Privacy Policy

1. Who is the controller

The controller of the personal data described in this policy is:

• Owner: WEBSITESYSEO S.L., tax ID (CIF) B27442433 (NIF-IVA: ESB27442433), Registered in the Companies Register of Lugo (Spain).
• Registered address: Calle Antonio Rosón 1, 27002 Lugo (Spain).
• Company email: info@websitesyseo.com · Telephone: 982 990 610.
• Masthead and service: GUAY.news, at the domain guay.news and in the GUAY.news mobile app for iOS and Android (together, «GUAY.news», «we», «us» or «the newspaper»).
• Data protection contact: info@guay.news. This is the preferred channel for any question or request about your data.
• Newspaper contact: info@guay.news. Editor-in-chief and person responsible for editorial content: Fredi Mosteirín.

Why we have no Data Protection Officer

Article 37 of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Article 34 of Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD) require a Data Protection Officer to be appointed where the core activities consist of regular and systematic monitoring of individuals on a large scale or large-scale processing of special categories of data. GUAY.news does neither: we do not profile readers, we do not measure our audience with cookies or individual identifiers, and we do not process special categories of data about our users. We have therefore not appointed a Data Protection Officer, but we have set up a dedicated privacy contact (info@guay.news) handled by team members who know this policy and the processing it describes.

2. Our principles

These commitments guide all our processing, in application of Article 5 GDPR:

• Data minimisation: we only ask for what we need for each purpose. You do not need to give us any data or create an account to read the newspaper.
• No profile-based advertising: we do not build reader profiles for commercial purposes, we do not sell or rent data, and we do not disclose it to third parties for their own marketing. The rules on advertising and sponsored content, if any, are set out in the Advertising Policy.
• Cookie-free measurement: we count visits in aggregate, with anonymised IP addresses and no cookies on the website; in the app, with anonymous statistics sent to our own server, without advertising identifiers (neither IDFA nor Android Advertising ID) and without cross-app tracking.
• Nothing non-essential before your consent: no cookie or third-party content that is not strictly necessary is loaded before you accept it, and rejecting is as easy as accepting.
• AI under human oversight: artificial intelligence helps us write and moderate, but no news story is published without human approval and any automatic block of a comment can be reviewed by a person.
• Your data does not train models: we do not use your data to train AI models, and we require the same from the providers that process user data on our behalf.
• Transparency and control: we explain each processing operation with its legal basis and retention period, and you can exercise your rights with a simple email or from your account.
• Security by design: encryption, access control, audit logs and backups, as detailed in section 12.

3. What data we process, why and on what legal basis

Each processing operation is described separately below. For each one we state what data we use, for what purpose, on which legal basis under Article 6 GDPR and for how long we keep it. Where the basis is legitimate interests (Article 6(1)(f) GDPR), we explain what that interest is and why, having balanced it, we consider that it is not overridden by your interests, rights and freedoms. In those cases you can always object (section 9).

3.1. Browsing, technical operation and security

Balancing test: this is technical data that any web server necessarily receives in order to work; it is not used to identify you or to analyse your behaviour, it is kept for a short time, only technical staff can access it, and the GDPR itself recognises network security as a legitimate interest. The impact on your privacy is minimal and the benefit (a secure service for everyone) is clear.

3.2. User accounts on the website and in the app

Creating an account is optional. It lets you comment without re-entering your details, save stories and preferences, manage the newsletter and notifications, and shop more conveniently. You can register on the website (WordPress and WooCommerce) or in the app, with an email address and password, with «Sign in with Apple» or with «Sign in with Google».

You can delete your account at any time from the app (My GUAY > Delete account), from your user area on the website or by writing to info@guay.news from the email address linked to the account. Deletion removes your profile, your preferences and your notification tokens; comments you have published will from then on be shown without your name and, if you also ask us to remove them, we will delete them. If you signed in with Apple or Google, you can also revoke GUAY.news’s access from your Apple or Google account settings. Sign in with Apple and Sign in with Google are also governed by the privacy policies of Apple Distribution International Ltd. and Google Ireland Limited, which act as independent controllers of their own authentication services.

3.3. Record of legal acceptances

When you register you must accept the Terms and Conditions and declare that you have read this Privacy Policy by ticking a box that is never pre-ticked. That declaration is not consent to the processing of your data: it serves to show that you have been informed. If we publish a new version of those documents with changes that require your acceptance, we will ask you for it the next time you log in.

