{"id":15509,"date":"2022-11-03T21:12:29","date_gmt":"2022-11-03T19:12:29","guid":{"rendered":"https:\/\/glutendtrotters.com\/?page_id=15509"},"modified":"2026-08-25T12:54:54","modified_gmt":"2026-08-25T10:54:54","slug":"privacy-policy-2","status":"publish","type":"page","link":"https:\/\/glutendtrotters.com\/en\/privacy-policy-2\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<div class=\"wp-block-stackable-columns alignfull stk-block-columns stk-block stk-7e7d25a stk-block-background stk--has-background-overlay\" data-block-id=\"7e7d25a\"><style>.stk-7e7d25a {background-image:url(https:\/\/glutendtrotters.com\/wp-content\/uploads\/2025\/09\/Apple-Market.webp) !important;min-height:400px !important;align-items:center !important;padding-top:var(--stk--preset--spacing--70, 3.38rem) !important;padding-right:var(--stk--preset--spacing--70, 3.38rem) !important;padding-bottom:var(--stk--preset--spacing--70, 3.38rem) !important;padding-left:var(--stk--preset--spacing--70, 3.38rem) !important;margin-bottom:0px !important;display:flex !important;}.stk-7e7d25a:before{background-color:#000000 !important;opacity:0.5 !important;}<\/style><div class=\"stk-row stk-inner-blocks stk-block-content stk-content-align stk-7e7d25a-column alignwide\">\n<div class=\"wp-block-stackable-column stk-block-column stk-column stk-block stk-5bdbb51\" data-v=\"4\" data-block-id=\"5bdbb51\"><div class=\"stk-column-wrapper stk-block-column__content stk-container stk-5bdbb51-container stk--no-background stk--no-padding\"><div class=\"stk-block-content stk-inner-blocks stk-5bdbb51-inner-blocks\">\n<div class=\"wp-block-stackable-heading stk-block-heading stk-block-heading--v2 stk-block stk-b74986c\" id=\"heading-placeholder\" data-block-id=\"b74986c\"><style>.stk-b74986c .stk-block-heading__text{color:#ffffff !important;}<\/style><h2 class=\"stk-block-heading__text has-text-color has-text-align-center\">Privacy Policy<\/h2><\/div>\n<\/div><\/div><\/div>\n<\/div><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Last updated: 25 August 2026<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At Glutendtrotters we take your privacy seriously. This policy explains, in plain language, <strong>what data we collect, why we use it, who we share it with and what you can do about it<\/strong>, in accordance with Regulation (EU) 2016\/679 (GDPR) and Spanish Organic Act 3\/2018 on Data Protection and the Guarantee of Digital Rights (LOPDGDD).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This site is operated from Spain. Wherever you are reading from, the standards described below apply to everyone.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Who is responsible for your data<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Data controller:<\/strong> Rita Naboni Romanillo<\/li>\n\n\n\n<li><strong>Address:<\/strong> Calle Perines, 16, Santander, Cantabria (Spain)<\/li>\n\n\n\n<li><strong>Email:<\/strong> <a href=\"mailto:info@glutendtrotters.com\">info@glutendtrotters.com<\/a><\/li>\n\n\n\n<li><strong>Website:<\/strong> <a href=\"https:\/\/glutendtrotters.com\/en\/\">glutendtrotters.com<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We are not required to appoint a Data Protection Officer, so you can send any privacy question directly to the email address above.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. Our commitments<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>We <strong>never sell or rent<\/strong> your personal data.<\/li>\n\n\n\n<li>We only ask for the data that is <strong>strictly necessary<\/strong> for each purpose.<\/li>\n\n\n\n<li>We do not use your data for purposes other than those explained to you.<\/li>\n\n\n\n<li>You can exercise your rights at any time, free of charge and without complications.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">3. What data we process and why<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">These are all the processing activities carried out through this website:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3.1. Blog comments<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Data<\/strong><\/td><td>Name or nickname, email address, website (optional), comment content, IP address and browser details.<\/td><\/tr><tr><td><strong>Purpose<\/strong><\/td><td>To publish and moderate your comment, reply to you and detect spam.<\/td><\/tr><tr><td><strong>Legal basis<\/strong><\/td><td>Your <strong>consent<\/strong> when submitting the comment (Art. 6(1)(a) GDPR) and our <strong>legitimate interest<\/strong> in protecting the site against spam and abuse (Art. 6(1)(f) GDPR).<\/td><\/tr><tr><td><strong>Retention<\/strong><\/td><td>For as long as the comment remains published. If you ask us to delete it, the associated data is deleted with it.