Privacy policy
This policy describes how WattBunker (the “Site”) processes personal data and how you can exercise your rights under the EU General Data Protection Regulation (GDPR), the Spanish LOPDGDD, and equivalent legislation.
1. Data controller
The data controller of wattbunker.com is:
- Name / legal entity: [Pending: full legal name or company]
- Tax ID (NIF/CIF): [Pending]
- Registered address: [Pending]
- Contact email: privacy@wattbunker.com
We have not appointed a Data Protection Officer because the criteria of Art. 37 GDPR do not apply. Privacy queries are answered by the Editor.
2. What we process and why
| Category | Purpose | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Server access logs (IP, user agent, URL, timestamp) | Operate and secure the Site, prevent abuse | Legitimate interest — Art. 6(1)(f) | 14 days, then deleted |
| Email address (only if you contact us) | Reply to your message | Legitimate interest / pre-contractual — Art. 6(1)(f) / 6(1)(b) | Until the conversation is resolved + 12 months |
| Email address (only if you opt in to a future newsletter) | Send the newsletter you requested | Consent — Art. 6(1)(a) | Until you unsubscribe |
We use two privacy-friendly, cookieless products from our hosting provider Vercel:
- Vercel Analytics — counts page views and referrers in aggregate. It does not use cookies, does not fingerprint your device, and does not collect personal information beyond an IP address that is hashed and discarded within 24 hours.
- Vercel Speed Insights — measures Core Web Vitals (LCP, INP, CLS) sampled in your browser to help us spot slow pages. Same privacy posture: cookieless, no fingerprinting, no profiling.
Both are disabled until you allow them in our consent banner. If your browser sends a Global Privacy Control (GPC) signal we treat that as a binding opt-out and disable analytics by default. You can change your choice any time from "Cookie & analytics preferences" in the footer. We do not use advertising trackers, behavioural profiling, or fingerprinting.
3. Cookies
The Site does not set tracking cookies. Your consent choice is stored in localStorage (key wb-consent), which is not transmitted to us and you can clear from your browser settings. See our cookies page for details.
4. Recipients and processors
Personal data may be processed by the following service providers acting as processors under Art. 28 GDPR:
- Hosting / CDN: Vercel Inc. (USA) — under Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.
- Email infrastructure: [Pending: Google Workspace / Fastmail / other] — for replies to your messages.
- Domain registrar: [Pending].
Affiliate clicks to Amazon are processed by Amazon under Amazon's own privacy policy. We do not share data with manufacturers or marketing partners.
5. International transfers
Where data is transferred outside the EEA, we rely on adequacy decisions (e.g. EU-U.S. Data Privacy Framework) or Standard Contractual Clauses adopted by the European Commission, with supplementary measures where necessary.
6. Your rights
Under the GDPR you have the right to:
- Access your personal data and obtain a copy.
- Rectify inaccurate or incomplete data.
- Erase your data (right to be forgotten).
- Restrict processing.
- Object to processing based on legitimate interest, including direct marketing.
- Data portability in a structured, commonly used, machine-readable format.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
Send requests to privacy@wattbunker.com. We respond within 30 days. If you believe we are mishandling your data, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) or the supervisory authority in your EU country of residence.
7. Security
We apply technical and organisational measures appropriate to the risk: TLS for all traffic, restricted access to logs and inboxes, the principle of data minimisation, and short retention windows. No system is perfectly secure; in case of a personal data breach affecting your rights we will notify you and the AEPD as required by Art. 33–34 GDPR.
8. Children
The Site is not directed at children under 14 (Spain) / 16 (general EU). We do not knowingly process data from minors.
9. U.S. state privacy rights (CCPA / CPRA + multi-state)
If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Florida, Montana, Iowa, Tennessee, Indiana, Delaware, New Hampshire, or any other U.S. state with a comprehensive consumer privacy law, you have the following rights regardless of GDPR:
- Right to know what categories of personal information we collect about you and the purpose of collection.
- Right to access / portability — receive a copy of your personal information.
- Right to delete — request deletion of personal information we have collected.
- Right to correct inaccurate personal information.
- Right to opt out of "sale" or "sharing" of personal information, and of cross-context behavioural advertising.
- Right to limit use of sensitive personal information.
- Right to non-discrimination for exercising any of the rights above.
We do not sell or share your personal information as those terms are defined under the California Privacy Rights Act (CPRA, Cal. Civ. Code §1798.140) or any analogous state law. We do not engage in cross-context behavioural advertising. We do not knowingly process the personal information of consumers under 16 without affirmative authorisation.
You may submit a verifiable consumer request by emailing privacy@wattbunker.com. We will respond within 45 days (extendable by 45 more for complex requests) under CCPA/CPRA, or within 45 days under most other state laws. We will not discriminate against you for exercising these rights.
Global Privacy Control: we recognise the GPC browser signal as a valid opt-out preference signal under §7025 of the CCPA Regulations and equivalent rules in Colorado, Connecticut and other states. If your browser sends GPC, we treat it as an opt-out of any sale, share, or targeted advertising — even though we don't engage in those activities, the signal is logged and respected.
You may also use the Cookie & analytics preferences link or the Do Not Sell or Share My Personal Information link in the footer at any time.
10. Changes
We may update this policy. Material changes will be announced on the Site for at least 30 days before they take effect.
Last updated: April 2026