Balancing test: we record only the data strictly necessary to evidence acceptance, we do not use it for any other purpose and it is stored separately with restricted access. Without this record we could not prove the contractual relationship, which also protects you.

3.4. Comments and their moderation

Registered users and people who provide a name and a verified email address can comment. To keep to the spirit of the newspaper, comments are moderated in accordance with the Community Guidelines: an AI system analyses the text of each comment and proposes to publish or block it (for example, for insults, political content, spam or gratuitous negativity), and our human team reviews cases manually.

Balancing test: commenting is voluntary and you know in advance that your comment will be moderated; the analysis is limited to the text you yourself submit for publication, it is not used to profile you or for any other purpose, the AI provider that processes it meets the safeguards described in section 7 and may not use the text to train models, and the IP address is anonymised after a short period.

There are no decisions based solely on automated processing (Article 22 GDPR). A comment not being published in a newspaper does not produce legal effects concerning you or similarly significantly affect you; even so, we have designed the system so that the AI does not have the last word: the AI proposes and the team reviews comments manually, and any block can be reviewed by a person at your request. To ask for this, use the link or option shown with the block notice or write to info@guay.news stating the story, the approximate date and the email address you commented with. We will reply with the outcome of the review and, if the block is upheld, the reason. Decisions to suspend a user’s ability to comment are always taken by a person.

3.5. Reactions to stories

Reactions («It makes me happy», «It inspires me», «It makes me smile», «I’m sharing it») are anonymous and require no registration. We only store the aggregate count of each reaction per story; we do not link the reaction to your account, your name or a profile. The IP address that technically accompanies the request is processed only as part of the security logs in section 3.1. Legal basis for the count: no personal data is processed; technical logs are governed by section 3.1.

3.6. «Las 7 de las 7» newsletter

Every email includes a one-click unsubscribe link. The newsletter contains no tracking pixels for individual opens or clicks: we do not know whether you open the email or which links you click. It is sent from our own mail server or through Servidor de correo propio de LucusHost (mail.guay.news), sin proveedores externos, acting as processor.

3.7. Push notifications in the app

Notifications are sent through Expo Push Service, operated by 650 Industries, Inc. (United States), which in turn uses Apple Push Notification service (Apple) and Firebase Cloud Messaging (Google). The content of notifications is the same for all users who choose the same sections; it is not personalised on the basis of your behaviour.

3.8. Cookie-free usage statistics (website and app)

Balancing test: measurement is carried out with our own tool, without cookies, with anonymised IP addresses, without individual profiles, without combining data with other sources and without disclosing the data to anyone. It is processing any reader of a digital medium would expect and has a very low impact. The app includes no advertising SDKs or third-party trackers and does not use the IDFA or the Android Advertising ID. You can object by writing to info@guay.news.

Only if you accept the «Statistics» category in the cookie panel does the shop also use the WooCommerce order attribution cookies sbjs_*, which record the channel you came from when you place an order. That use is based on your consent and is described in the Cookie Policy.

3.9. Shop: orders, payments, shipping and invoicing

Payments with Stripe. Payments (card, Apple Pay and Google Pay) are processed by Stripe (Stripe Payments Europe, Limited, Ireland, and its affiliates, including Stripe, Inc., United States). You enter your card details directly into Stripe’s secure form: GUAY.news never sees or stores your full card details. Stripe acts as our processor to process the payment on our behalf and also as an independent controller for fraud prevention, compliance with payment services, anti-money-laundering and sanctions law, and the improvement of its own services, under its privacy policy (stripe.com/privacy). For this purpose it may use, during payment, the __stripe_mid and __stripe_sid cookies, which are necessary to prevent fraud. If you pay with Apple Pay or Google Pay, Apple or Google also process your digital wallet data under their own terms.

Shipping. To deliver your order we share your name, delivery address and telephone number with the courier that carries it (Printful y sus transportistas asociados (impresión y envío bajo demanda)), within our shipping areas (mainland Spain and the Balearic Islands).

The shop is intended exclusively for people aged 18 or over. We do not use your purchase data to send you advertising. If in the future we wished to send customers offers of similar products (Article 21(2) LSSI-CE), we would give you the option to refuse at the time of purchase and in every message.