<\/td><\/tr><tr><td><strong>Visibility<\/strong><\/td><td>Your name and comment are <strong>publicly visible<\/strong>. Your email address is <strong>never<\/strong> published.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">We use <strong>Akismet<\/strong> (Automattic Inc.) to filter spam; it analyses the comment content, the IP address and browser data. A hashed version of your email address may also be sent to <strong>Gravatar<\/strong> to display your profile picture if you have an account there.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3.2. Contact form<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Data<\/strong><\/td><td>Name, email address and the content of your message.<\/td><\/tr><tr><td><strong>Purpose<\/strong><\/td><td>To answer your question, request or collaboration proposal and keep track of the conversation.<\/td><\/tr><tr><td><strong>Legal basis<\/strong><\/td><td>Your <strong>consent<\/strong> when submitting the form (Art. 6(1)(a) GDPR).<\/td><\/tr><tr><td><strong>Retention<\/strong><\/td><td>While we handle your enquiry and for up to <strong>one year<\/strong> after our last contact, unless a legal obligation requires us to keep it longer.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">We do not use this data to send you marketing, and we will not add you to the newsletter unless you expressly ask us to.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3.3. Newsletter subscription<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Data<\/strong><\/td><td>Name and email address. Our provider also records technical delivery data and email interaction (opens and clicks).<\/td><\/tr><tr><td><strong>Purpose<\/strong><\/td><td>To send you blog updates, new articles, recipes and gluten-free travel recommendations.<\/td><\/tr><tr><td><strong>Legal basis<\/strong><\/td><td>Your express <strong>consent<\/strong> when subscribing (Art. 6(1)(a) GDPR and Art. 21 LSSI-CE).<\/td><\/tr><tr><td><strong>Retention<\/strong><\/td><td>Until you withdraw your consent or unsubscribe.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Newsletters are sent using <strong>Mailchimp<\/strong> (Intuit Inc.). You can <strong>unsubscribe at any time<\/strong> using the link at the bottom of every email, or by writing to <a href=\"mailto:info@glutendtrotters.com\">info@glutendtrotters.com<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3.4. Website analytics<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Data<\/strong><\/td><td>Cookie identifiers, pages visited, time on page, traffic source, device, browser, language and approximate location derived from your IP address.<\/td><\/tr><tr><td><strong>Purpose<\/strong><\/td><td>To understand which content is useful and improve the site. Reports are reviewed in aggregate form.<\/td><\/tr><tr><td><strong>Legal basis<\/strong><\/td><td>Your <strong>consent<\/strong>, given through the cookie settings panel (Art. 6(1)(a) GDPR and Art. 22(2) LSSI-CE).<\/td><\/tr><tr><td><strong>Retention<\/strong><\/td><td>According to each cookie&#8217;s lifetime, detailed in our <a href=\"https:\/\/glutendtrotters.com\/en\/cookie-policy\/\">Cookie Policy<\/a>. Google Analytics reports are retained for a maximum of 14 months.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">We use <strong>Google Analytics 4<\/strong>, integrated through the Google Site Kit plugin.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3.5. Advertising<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Data<\/strong><\/td><td>Advertising identifiers, cookies, IP address, pages visited, ad interactions and, where applicable, inferred interests.<\/td><\/tr><tr><td><strong>Purpose<\/strong><\/td><td>To display the advertising that keeps this blog running, measure its performance and limit how often the same ad is shown.<\/td><\/tr><tr><td><strong>Legal basis<\/strong><\/td><td>Your <strong>consent<\/strong>, given through the cookie settings panel (Art. 6(1)(a) GDPR and Art. 22(2) LSSI-CE).<\/td><\/tr><tr><td><strong>Retention<\/strong><\/td><td>According to each cookie&#8217;s lifetime and each ad network&#8217;s own policies.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Advertising is served through <strong>Google AdSense<\/strong> and <strong>Mediavine<\/strong> services, including the <em>Grow<\/em> recommendation widget. If you <strong>do not accept<\/strong> advertising cookies you will still see ads, but they <strong>will not be personalised<\/strong> to your profile.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3.6. Site security and operation<\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Data<\/strong><\/td><td>IP address, access logs, login attempts and technical browser data.<\/td><\/tr><tr><td><strong>Purpose<\/strong><\/td><td>To protect the site against attacks, unauthorised access and spam, and to keep the service available and performing well.