Privacy policy
Seven questions answered: who, what, on what basis, for how long, who else, what you can ask for and where to complain.
Who handles your data?
David Franco Aguirre, trading as GoRandom, from Bilbao (Spain). For anything to do with this page, write to [email protected]. The General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 on data protection apply. There is no data protection officer because the site meets none of the conditions under which the law requires one: the person who builds it is the one who answers.
What is collected, and why?
Let us start with the reassuring part: there are no accounts to open, no logging in and no newsletter, so there is nothing resembling a file on you. Four things are collected. From the form, what you type: your name, the address we should reply to and what you tell us. From the request itself, what any web server has to see to send you a page: the address it comes from, the browser, what was requested and when. From analytics, if you allow it, a count of pages read and a few broad characteristics of your device, with the address truncated before it is stored. And from advertising, again only if you allow it, the identifiers held in the cookies listed in the cookie policy; what Google does with them is set out in its own explanation of how it uses data from sites that use its services.
On what legal basis?
Replying to you rests on the fact that you asked for a reply. The technical logs rest on the legitimate interest in keeping a public website running, because without that layer it stops responding. Analytics and advertising rest only on your consent, and until you give it neither of them writes a cookie: Google Analytics receives only a cookieless signal that a page was viewed (Google’s consent mode), with no identifier linking it to you. The banner shows Accept all, Reject all and Settings at the same size and with the same weight, and under “Settings” nothing is pre-ticked. Saying no costs you nothing: no page of this website is closed to you because of it.
How long is it kept?
Your message and the address it came from: one year after the matter is closed. Server logs are overwritten within a few weeks and are only opened to investigate a fault or stop an attack. Analytics keeps only a total, never a row per person. Each cookie has its own period in its row of the cookie policy.
Who else sees it?
Three providers, each seeing only what its job requires: the company that hosts the server, which is in the European Union; Cloudflare, which delivers the pages and stops attacks; and Google, for analytics and advertising, with cookies only when you have allowed them. None of them receives anything to use for its own purposes, and none of this is sold. Some machines in that chain are outside the European Economic Area, and for those transfers the first safeguard is any adequacy decision the European Commission has adopted for the country and, where there is none, the contract with its standard clauses.
What can you ask for?
That we tell you what we hold and show it to you, which is the right of access; that a mistake is corrected, rectification; that it is deleted, erasure; that processing based on legitimate interest is paused or challenged, restriction and objection; that we hand it over in a format you can take elsewhere, portability; and that you withdraw your consent to analytics or advertising whenever you like. An email to [email protected] is enough, with no form to fill in and no need to explain why. We have one month to reply.
And if you are not satisfied?
Nothing obliges you to come to us first: you can complain directly to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at aepd.es. If you live in another country of the European Economic Area, you can also go to your own supervisory authority.
Last updated: October 2026.