3.10. Forms and requests

GUAY.news offers several forms. Only the fields marked as required are mandatory; in all cases you may also write to us by email.

If you include in a form data we have not asked for, especially special categories of data (health, beliefs, etc.), we will process it only as strictly necessary to handle your request, and we ask you not to send it if it is not needed.

3.11. Cookie consent

You can change or withdraw your consent at any time using the «Cookie settings» link in the footer of every page. Full details are in the Cookie Policy.

3.12. Embedded YouTube videos

We embed YouTube videos in the videos section and in some stories. The players remain blocked and do not connect to YouTube until you accept the «Marketing / third parties» category in the cookie panel or click to load that specific video. At that point your browser connects to YouTube’s servers (Google Ireland Limited), which receive your IP address and browser data and may set their cookies (YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, PREF, __Secure-ROLLOUT_TOKEN) and use local storage (yt-remote-*). The legal basis is your consent (Article 6(1)(a) GDPR and Article 22(2) LSSI-CE), which you can withdraw from «Cookie settings». Google acts as an independent controller of the data it receives, under its privacy policy (policies.google.com/privacy); GUAY.news receives no data about you from YouTube.

3.13. GUAY.news social media profiles

We have profiles on X, Instagram, Facebook, TikTok, YouTube, Threads and Bluesky, and a WhatsApp channel. If you follow us, comment or message us there, we will process the data you make visible (username, profile picture, messages and comments) to reply to you, moderate our profiles and share our stories. The legal basis is our legitimate interest in being present on those platforms and interacting with our followers (Article 6(1)(f) GDPR); we do not extract that data outside the network unless necessary to handle a request from you.

Each social network is the controller of the data it processes under its own terms. As regards Facebook and Instagram pages, the Court of Justice of the European Union (Case C-210/16, Wirtschaftsakademie) held that the page administrator and Meta are joint controllers for the processing of page statistics («Page Insights»). Meta Platforms Ireland Limited has assumed primary responsibility for that processing and for handling data subjects’ rights under its «Page Insights Controller Addendum», available at facebook.com/legal/terms/page_controller_addendum. We only receive aggregate, anonymous statistics. You can exercise your rights with Meta or with us, and we will forward to Meta anything within its remit.

The GUAY.news share buttons are simple links: they do not load any social network code or send any data to the networks until you choose to click them and open the network concerned.

4. If you appear in a story: processing for journalistic purposes

4.1. What data and why

GUAY.news stories tell real stories about real people: someone who saved a life, a research team that achieved a breakthrough, a neighbour who set up a charity project. They may therefore include personal data of the people featured or quoted: name, age, town, occupation, public statements and the facts of the story. We obtain that information from media outlets and news sources already published and publicly accessible (see section 5), whose name and link we always show at the foot of the story.

The images accompanying stories are AI-generated illustrations with no identifiable real people, or photographs from free-licence image banks with attribution. We do not use the source outlet’s photographs or portray the people featured.

4.2. Legal basis

This processing is based on the fundamental right freely to communicate and receive truthful information (Article 20(1)(d) of the Spanish Constitution) and on the regime of Article 85 GDPR, which requires data protection to be reconciled with freedom of expression and information, including processing for journalistic purposes. In GDPR terms, it is based on the legitimate interest of the newspaper and the public interest of readers in receiving information (Article 6(1)(f) GDPR). Where a story includes special categories of data (for example, recovery from an illness), we only publish it if it has already been made public by the person concerned or by the media in the exercise of freedom of information, if it is relevant to the story and to the minimum extent necessary (Articles 9(2)(e) and 85 GDPR). Our editorial line excludes crime, violence, politics, gossip and sex life.

Given its journalistic nature, we cannot inform each person who appears in a story individually (Article 14(5)(b) GDPR); this policy is how we inform them publicly.

