Privacy Policy
Privacy Policy for The Dave Stack
Effective Date: April 11, 2025
1. Introduction
Welcome to The Dave Stack (hereinafter, "the Blog"), accessible at https://en.thedavestack.com. This Privacy Policy describes how David López Felguera (hereinafter, "we", "us", or "our") collects, uses, and protects the personal information that you (hereinafter, "the User") provide when using our Blog.
We are committed to protecting your privacy and personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The controller responsible for the processing of personal data collected through this Blog is:
- Name: David López Felguera
- Contact email for privacy matters: support@thedavestack.com
- Location: Spain
3. What Personal Data We Collect and Why
We collect different types of information for various purposes to provide and improve our service to you:
- a) Comments (via Disqus):
- This Blog uses the third-party commenting service Disqus. When you leave a comment, you provide information directly to Disqus, which may include your username, email address, IP address, and the content of your comment.
- The collection and processing of this data are governed by the Disqus Privacy Policy: https://help.disqus.com/en/articles/1717103-disqus-privacy-policy. We strongly recommend you read it. We do not store this comment data directly on our servers; it is managed through the Disqus platform.
- Purpose: To allow interaction and discussion on Blog posts.
- Legal Basis: Implicit consent by voluntarily using the Disqus commenting system, and the terms you agree to with Disqus.
- b) Email Subscriptions / Members (Ghost Members):
- If you choose to subscribe to our newsletter or register as a member of the Blog (using the Ghost Members feature), we will collect your email address.
- We use the Mailgun service for delivering emails related to subscriptions and memberships. Mailgun acts as a data processor on our behalf. You can view Mailgun's Privacy Policy here: https://www.mailgun.com/privacy-policy/
- Purpose: To send you new posts, newsletters, or other relevant Blog information, and manage your membership status.
- Legal Basis: Your explicit consent upon subscribing or registering.
- c) Browse Data and Cookies:
- Like most websites, our servers may automatically log standard information such as your IP address, browser type, pages visited on our Blog, time and date of visit.
- Purpose: To maintain the security of the Blog, diagnose technical problems, and understand in aggregate how the Blog is used.
- Legal Basis: Our legitimate interest in keeping the Blog secure and functional.
- We use essential cookies for the basic operation of the Blog (e.g., session management). We also use third-party cookies through services like Disqus and YouTube (see specific sections). Refer to Section 9 "Use of Cookies" for more details.
- d) Embedded Content from Other Websites (YouTube):
- Articles on this Blog may include embedded content (e.g., YouTube videos). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
- These websites (like YouTube/Google) may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.
- Please see Google's Privacy Policy (which covers YouTube): https://policies.google.com/privacy
- Purpose: To enrich the Blog's content with multimedia resources.
- Legal Basis: Our legitimate interest in providing varied and useful content.
4. Who We Share Your Data With
We do not sell or rent your personal data. However, we share information with third-party service providers who help us operate the Blog, under strict confidentiality terms and only for the purposes described:
- Disqus: For comment management. Data you provide when commenting is managed directly by them.
- Mailgun: For sending emails to subscribers and members.
- Google (YouTube): When you interact with embedded YouTube videos.
These providers may have their own privacy policies, which we recommend you review.
5. International Data Transfers
Some of the service providers we use (Disqus, Mailgun, Google) are based outside the European Economic Area (EEA), primarily in the United States. This means your personal data may be transferred internationally.
These transfers are conducted under legal mechanisms that ensure an adequate level of data protection, such as the Standard Contractual Clauses (SCCs) approved by the European Commission or the EU-US Data Privacy Framework if the provider is certified. We recommend consulting the privacy policies of these providers for detailed information on their data transfer practices.
6. How Long We Retain Your Data
- Comments (Disqus): Data is retained according to Disqus's policy and as long as the comment remains published. You may have options to manage or delete your comments directly within Disqus.
- Subscriptions/Members: We retain your email address as long as you maintain your active subscription or membership. You can unsubscribe at any time via the links provided in our emails or by managing your member account.
- Browse Data (Logs): Server logs are generally kept for a limited period (e.g., weeks or months) for security and technical analysis purposes, after which they are deleted or anonymized.
7. Security of Your Data
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.
8. Your Data Protection Rights (GDPR)
If you are a resident of the European Economic Area (EEA), you have the following data protection rights:
- Right of Access: To request information about the personal data we hold about you.
- Right to Rectification: To request correction of inaccurate or incomplete data.
- Right to Erasure ('Right to be Forgotten'): To request deletion of your data when it's no longer necessary for the purposes collected, you withdraw consent, etc.
- Right to Restriction of Processing: To request that we restrict the processing of your data under certain conditions.
- Right to Data Portability: To receive your data in a structured, commonly used, machine-readable format and transmit it to another controller (where technically feasible and based on consent or contract).
- Right to Object: To object to the processing of your data based on legitimate interest.
- Right to Withdraw Consent: Where processing is based on your consent (e.g., newsletter), you can withdraw it at any time.
- Right to Lodge a Complaint: If you believe your rights have not been adequately addressed, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. The relevant authority for our location is the Spanish Data Protection Agency (AEPD): https://www.aepd.es/.
To exercise these rights, please contact us at: support@thedavestack.com. We may ask you to verify your identity before responding to your request. Please note that for data managed directly by third parties like Disqus, you may need to exercise your rights directly with them.
9. Use of Cookies
Cookies are small text files stored on your device when you visit a website. We use cookies for:
- Essential Cookies: Necessary for the basic functioning of the Blog (e.g., keeping member sessions logged in, security). They do not require prior consent.
- Third-Party Cookies:
- Disqus: Uses cookies for the comment system's functionality and potentially for other purposes described in their privacy policy.
- YouTube (Google): When viewing embedded videos, YouTube sets cookies to play the video, remember preferences, and potentially for analytics and targeted advertising, according to Google's policy.
As we use third-party cookies that may not be strictly necessary, we require your consent to install them. You will likely see a cookie banner or notice on your first visit where you can accept or configure your preferences. You can manage your cookie preferences at any time (often via the banner options or your browser settings). Blocking certain cookies may impact the Blog's functionality (e.g., comments or videos might not work correctly).
10. Children's Privacy
Our Blog is not directed to individuals under the age of 16 (or the applicable minimum age according to local law). We do not knowingly collect personal information from children. If you are a parent or guardian and you are aware that your child has provided us with personal data without your consent, please contact us so we can take steps to remove that information.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date" at the top. You are advised to review this Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at: support@thedavestack.com.