Privacy Policy – Cartagena Herald

1. Data Controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), you are hereby informed that the personal data collected through this Website will be processed by:

2. Purpose of this section

This Privacy Policy governs the processing of personal data of Users who access, browse or interact with the Cartagena Herald Website.

It complements the Terms of Use, the Cookie Policy and the Accessibility Statement, all of which are available in the Website footer.

3. Purpose of data processing

The personal data provided by Users may be used to:

  • Manage newsletter subscriptions.
  • Manage and moderate article comments (if enabled).
  • Handle information or contact requests.
  • Compile statistics and web usage studies through analytics tools.
  • Comply with applicable legal obligations.

4. Categories of data processed

Depending on the User’s interaction with the Website, the following categories may be processed:

  • Identification data: name, surname(s), email address.
  • Technical browsing data: IP address, device identifiers, cookies and similar technologies (see Cookie Policy).
  • Interaction data: comments, opinions, or messages submitted through contact forms.

5. Legal basis for processing

The processing of personal data is based on:

  • Explicit User consent (Art. 6.1.a GDPR), for subscriptions, communications, and non-essential cookies.
  • Compliance with legal obligations (Art. 6.1.c GDPR), in the case of requests from authorities.
  • Legitimate interest of the controller (Art. 6.1.f GDPR), for website security, service improvement and statistical purposes.

6. Data recipients and data processors (service providers)

Personal data will not be disclosed to third parties except:

  • Where legally required by public administrations or competent authorities.
  • To service providers necessary for Website operation (e.g., hosting, newsletters, web analytics), with processing agreements pursuant to Art. 28 GDPR.

Cartagena Herald relies on external providers (hosting, analytics, email services, newsletter platforms). All of them act as data processors under contracts that guarantee GDPR compliance.

7. Data retention period

Personal data will be kept only for as long as strictly necessary for the purpose for which it was collected, and while the User does not request its erasure.

  • Subscriptions: until the User requests cancellation.
  • Browsing data: in line with the Cookie Policy retention periods.
  • Contact forms: as long as needed to respond to the enquiry.

8. International data transfers

Where third-party services located outside the European Economic Area (EEA) are used (e.g., email, hosting, analytics providers), compliance will be ensured through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Other measures recognised by law to guarantee a level of protection equivalent to that of the EU.

9. Source of data

The data processed is mainly provided directly by Users through Website forms.

In the case of public interest individuals, data may come from publicly accessible sources such as official press releases, conferences, or publicly available information.

10. Public interest individuals

In carrying out its journalistic activities, Cartagena Herald may process personal data relating to individuals of public relevance or linked to matters of public interest.

This processing is based on the fundamental right to freedom of expression and information (Art. 20 of the Spanish Constitution), always applying proportionality and respect for human dignity.

11. Data protection measures

Cartagena Herald implements technical, organisational, and security measures to guarantee the confidentiality, integrity, and availability of personal data, in accordance with Articles 32 et seq. GDPR. These include:

  • Encrypted communications (HTTPS/SSL).
  • Restricted access control to authorised staff only.
  • Periodic backups to prevent data loss.
  • Security monitoring and incident detection.

In the event of a personal data breach, Cartagena Herald will notify the Spanish Data Protection Agency (AEPD) and, where appropriate, affected individuals within the deadlines established by law.

12. Enhanced protection for minors

Cartagena Herald does not knowingly collect data from minors under 14 years of age.

Access and use of the Website by minors must be supervised and authorised by their parents, guardians, or legal representatives, who will be held responsible for their actions.

When publishing informative content involving minors, special caution will be applied in accordance with Article 84 LOPDGDD.

13. Users’ rights and exercise of data protection rights

Users may exercise their rights of access, rectification, erasure, objection, restriction, and portability at any time by submitting a request to:

The request must include the User’s full name, copy of identification document, and the right being exercised.

If no satisfactory response is obtained, Users may file a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es/

14. Policy validity and amendments

This Privacy Policy shall remain in force as long as it is published on the Website.

Cartagena Herald may amend it whenever necessary to adapt to regulatory changes, AEPD criteria, or new Website functionalities.

Amendments will be published on the Website and will take effect from the time of publication.

15. Competent supervisory authority

If Users consider their rights have been infringed, they may lodge a complaint with the Spanish Data Protection Agency (AEPD), the supervisory authority in Spain for data protection matters: https://www.aepd.es/