<\/td><\/tr><tr><td><strong>Legal basis<\/strong><\/td><td>Our <strong>legitimate interest<\/strong> in the security of our systems (Art. 6(1)(f) GDPR).<\/td><\/tr><tr><td><strong>Retention<\/strong><\/td><td>Technical logs are kept for a maximum of <strong>12 months<\/strong>.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Our hosting provider, the <strong>Cloudflare<\/strong> content delivery network and brute-force protection tools are involved in these tasks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3.7. Browsing preferences<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We store basic preferences such as your <strong>chosen language<\/strong> (Spanish or English) and your <strong>cookie preferences<\/strong>, so we do not have to ask you on every visit. The legal basis is the technical necessity of delivering the service you requested and, for the consent record, compliance with a legal obligation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">4. Do you have to give us your data?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">No. You can read the whole blog without providing any identifying data. Data is only needed if you want to comment, contact us or subscribe to the newsletter; in those cases, not providing it means we cannot deliver that particular service.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">5. Who we share your data with<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We do not disclose your data to third parties except where legally required. We do work with <strong>service providers<\/strong> who access it in order to provide their service to us, acting as data processors under a contract that complies with Article 28 GDPR:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Provider<\/th><th>Service<\/th><th>Location<\/th><\/tr><\/thead><tbody><tr><td>Hostinger International Ltd.<\/td><td>Web and email hosting<\/td><td>European Union<\/td><\/tr><tr><td>Cloudflare, Inc.<\/td><td>Content delivery network and security<\/td><td>USA \/ global<\/td><\/tr><tr><td>Google Ireland Ltd. and Google LLC<\/td><td>Analytics, advertising and web fonts<\/td><td>EU \/ USA<\/td><\/tr><tr><td>Automattic Inc.<\/td><td>Anti-spam (Akismet) and profile images (Gravatar)<\/td><td>USA<\/td><\/tr><tr><td>Intuit Inc. (Mailchimp)<\/td><td>Newsletter delivery<\/td><td>USA<\/td><\/tr><tr><td>Mediavine, Inc.<\/td><td>Advertising and recommendation widget<\/td><td>USA<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">In addition, if you interact with embedded third-party content (videos, maps, social media posts), those platforms may collect data on their own account and under their own privacy policies.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. International transfers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Some of our providers are located in the <strong>United States<\/strong>. These transfers rely on:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The <strong>adequacy decision<\/strong> for the <em>EU-US Data Privacy Framework<\/em>, where the provider is certified under it.<\/li>\n\n\n\n<li>The European Commission&#8217;s <strong>Standard Contractual Clauses<\/strong>, together with supplementary measures, in all other cases.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You can request further information about the safeguards in place by writing to <a href=\"mailto:info@glutendtrotters.com\">info@glutendtrotters.com<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">7. Automated decision-making and profiling<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We do not make automated decisions that produce legal effects concerning you or similarly significantly affect you.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You should know, however, that <strong>if you accept advertising cookies<\/strong>, ad networks may build interest profiles in order to show you personalised ads. You can prevent this by rejecting those cookies in the settings panel, which will not affect your access to any content.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">8. How long we keep your data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We keep each type of data for the period set out in section 3 and, in any case, only for as long as it is necessary for the purpose that justified collecting it. After that, it is deleted or anonymised, unless it must be kept blocked in order to address potential legal liabilities during the applicable limitation periods.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">9. Your rights<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As a data subject you may exercise the following rights, free of charge:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Access:<\/strong> find out what data of yours we process and obtain a copy.