Privacy policy

Data controller

Controller

Emili Solé

Privacy contact

info@emilisole.art

Other identifying information legally required from the website owner appear in the Legal notice. This address is used for enquiries about this policy and for exercising data protection rights.

Processing currently carried out

Website operation, security and server logs

When you request a page or file, the server may record the IP address; date, time and time zone; method and requested path; protocol; response code and size; referring page when supplied by the browser; and browser or user-agent identifier.

These data come from the connection and browser. They are used to deliver the website, detect errors, maintain availability, investigate misuse and protect the infrastructure.

Legal basis

Emili Solé’s legitimate interest in maintaining an available and secure website, under Article 6(1)(f) GDPR.

Recipient

Raiola Networks, S.L., as hosting provider and processor.

Retention

Raiola Networks states that logs are usually retained for a few months, although technical needs may alter that period. Daily account backups, which may include logs, are retained for 14 days.

Location

The contracted hosting is provided from infrastructure in Spain. Emili Solé has not enabled Cloudflare or another external CDN or proxy for this website.

Privacy enquiries and exercise of rights

If you write to info@emilisole.art, the address you use, your communication and any data you choose to include will be processed. Where necessary to handle a right, information supplied by you may also be requested to verify your identity without collecting more data than necessary.

The purpose is to answer privacy enquiries, handle rights requests and retain evidence of their handling where necessary.

Legal basis

Compliance with the controller’s legal obligations under Article 6(1)(c) GDPR. General enquiries are answered on the basis of the legitimate interest in responding, under Article 6(1)(f).

Recipient

Raiola Networks, S.L., as email provider and processor.

Retention

For as long as needed to deal with the enquiry or right and thereafter only while required to meet legal obligations or demonstrate proper handling.

General enquiries through the contact form

The Contact page lets you send enquiries about this website, Emili Solé’s work or artistic activity. The form asks for your name, email address and message; the subject is optional. It does not accept attachments.

These data are used solely to receive and answer the communication initiated by the visitor. The form is not a shop, regular commission channel, user account or newsletter.

Legal basis

Emili Solé’s legitimate interest in responding to a communication voluntarily initiated by the visitor, under Article 6(1)(f) GDPR.

Recipient

Raiola Networks, S.L., as hosting and email provider and processor. The message is delivered through an authenticated, encrypted SMTP connection to an unpublished internal mailbox.

Retention

Messages and replies are normally deleted after 6 months. The provider’s automatic backups may retain them for up to fourteen additional days.

Storage

Form content is not stored in MariaDB or website files and is not added to application logs.

To protect the form against abusive submissions, an HMAC fingerprint of the IP address is retained for no more than 24 hours together with counters and timestamps. The original address cannot be recovered from the fingerprint without the website’s private key, and the fingerprint is deleted automatically at the end of that period.

Form protection tickets are random, single-use and expire after 30 minutes. They contain none of the name, email, subject or message and create neither a session nor a new cookie.

Privacy preferences

The necessary first-party cookie emilisole_cookie_consent remembers separately for 6 months whether you have authorized the videos cited from YouTube and Google Analytics 4. It contains a technical format indicator and those two choices; it contains neither your name or email address nor an identifier assigned by Emili Solé.

The preference remains in your browser, is not stored in MariaDB and is not sent to Google. It is needed to respect your choice and prevent optional services from loading without authorization.

Statistics with Google Analytics 4

Google Analytics 4, measurement ID G-TTV4J7TZYM, is used to understand in aggregate which pages are viewed and how visitors move through the website, in order to improve the organization and clarity of the Nativity-scene manual and other content.

This processing occurs only if you authorize Analytics. Basic consent mode is used: before authorization, gtag.js is not downloaded and no information is sent to Google.

Once authorized, visited pages, interactions, approximate date, visit source, technical browser and device data, and pseudonymous cookie identifiers may be processed. Google uses the IP address to derive location information and protect the service but states that individual IP addresses are not logged or stored in Google Analytics.

Legal basis

Your consent under Article 6(1)(a) GDPR.

Retention

Analytics cookies are limited to 6 months. The property retains event data for 2 months and user-associated data for 14 months; the latter period resets when new activity occurs.

