Privacy // newsletter

Newsletter privacy notice

This notice describes the small amount of personal data used to send portfolio release notes. The newsletter must never be used to submit health, patient, employment-confidential or other sensitive information.

Controller and contact

B. Fabio Mejías Fernández controls this portfolio newsletter. Questions, rights requests and withdrawals can be sent to requests@bfab.io.

Data, purpose and legal basis

The form records the submitted name, email address, signup source and subscription timestamp. It does not intentionally store passwords, message content, health information or browser fingerprints.

The sole purpose is to send occasional release notes about the projects documented on bfab.io. Processing is based on the explicit consent given through the unchecked signup box. Consent can be withdrawn at any time by email, without affecting earlier lawful processing.

Hosting and retention

Render hosts the newsletter API and Supabase hosts the subscription table. They act as technical service providers for this workflow. Access credentials stay on the server and are not embedded in bfab.io.

Subscription data is retained until consent is withdrawn, the newsletter is discontinued or the record is no longer needed for the stated purpose. Duplicate submissions do not silently reactivate or overwrite an existing record.

Your choices and rights

You can ask to access, correct, erase, restrict or export the stored data, object where applicable, or withdraw consent. You may also complain to the competent data protection authority; in Spain this is the Agencia Española de Protección de Datos ↗.

No subscription data is sold, used for behavioural profiling or subjected to automated decisions with legal or similarly significant effects.