This policy describes how rezaelrosario.org handles the personal data it receives from people who visit or use this site. It complies with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
Data controller
- Website: rezaelrosario.org
- Nature: a non-profit devotional project.
- Contact email: contacto@rezaelrosario.org
Data that is collected
This site collects the minimum essential information for it to function. Specifically:
- Automatic technical data: IP address, browser, operating system, language, pages visited and date/time. These are used to ensure the security of the site and to detect abuse. The IP address is kept obfuscated (hashed) and is not cross-referenced with any other personal data.
- Voluntary data: if you leave an intention on the Wall of Petitions or a testimony, the content you write and, if you provide it voluntarily, your name or initials. No email, phone number or address is requested.
- Comments: if you comment on a blog post, the comment, the name you give and the email (which is not published) are stored. WordPress uses the Gravatar service; if your email is linked to Gravatar, your public image may be shown next to the comment.
Purpose and legal basis
- Operation and security of the site: legal basis, the legitimate interest of the controller (art. 6.1.f GDPR).
- Intentions, testimonies and comments: legal basis, the explicit consent given by pressing the publish button (art. 6.1.a GDPR).
- Responding to enquiries sent to the contact email: legal basis, consent.
Prayer reminders by WhatsApp
If you voluntarily activate the Angelus reminder by sending the message «ALTA ANGELUS» via WhatsApp from your own phone, we will process the following data:
- Data processed: your phone number, the times you choose (6:00, 12:00 and/or 18:00), your WhatsApp profile name, the date of sign-up and the literal text of the message with which you requested it (as proof of your consent).
- Purpose: to send you exclusively the daily prayer reminder (the Angelus or, during Eastertide, the Regina Coeli) at the times you have chosen. This data is not used for advertising, newsletters, donation requests or any other purpose, and it is not shared with third parties.
- Legal basis: your explicit consent (art. 6.1.a GDPR), which you give when you send the sign-up message.
- Retention: for as long as you keep the subscription active. When you unsubscribe, your data is removed from the sending list.
- Unsubscribing: you can cancel the reminders at any time by writing BAJA in the same WhatsApp chat. The cancellation is immediate and automatic.
- Platform: the service is provided through WhatsApp (Meta Platforms Ireland Ltd.), whose data processing is governed by its own privacy policy.
Data retention
- Technical security logs: 90 days, after which they are discarded.
- Intentions and testimonies: one year after publication; afterwards they are archived or deleted.
- Comments: for as long as the post remains published, unless deletion is requested.
- Enquiry emails: until the enquiry has been dealt with and, afterwards, for the period needed to demonstrate compliance with legal obligations.
Recipients
The data is not shared with third parties except where required by law. The site is hosted by a provider located in the European Union. Should the site incorporate third-party services in the future (CDN, anti-spam, a payment processor for donations), this policy will be updated to indicate the specific providers.
Kolačići
This site uses only technical cookies essential for its operation (session, language preferences) and, where applicable, security cookies of the application firewall. No analytical or advertising cookies are used and there is no third-party tracking. For this reason, no cookie banner is shown unless regulations require it in the future.
Your rights
In accordance with the GDPR and the LOPDGDD you may exercise the following rights at any time:
- Access to your personal data.
- Rectification of inaccurate data.
- Erasure (the right to be forgotten) when it is no longer necessary.
- Restriction of processing.
- Objection to processing.
- Data portability.
- Withdrawal of the consent given at any time.
To exercise any of these rights, simply write to contacto@rezaelrosario.org indicating the right being exercised and attaching a copy of a document proving your identity. If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es).
Security
The site applies reasonable technical and organizational measures to protect the data: TLS encryption, an application firewall (ModSecurity and Wordfence), brute-force blocking, two-factor authentication in the admin panel and encrypted backups stored off the server. Even so, no system is invulnerable; in the event of an incident with material impact, notification will be given within the legal deadlines.
Minors
This site is intended for a general adult audience. Data from minors under 14 is not knowingly collected. If a parent or guardian detects that a minor has provided data, they may request its immediate deletion by writing to the email indicated.
Changes to this policy
This policy may be updated to adapt to legal changes or changes in the site’s functionality. The version in force is always the one published on this page, with its update date at the foot.
Last updated: 19 May 2026.