Legal
Privacy policy
On this page
Last updated: 2 November 2026.
This page explains what personal data we keep, what for, for how long, and how you can ask us to change or delete it. First the essentials in a table, then the detail.
The essentials
| Controller | Daniel Blázquez Barcenilla (Project 2080) |
|---|---|
| What for | Sending you community emails, telling you about courses, handling your place requests, answering your enquiries and publishing your comments |
| Legal basis | Your consent and, when you book a course, the contract itself and our legal obligations |
| Who else sees it | Only the providers we need to run the service, such as web hosting or email delivery. We do not sell or share your data |
| Your rights | Access, rectification, erasure, objection, restriction, portability and withdrawal of consent, by writing to info@project2080.com |
Who the controller is
- Controller: Daniel Blázquez Barcenilla
- Tax ID (NIF): 50125268B
- Address: Calle Francisco Umbral, 55, 28055 Madrid (Spain)
- Email: info@project2080.com
We have not appointed a data protection officer because, given the type and volume of data we process, the law does not require one. For any question about your data, write to us directly at the address above.
What data we process and why
Project 2080 community
- Data: first name, email address and country. Optionally, your date of birth and the topics you are interested in. We also keep the language you signed up in and the date you gave your consent. If you joined using the previous form, we also keep the surname you gave us then.
- Purpose: to email you Project 2080 articles, tools, news, events and courses; to deliver your welcome gift; and to understand, in aggregate, who makes up the community (by country and age group) so that we can shape our content.
- Legal basis: your consent (article 6(1)(a) GDPR). To complete your sign-up you need to confirm it from the email we send you.
- Retention: until you unsubscribe. If you do not confirm your sign-up, we delete it after 30 days.
Course waiting list
- Data: first name, email address and the course formats you are interested in.
- Purpose: to let you know when places open.
- Legal basis: your consent (article 6(1)(a) GDPR).
- Retention: until we tell you the course is open, or until you ask to be removed from the list.
Place requests and course bookings
- Data: first name, surname, email address, phone number, company and the message you write to us. If you confirm your place, also the details needed for the invoice (tax ID and address) and for the payment.
- Purpose: to handle your request and your place, take payment, issue the invoice, give you access to the training and contact you about it.
- Legal basis: steps taken at your request before entering into a contract, and the performance of that contract (article 6(1)(b) GDPR), and compliance with our tax and accounting obligations (article 6(1)(c)).
- Retention: for as long as the relationship lasts and then for the periods required by law. Accounting records and invoices are kept for six years.
Enquiries
- Data: name, email address, and the topic and message of your enquiry.
- Purpose: to reply to you.
- Legal basis: your consent (article 6(1)(a) GDPR).
- Retention: as long as needed to deal with your enquiry and, at most, one year after we reply.
Some forms include a box, unticked by default, to join the community as well. If you tick it, what is explained in the community section also applies.
Comments on articles
- Data: name, email address, website (optional), the text of your comment and the IP address you send it from.
- Purpose: to publish and moderate your comment, and to filter spam. Your email address is not published.
- Legal basis: your consent when you submit the comment (article 6(1)(a) GDPR) and our legitimate interest in keeping the website free of spam (article 6(1)(f)).
- Retention: for as long as the comment remains published.
To detect spam, comments are checked with the Akismet service. Next to your comment we show your Gravatar profile picture, if you have one; Gravatar finds it from an encrypted code generated from your email address.
Free tools
The DCMA analysis, the XER analyser and the other tools run in your browser. The file you open is processed on your own computer: it never reaches our server and we keep nothing of its content.
Browsing, statistics and advertising
If you accept it in the cookie notice, we use Google Analytics to find out how many people visit the website and which content they find useful. The data is analysed in aggregate and we do not use it to identify you.
We also advertise Project 2080 on Google Ads and Meta (Facebook and Instagram). If you accept it in the cookie notice, those platforms can measure which ads bring visits to the website and show you our ads when you browse other sites. What they do with your data is set out in their own privacy policies.
Details of each cookie, and how to change your choice, are in the cookies policy.
Social media
Project 2080 has profiles on networks such as YouTube, LinkedIn and Instagram. If you interact with them, your data is also processed by each network under its own privacy policy.
Minors
To join the community, sign up to a waiting list or send us an enquiry you must be at least 14 years old, as required by Spanish Organic Law 3/2018 (LOPDGDD). To book a course you must be of legal age.
Who else receives your data
We do not sell or share your data with anyone, unless the law requires us to. To run the service we work with these providers, which process data on our behalf and only for what we ask them to do:
| Provider | What for | Where |
|---|---|---|
| IONOS Cloud S.L.U. | Website hosting | European Union |
| Microsoft Ireland Operations Ltd. | Project 2080 email | European Union and United States |
| Brevo (Sendinblue SAS) | Sending website emails: confirmations, notices and replies to your requests | European Union |
| Mailchimp (The Rocket Science Group LLC) | Sending community emails | United States |
| Google (Google Ireland Ltd. and Google LLC) | Website statistics, YouTube videos and advertising | European Union and United States |
| Meta Platforms Ireland Ltd. | Advertising on Facebook and Instagram | European Union and United States |
| Automattic Inc. | Comment spam filter (Akismet) and profile pictures (Gravatar) | United States |
If you pay for a course, your payment details are processed directly by your bank or by the payment platform you choose, under their own terms. We never see or store your card details. Billing details may also be passed to the firm that keeps our accounts, and to the Spanish Tax Agency where the law requires it.
Transfers outside the European Union
Some of these providers are based in the United States. Transfers are made with the safeguards required by the GDPR: the EU-US Data Privacy Framework, to which these companies have signed up, and the standard contractual clauses approved by the European Commission.
Your rights
You can exercise these rights over your data at any time and free of charge:
- Access: find out what data we hold about you.
- Rectification: correct it if it is inaccurate.
- Erasure: ask us to delete it.
- Objection: ask us to stop using it, in particular to send you emails.
- Restriction: ask us to keep it without using it while a complaint is resolved.
- Portability: receive it in a format you can take to another service.
- Withdraw your consent, without affecting what we did with it beforehand.
To leave the community, the quickest way is the link at the bottom of every email. For anything else, write to info@project2080.com with the subject “Data protection”, from the email address you signed up with. If we cannot verify it is you, we will ask for further details. We will reply within one month.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency at www.aepd.es, or with the supervisory authority where you live.
Security
The website uses an encrypted connection (HTTPS) and only the controller has access to the data. To stop abusive submissions, the forms count how many submissions arrive from each IP address over ten minutes, without storing the address itself.
We do not take automated decisions or build profiles that have legal effects on you.
Changes to this policy
If we change the way we handle your data, we will update this page and the date at the top. If the change is significant, we will also let you know by email.
This is a translation. In case of discrepancy, the Spanish version prevails.