<\/li>\n\n\n\n<li><strong>Rectification:<\/strong> correct inaccurate or incomplete data.<\/li>\n\n\n\n<li><strong>Erasure:<\/strong> ask us to delete your data when it is no longer necessary.<\/li>\n\n\n\n<li><strong>Restriction:<\/strong> ask us to suspend processing in certain circumstances.<\/li>\n\n\n\n<li><strong>Portability:<\/strong> receive your data in a structured, commonly used format.<\/li>\n\n\n\n<li><strong>Objection:<\/strong> object to processing based on our legitimate interest.<\/li>\n\n\n\n<li><strong>Withdraw consent<\/strong> at any time, without affecting the lawfulness of processing carried out beforehand.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">To exercise them, write to <a href=\"mailto:info@glutendtrotters.com\">info@glutendtrotters.com<\/a> stating which right you wish to exercise. We will reply within <strong>one month<\/strong>, extendable to two if the request is complex. We may ask you to verify your identity if there is reasonable doubt about who is making the request.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you believe we have not handled your request properly, you may lodge a complaint with the <strong>Spanish Data Protection Agency<\/strong> (Agencia Espa\u00f1ola de Protecci\u00f3n de Datos, C\/ Jorge Juan 6, 28001 Madrid \u2014 <a href=\"https:\/\/www.aepd.es\" target=\"_blank\" rel=\"noreferrer noopener\">www.aepd.es<\/a>), or with the supervisory authority of the EU country where you live or work. We would be grateful for the chance to resolve it with you first.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">10. Children<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The features that require personal data (comments, contact and newsletter) are intended for people <strong>aged 14 and over<\/strong>, in accordance with Article 7 of the LOPDGDD. If we become aware that we have collected data from a child below that age without parental consent, we will delete it. If you are a parent or guardian and believe this has happened, please write to us and we will resolve it immediately.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">11. Data security<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We apply appropriate technical and organisational measures to protect your data: HTTPS encryption across the whole site, regular backups, access controls, security updates and protection against automated attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No system is completely secure. If a personal data breach occurred that posed a high risk to your rights, we would inform you and notify the supervisory authority within the legally prescribed deadlines.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">12. Cookies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This site uses first-party and third-party cookies. You can find the full detail, and manage or withdraw your consent, in our <a href=\"https:\/\/glutendtrotters.com\/en\/cookie-policy\/\">Cookie Policy<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">13. Changes to this policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We may update this policy to reflect legal changes or new services on the site. The last-updated date appears at the top of this document. If a change materially affects your rights, we will let you know prominently.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Last updated: 25 August 2026 At Glutendtrotters we take your privacy seriously. This policy explains, in plain language, what data we collect, why we use it, who we share it with and what you can do about it, in accordance with Regulation (EU) 2016\/679 (GDPR) and Spanish Organic Act 3\/2018 on Data Protection [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"wprm-recipe-roundup-name":"","wprm-recipe-roundup-description":"","footnotes":""},"wf_page_folders":[],"class_list":["post-15509","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/glutendtrotters.com\/en\/wp-json\/wp\/v2\/pages\/15509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/glutendtrotters.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/glutendtrotters.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/glutendtrotters.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/glutendtrotters.com\/en\/wp-json\/wp\/v2\/comments?post=15509"}],"version-history":[{"count":3,"href":"https:\/\/glutendtrotters.com\/en\/wp-json\/wp\/v2\/pages\/15509\/revisions"}],"predecessor-version":[{"id":16847,"href":"https:\/\/glutendtrotters.com\/en\/wp-json\/wp\/v2\/pages\/15509\/revisions\/16847"}],"wp:attachment":[{"href":"https:\/\/glutendtrotters.com\/en\/wp-json\/wp\/v2\/media?parent=15509"}],"wp:term":[{"taxonomy":"wf_page_folders","embeddable":true,"href":"https:\/\/glutendtrotters.com\/en\/wp-json\/wp\/v2\/wf_page_folders?post=15509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}