4.3. Your options if you appear in a story

• Right of reply (Spanish Organic Law 2/1984). If you consider that information referring to you is inaccurate and may harm you, you may send a reply to the editor-in-chief, Fredi Mosteirín, within seven calendar days of its publication, limited to the facts and of a length similar to the original information. Where appropriate, we will publish it within three days of receipt, with similar prominence. You can use the correction form or write to info@guay.news.
• Correction on the Internet (Article 85 LOPDGDD). Even after the above period, if the information is inaccurate you may ask us to correct it or to add a visible correction notice next to the story.
• Update (Article 86 LOPDGDD). If the story no longer reflects your current situation because of later circumstances and this harms you, you may ask us to add a visible update notice. In addition, if within 72 hours of publication a negative development or a denial of the story emerges, we unpublish it on our own initiative.
• Erasure and objection (Articles 17 and 21 GDPR). You may ask us to remove your data from a story or to take the story down. We will assess each case, balancing your right against freedom of information (Article 17(3)(a) GDPR), taking into account, among other factors, whether you are a public figure, the relevance of your data to the story, the time elapsed, whether the information is still accurate and whether its dissemination harms you. For good-news stories about people who are not public figures, when you ask us, we tend to anonymise the name or remove the story.
• De-indexing. As a less intrusive alternative, we can mark the story so that search engines do not index it, so that it does not appear in searches for your name, while keeping it in our archive. You can also contact search engines directly (right to be forgotten in search results, Article 93 LOPDGDD).

For all these requests you can use the form below or write to info@guay.news or info@guay.news. If the information comes from another outlet, we recommend that you also contact it, as the original story is that outlet’s responsibility.

5. How we use artificial intelligence

5.1. The AI-assisted editorial process

GUAY.news does not report the facts itself: it selects them from what other media have published and rewrites them from scratch. The process, in which personal data of people featured in the news may appear (never data about our users), works as follows:

1. Reading headlines. Every morning an automated system reads, via RSS, thousands of headlines and summaries from hundreds of media outlets around the world, as well as GDELT and Google News RSS. Our crawler identifies itself as GUAYnewsBot/1.0 (+https://guay.news/bot), respects robots.txt and text and data mining reservations, and limits its requests to one per second per domain. Raw headlines and summaries are kept for seven days.
2. Classification and selection. An AI model classifies the headlines according to how well they fit our editorial line, and 40 to 60 finalists are selected.
3. Original text, for verification only. The full text of the outlet’s article is downloaded only for the finalists; it is kept encrypted, solely for internal verification, is never published and is automatically purged after 30 days.
4. Fact extraction, writing and verification. One model extracts a list of facts; a different model writes the GUAY.news story in Spanish from those facts alone, without copying or translating the original; and a third, also different, model checks it against the facts and the original.
5. Human review. Doubtful stories go to a review queue and, in the current mode of operation, no story is published without the approval of a person on the editorial team, who takes editorial responsibility.
6. Transparency. Each story states its original source with a link and that it was written with the help of AI and reviewed, and illustrations are labelled as AI-generated. We do this even though Article 50(4) of Regulation (EU) 2024/1689 (the AI Act) exempts this obligation where there is human review and editorial responsibility.

The legal basis for processing any personal data contained in source stories is that described in section 4.2 (freedom of information, Article 85 GDPR and legitimate interest). More details on the process and its limits are in the AI Disclaimer.

5.2. Comment moderation

As explained in section 3.4, an AI model analyses the text of comments and proposes to publish or block them, with human review and the right to ask for a person to review any block.

5.3. What AI does not do

• It does not profile readers: we do not use AI to analyse your reading habits, infer your interests or personal characteristics or personalise advertising.
• It does not decide about you: no decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you are taken (Article 22 GDPR). Decisions about your account, your orders or your requests are taken by a person.
• It is not trained on your data: we do not use your data (account, comments, newsletter, purchases, requests) to train models, and we engage the providers that process it on condition that they cannot do so either.
• It does not receive your data if the provider offers no safeguards: see the rule in section 7.2.
• It does not create images of real people: illustrations do not depict identifiable real people.

