Legal
Privacy Policy
Last updated: 20 July 2026
This Privacy Policy explains how Specular Publishing, S.L. processes the personal data of visitors to this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: Specular Publishing, S.L.
- Tax ID (CIF/NIF): B88845763
- Registered office: Plaça Dolors Miralles, 13, Esc. A, 3º 2ª, 08202 Sabadell, Barcelona, Catalonia, Spain
- Contact: contact@specularpublishing.com
2. What data we collect
- Data you give us: when you sign up for a free resource or our newsletter, your first name and email address. When you contact us, the details you include in your message.
- Data collected automatically: limited technical data (such as IP address, browser type, and pages requested) recorded in our web host's standard server logs. We do not use analytics or advertising cookies — see our Cookie Policy.
- Email engagement: if you subscribe, our email provider records whether a message was opened and which links were clicked, so we can see which resources are useful and stop sending to addresses that no longer work.
We do not knowingly collect special categories of data, and we ask that you not send them to us.
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Send you the free resource you requested | Your consent — Art. 6(1)(a) |
| Send our newsletter and related book updates (marketing) | Your consent — Art. 6(1)(a) |
| Respond to your enquiries | Steps at your request / our legitimate interest — Art. 6(1)(b)/(f) |
| Measure whether our emails are opened and useful | Our legitimate interest in improving what we send — Art. 6(1)(f) |
| Keep the website secure and working (server logs) | Our legitimate interest in security and reliability — Art. 6(1)(f) |
| Comply with legal obligations | Legal obligation — Art. 6(1)(c) |
You can withdraw your consent at any time (see section 6). Every marketing email includes a one-click unsubscribe link.
4. How long we keep it
We keep your subscription data until you unsubscribe or ask us to delete it, after which it is removed or anonymised (subject to any short technical suppression-list retention needed to honour your unsubscribe). Enquiry data is kept only as long as needed to handle your request. Where the law requires, we retain certain data for the applicable legal periods.
5. Who we share it with
We do not sell your data. We share it only with service providers who process it on our behalf, under a data processing agreement, including:
| Provider | Role |
|---|---|
| Zoho — Campaigns (Zoho Corporation, EU data centre) | Newsletter delivery & list management |
| Zoho — Catalyst (Zoho Corporation, EU data centre) | Website hosting |
We do not use a third-party website analytics provider.
International transfers. We have chosen providers that store and process our data in the European Union: both our newsletter platform and our website hosting run in Zoho's EU data centres. Where any provider needs to access data from outside the European Economic Area — for example for technical support — those transfers are covered by the European Commission's Standard Contractual Clauses in our agreement with that provider.
6. Your rights
You have the right to:
- Access your personal data, and request rectification or erasure;
- Restrict or object to processing, and request data portability;
- Withdraw your consent at any time, without affecting processing already carried out.
To exercise these rights, email contact@specularpublishing.com. If you believe your data has not been handled correctly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.
7. Children
This website and its subscriptions are not directed to children. Under Spanish law, a minor may consent to the processing of their data from the age of 14; below that age, consent must be given by a parent or guardian. Some of our brands publish books written for teenagers — where a subscription concerns a young reader, it should be completed by a parent or guardian, or by a reader who meets the applicable minimum age. If you believe a child has provided us data without the appropriate consent, contact us and we will delete it.
8. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to protect your data and to keep our providers held to the same standard.
9. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always the one published on this website, with its "last updated" date above.