Privacy policy

Data controller

• Controller: Lantia Publishing S.L.
• Tax ID (NIF): B91966879
• Registered address: Plaza de la Magdalena 9, 3.º, 41001 Seville, Spain
• Data protection contact: info@publishers.news
• Data protection officer: [PENDIENTE: data protection officer’s details, if one has been appointed]

In short

• You can read the site without registering or giving us any data.
• If you sign up for the newsletter, we keep your email address and the language you choose, and we send you no newsletter until you confirm your subscription.
• We use no advertising cookies and no third-party trackers. The few cookies the site uses are listed in our cookie policy.
• We do not sell or pass on your data. The companies that help us host the site and send the newsletter process it on our behalf and only for that.

The newsletter

What data. Your email address and the language of the newsletter, which is the language of the page you sign up from. We also keep the date you signed up, the date you confirmed and, if you unsubscribe, the date you did. When we send you a newsletter, MailRelay records whether it is delivered, whether you open it, whether you click any of its links and whether it bounces.

What for. To send you the newsletters in the language you chose: the Publishnews daily and the Publishers weekly. If we ever send a special edition, you will receive it too. From opens and clicks we measure, in aggregate, how each send performs. We do not build profiles or take automated decisions about you.

How you sign up. When you submit the form, your address is held pending confirmation. MailRelay then sends you a confirmation email, and you start receiving the newsletters only once you confirm. If you do not confirm, we send you nothing more.

Legal basis. Your consent (article 6(1)(a) of the General Data Protection Regulation, GDPR), which you give when you sign up and confirm. You can withdraw it at any time with the "Unsubscribe" link in every newsletter or by writing to us. Withdrawing it does not affect earlier sends.

How long. For as long as you stay subscribed. If you unsubscribe, we keep your address marked as unsubscribed, so that we do not write to you again and can show that we respected your decision. [PENDIENTE: period after which unsubscribed addresses, and addresses that never confirm, are deleted]

Visits to the site

What data. As with any website, when you visit, your browser sends our hosting provider, Vercel, your IP address, the page you request, the time and technical details of your browser. Vercel uses them to serve the page, to protect the site against abuse and attacks, and to keep short-lived technical logs. Photos that the newsroom places in the text of articles load directly from our storage at Supabase, which therefore also receives your IP address.

Statistics. We use Vercel Web Analytics and Vercel Speed Insights to find out which pages are read and how fast they load. They use no cookies. Each visit is counted with an identifier calculated from the request itself, which is discarded after 24 hours and cannot be used to follow you across other websites. We only see aggregated data: pages viewed, where readers come from, their approximate location, device and browser type, and load times.

Legal basis. Our legitimate interest in keeping the site working and secure and in knowing, in aggregate, how it is used (article 6(1)(f) GDPR). You can object by writing to us.

How long. Technical logs are kept for the short period Vercel sets for our plan. [PENDIENTE: confirm the Vercel plan in use and how long its logs are kept]

Embedded videos. Some interviews and news stories include a YouTube video. The video does not load when the page opens: only if you press play does your browser connect to YouTube, which receives your IP address and may store its own cookies. Google Ireland Limited is responsible for that processing, as set out in its privacy policy; our cookie policy explains more.

The newsroom panel

Members of the newsroom sign in to the editing panel with a link they receive by email; there are no passwords. Only addresses on the team list receive that link. For each person we process their name, email address, role, the date they last signed in, the IP address and browser they start each session from, and a log of what they do in the panel (what they create, publish, schedule or send), to organise the work and to know who made each change.

Legal basis: our working relationship with each member of the team and our legitimate interest in controlling who publishes on the site. How long: for as long as that relationship lasts and, afterwards, for as long as claims may be brought.

The sign-in emails are sent by Supabase through Resend, our transactional email provider.

Who else processes your data

We do not sell or pass on your data to anyone. The following providers process it, only on our behalf and under a data processing agreement (article 28 GDPR):

Provider	What for	Where the data is
Supabase (Supabase Pte. Ltd., Singapore)	The site's database (newsletter subscribers, newsroom accounts) and photo storage	European Union: Frankfurt (Germany)
MailRelay (CPC Servicios Informáticos Aplicados a Nuevas Tecnologías, S.L., Spain)	Sending the newsletters, sign-up confirmation, unsubscribes and send statistics	European Union: data centres in Germany
Vercel (Vercel Inc., United States)	Hosting the site, visitor and performance statistics	United States and the countries of its network
Resend (Plus Five Five, Inc., United States)	Sending the sign-in links for the newsroom panel	United States

If an authority or a court requires it of us under the law, we will provide the data requested.

International transfers

Vercel and Resend process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework, which the European Commission found adequate on 10 July 2023, and both have also signed the standard contractual clauses approved by the Commission (Implementing Decision 2021/914).

Supabase stores the data in the European Union, but it is a Singapore company and may access it from outside the European Economic Area; for that it relies on the same standard contractual clauses.

[PENDIENTE: confirm that the data processing agreements with Supabase, MailRelay, Vercel and Resend have been accepted for the owning company's accounts]

Your rights

You can ask us at any time for:

• Access: to know whether we process data about you and to get a copy.
• Rectification: to correct data that is inaccurate.
• Erasure: to delete it.
• Objection: to stop processing it where the basis is our legitimate interest.
• Restriction: to keep it without using it while a complaint is resolved.
• Portability: to receive the data you gave us in a commonly used format.
• Withdrawal of your consent to the newsletter.

Write to info@publishers.news or by post to Plaza de la Magdalena 9, 3.º, 41001 Seville, Spain, saying which right you wish to exercise. If we cannot tell that the request comes from you, we will ask you to prove it. We will reply within one month, which we may extend by two further months if the request is complex; we would let you know. It is free of charge.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency, AEPD (aepd.es). We would be grateful if you wrote to us first so that we can try to put it right.

Children

The newsletter is meant for book trade professionals. If you are under 14, please do not sign up.

Security

Data travels encrypted (HTTPS) and is stored on servers with restricted access. Within the newsroom, only the editors and the people who administer the site can see the subscriber list.

Changes to this policy

If we change what we do with your data, we will update this page and its date. If the change affects newsletter subscribers, we will also tell them by email.