. 3(2), art. 27)","grade":"A","id":"edpb-3-2018","url":"https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_guidelines_3_2018_territorial_scope_en.pdf","verified":"2026-11-01"},{"area":"cookies","citation":"LSSI-CE · art. 4.1 (non-EU providers directing services to Spain), as applied by the AEPD in resolution E-06638/2015","grade":"A","id":"lssi-4","url":"https://www.aepd.es/documento/e-06638-2015.pdf","verified":"2026-11-01"},{"area":"processors","citation":"Ruul · Terms of Use (Ruul OÜ, Estonia; affiliate Ruul Inc., Delaware)","grade":"A","id":"ruul-terms","url":"https://ruul.io/el-gr/terms-of-use","verified":"2026-11-01"},{"area":"processors","citation":"Ruul · Privacy Policy (data may be transferred to other countries)","grade":"A","id":"ruul-privacy","url":"https://ruul.io/privacy-policy","verified":"2026-11-01"},{"area":"processors","citation":"Abillio · help centre (registered in Tallinn, Estonia)","grade":"A","id":"abillio-help","url":"https://intercom.help/abillio/en/articles/6435823-what-if-my-client-asks-for-a-signed-service-agreement-or-any-other-document","verified":"2026-11-01"},{"area":"other","citation":"CCPA applicability thresholds ($26,625,000 from 1 Jan 2025)","grade":"B","id":"ccpa","url":"https://cppa.ca.gov/","verified":"2026-10-31"}],"version":"2.2"}