Privacy Policy

Santiago Fernández de Valderrama, individual, based in Sevilla, Spain. Contact for any privacy matter: privacy@career-ops.org.

When you subscribe to the mailing list, we collect and process:

• Your email address — to send you the announcements you signed up for.
• The IP address that submitted the form — captured automatically by our hosting provider's request logs, retained briefly for abuse-prevention and to demonstrate consent if required by a supervisory authority.
• The timestamp of your submission and confirmation — captured automatically by our email service provider.

We do not collect names, account passwords, payment details, or any profile data. The website does not require accounts.

We process your data on the basis of your explicit consent (Article 6(1)(a) of the GDPR), which you give by submitting the subscribe form and confirming your address via the link we email you (double opt-in). You can withdraw consent at any time — see section 7.

Your email is used only to send career-ops product announcements: new releases, occasional milestone updates, and security-relevant communications. We do not send promotional content for third parties, do not run advertising campaigns, and do not profile or score subscribers.

Frequency target: 1–2 emails per month at most, often less.

We retain your email and consent metadata for as long as you remain subscribed. After you unsubscribe or withdraw consent:

• Your address is removed from active sending within 24 hours.
• Audit data (timestamp of subscription, timestamp of unsubscribe, IP at submission) is retained for 30 days to satisfy demonstration-of-consent obligations, then deleted.

Hosting request logs are retained per our hosting provider's standard schedule (see section 8).

Under the GDPR you can ask us, free of charge, to:

• Access the data we hold about you (Art. 15)
• Correct inaccurate data (Art. 16)
• Delete your data (Art. 17)
• Restrict processing of your data (Art. 18)
• Receive a copy in a portable format (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time without giving a reason (Art. 7(3))

Send any of these requests to privacy@career-ops.org. We respond within 30 days, in line with Art. 12(3).

Every email we send includes a one-click unsubscribe link. You can also email privacy@career-ops.org with the words "unsubscribe" or "delete me" — we will action it the same business day.

Withdrawing consent does not affect the lawfulness of any processing already carried out before the withdrawal.

We use the following processors. Each is bound by a data processing agreement (DPA) and processes your data only on our instructions.

• Resend Inc. (United States) — transactional email and audience management. Subscriber emails are stored in their EU region (eu-west-1, Ireland). DPA: resend.com/legal/dpa
• Vercel Inc. (United States) — website hosting. Captures request IP and timestamps in standard server logs for abuse-prevention. DPA: vercel.com/legal/dpa
• Cloudflare Inc. (United States) — DNS provider. Processes DNS lookup requests; does not store subscriber data.

We do not share your data with any other third party. We do not sell your data.

Some processors are based in the United States. Where data is transferred outside the European Economic Area, we rely on the Standard Contractual Clauses approved by the European Commission, in line with Article 46(2)(c) GDPR following the Schrems II ruling.

career-ops.org uses minimal first-party cookies for theme preference and site functionality. We use Vercel Analytics and Speed Insights to measure aggregate traffic and performance — these are configured to collect anonymous, aggregated metrics and do not identify individual visitors. We do not use third-party advertising cookies, behavioral profiling, or remarketing pixels.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Spain that is the Agencia Española de Protección de Datos (AEPD), aepd.es. EU residents in other countries may complain to their national data protection authority.

We would, however, appreciate the chance to address any concerns directly first — please email privacy@career-ops.org.

When we make material changes to this policy we will:

• Update the effective date and version number at the top.
• Notify active subscribers by email at least 14 days before the changes take effect.
• Keep the previous version available on request.

Editorial corrections (typo fixes, clarifications without substantive change) are made silently.