Configuration

Advertising and personalisation features are disabled. The property is not used in conjunction with Google advertising services.

YouTube players

Videos of Emili Solé’s own work are served from this same domain and play no part in this purpose: they are shown without authorization. What is described here are the videos cited in the Manual, hosted on YouTube. Their players are not loaded before you authorize them and, until then, this website does not initiate a connection to YouTube.

If you consent, YouTube may receive the IP address and technical device and browser information, use its own cookies and record video-playback data.

Purpose

To display the cited videos you authorize. Emili Solé obtains no statistics from those playbacks: the videos belong to third parties and are cited as supporting material.

Legal basis

Your consent under Article 6(1)(a) GDPR.

Retention

Google determines how long it keeps information processed on its platform. Known player-cookie durations are detailed in this website’s Cookie policy.

The players load from youtube-nocookie.com, the domain Google offers for privacy-enhanced mode. That mode does not remove cookies: it defers them until playback begins.

Roles of Emili Solé, Raiola Networks and Google

• Emili Solé is the website’s sole controller. He decides its purposes, incorporated services and configuration.
• Raiola Networks, S.L. provides hosting and email and processes data on Emili Solé’s behalf as processor.
• Google Ireland Limited provides Google Analytics in the European Economic Area and processes service data under the applicable terms. Where Google uses shared data for its own products and services, it acts as an independent controller for that use.
• Google also operates the YouTube platform and its player, and determines its own processing within that external service.

Google Analytics data-sharing settings

All four general account settings are enabled: Google products and services, modelling contributions and business insights, technical support, and recommendations for your business.

Depending on the purpose, these settings allow Google to use data to improve products and services, generate aggregated benchmarking information, access data when technical support is requested, or provide configuration recommendations. “Google products and services” allows Google to access and analyse shared data for its own purposes.

See Google Analytics’ official data-sharing settings and Google’s data processing terms.

Recipients and international transfers

Apart from the providers described, data are not disclosed to third parties unless required by law or by a competent authority.

Raiola Networks’ hosting and email services are provided from Spain, and no international transfer arising from that service has been identified.

Google and its group entities may process information outside the European Economic Area. Google states that it uses applicable legal mechanisms, including adequacy decisions, the EU–US Data Privacy Framework and standard contractual clauses where appropriate.

Google LLC, the entity certified under that framework, is established in the United States.

Any transfer related to Analytics or to the videos cited from YouTube begins only after you authorize the relevant service.

See the legal frameworks used by Google and its privacy policy.

Scope of processing

Personal data are used only for the purposes described in this policy. They are not sold or used for advertising, commercial profiling or automated decisions producing legal effects.

Special categories of personal data are not intentionally requested. Do not include sensitive information that is unnecessary for your communication.

Your rights

You may request access, rectification or erasure, restriction of processing, object where legitimate interests are the basis, and request portability where applicable. You may also withdraw consent at any time without affecting the lawfulness of earlier processing.

To exercise these rights, write to info@emilisole.art and state the right concerned. Additional identity information will be requested only where necessary.

Requests are free of charge and will generally be answered within one month of receipt. This may be extended by 2 months where necessary due to complexity or number of requests; you will be informed of an extension within the first month.

If you believe processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency.

For processing carried out by Google as an independent controller on its platforms, you may also use the channels in its privacy policy.

Withdrawing cookie consent is not the same as exercising a right

The “Settings” button beside Cookies in the footer lets you withdraw consent for Analytics or for the videos cited from YouTube separately. Withdrawal prevents the website from loading the relevant service again and, for Analytics, deletes the _ga and _ga_* cookies that the website can remove from its own domain.

This does not automatically erase information previously processed by a provider. To request access, erasure or another right concerning data already processed, use the procedure above.

Cookies set on Google domains cannot be deleted by this website; manage them through your browser or Google’s mechanisms.

Security

Technical and organizational measures proportionate to this website and the processing described are applied to prevent unauthorized access, alteration, loss or disclosure. No Internet-connected system can guarantee absolute security.

Changes to this policy

This policy will be updated when relevant processing, providers, purposes or settings change.

Last updated: 3 November 2026.