Privacy notice

Who is responsible

Jose Luis Sanz, author and publisher of Risks In Sync, is the controller for reader feedback.

You can contact the author, including to exercise a privacy right, through the public LinkedIn profile.

What is collected and why

The form does not ask for your name or email address. It stores your selected answer, any optional comment, the review it relates to and the time the provider accepts it. Netlify may also process limited technical information needed to deliver and protect the service.

The sole editorial purpose is to understand whether the Risks In Sync method is useful and how it can be improved. Feedback is not published, used for marketing or profiling, or transferred automatically to AI systems.

Legal basis

The legal basis is the author’s legitimate interest in securely operating and improving this independent, non-commercial publication (Article 6(1)(f) GDPR).

You may object to this processing at any time. If you do not wish to provide feedback, you can read the publication without using the form.

Provider and international transfers

Netlify, Inc. hosts the site and receives form submissions as a service provider. Its current data processing agreement covers customer data and provides transfer safeguards, including the EU–US Data Privacy Framework and, where that mechanism does not apply, the European Commission's Standard Contractual Clauses.

See Netlify's data processing agreement and current subprocessor list.

Retention and access

Raw form submissions are kept for no more than 90 days after receipt and are then deleted from the private form inbox. Any temporary export follows the same deadline. Aggregated and truly de-identified themes and editorial decisions may be kept.

Access through the Netlify account is restricted to the author. Netlify and its subprocessors may access data only as needed to provide and protect the service under the applicable terms. Hosting and security records follow Netlify's service retention and deletion procedures.

Your privacy rights

You may ask to access, correct or delete feedback that can reasonably be identified, restrict its use, or object to its processing. Contact the author and provide enough details to locate the response. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Optional audience analytics

If a valid Google Analytics 4 measurement ID is configured, analytics remains off until you explicitly accept it. Before acceptance—or after rejection—the Google script is not loaded, no analytics cookies are created, and no analytics request or consent ping is sent to Google.

After acceptance, Google Analytics receives a clean canonical page location, page title, traffic source or campaign information supplied by your browser, navigation between reviews, and an aggregate feedback-submission event. The selected answer and optional comment are never sent to analytics. Query strings are excluded from the page location.

Risks In Sync does not enable advertising, remarketing, Google Signals, advertising personalisation, User-ID, or form-content capture. Google may process technical information such as IP address and device/browser data when analytics is active. Review Google’s terms, retention settings and international-transfer arrangements before enabling the service.

Audience analytics is not currently configured.

Cookies and changes

Your analytics choice is stored in local browser storage. If you accept, Google Analytics may set first-party measurement cookies. You can change your choice here or from the footer; withdrawing consent stops future measurement and removes known Google Analytics cookies for this site where the browser permits it.

This implementation is a technical consent control, not a certification of legal compliance. The publisher must confirm the legal basis, wording, retention period, Google account settings and any required consent-platform obligations before activation.

Last updated: 17 September 2026.