6. Who we share data with

We do not sell your data or disclose it to third parties for their own commercial purposes. Only the following recipients have access to it, to the extent necessary:

6.1. Processors

Providers that process data on our behalf, following our instructions, under a contract complying with Article 28 GDPR that binds them to confidentiality, to apply security measures and not to use the data for their own purposes:

6.2. Recipients acting as independent controllers

• Stripe, for fraud prevention and compliance with payment regulations (section 3.9).
• Courier companies (Printful y sus transportistas asociados (impresión y envío bajo demanda)), with the data needed to deliver your order.
• Apple (Apple Distribution International Ltd.) and Google (Google Ireland Limited), as operators of the app stores, the sign-in services, Apple Pay and Google Pay, and the operating system notification services; and Google, additionally, as owner of YouTube when you choose to load a video.
• Social networks, in respect of the data they process on their platforms (with the joint controllership with Meta explained in section 3.13).
• Public authorities, courts and tribunals, law enforcement agencies and the Spanish Data Protection Agency, where there is a legal obligation or a valid order (for example, the Spanish Tax Agency in respect of invoices).
• Banks and financial institutions, as necessary for refunds and reconciliations.
• Lawyers, court representatives and auditors, bound by professional secrecy, where necessary to defend our rights.

If WEBSITESYSEO S.L. were in future involved in a corporate transaction (merger, sale of the masthead, etc.), data could be transferred to the acquirer under the terms of Article 21 LOPDGDD, with due notice.

7. International transfers

7.1. When they occur and with what safeguards

Some providers are established, or have sub-processors, outside the European Economic Area (EEA), mainly in the United States. We only transfer users’ personal data internationally where one of the following safeguards under Chapter V GDPR applies:

• Adequacy decision (Article 45 GDPR), such as the EU-US Data Privacy Framework (Commission Implementing Decision of 10 July 2023, upheld by the EU General Court on 3 September 2025 in Case T-553/23), where the recipient is certified under it.
• Standard contractual clauses approved by the European Commission (Implementing Decision (EU) 2021/914), with any supplementary measures required, where there is no adequacy decision or the recipient is not certified.

This applies, among others, to Stripe, 650 Industries (Expo), Apple and Google, and to the AI providers that process user data. If the servers of LucusHost (servidores de OVH) or Servidor de correo propio de LucusHost (mail.guay.news), sin proveedores externos were located outside the EEA, these safeguards would equally apply. You can request information about, or a copy of, the applicable safeguards by writing to info@guay.news.

7.2. The rule for AI providers

We commit to the following:

• Users’ personal data (for example, the text of comments being moderated) is only sent to providers established in the EU/EEA or offering the safeguards of Articles 45 or 46 GDPR (EU-US Data Privacy Framework or standard contractual clauses), under a processing agreement and with a prohibition on using the data to train models.
• Providers without those safeguards (for example, those established in China, such as DeepSeek, Moonshot or Alibaba Cloud when operating from there) only process public journalistic content from media outlets (headlines, summaries and texts already published) and never data from accounts, comments, the newsletter, notifications, the shop or requests.

The journalistic content processed by these providers may incidentally contain data about people who appear in stories already published and publicly accessible. That processing is carried out solely for journalistic purposes, within the framework of Article 85 GDPR, limited to what is strictly necessary to select and write the story, and full texts are kept in our systems encrypted and for only 30 days.

8. How long we keep data

We keep data only for as long as it is needed for the purpose for which it was collected. Afterwards, where the law so requires, we keep it blocked (Article 32 LOPDGDD): removed from ordinary use and available only to judges, courts, the Public Prosecutor or the competent authorities during the limitation periods. Once those periods have expired, we delete it or irreversibly anonymise it.

9. Your rights

In relation to your personal data you have the right to:

• Access (Article 15 GDPR): find out whether we process your data and obtain a copy and information about the processing.
• Rectification (Article 16 GDPR): correct inaccurate data or complete incomplete data. You can change much of it yourself from your account. (To correct a story, see section 4.3.)
• Erasure (Article 17 GDPR): ask us to delete your data when it is no longer needed, you withdraw consent, you successfully object or the processing is unlawful, unless we must keep it by law or to defend claims.
• Objection (Article 21 GDPR): object to processing based on legitimate interests on grounds relating to your particular situation. We will stop processing your data unless we demonstrate compelling legitimate grounds or need it to defend legal claims.
• Restriction (Article 18 GDPR): ask us to suspend processing while the accuracy of the data is checked or your objection is resolved, or to keep the data when you need it for a claim.
• Portability (Article 20 GDPR): receive the data you have provided to us, where processing is based on consent or a contract and carried out by automated means, in a structured, commonly used and machine-readable format, or ask us to transmit it to another controller where technically feasible.
• Not to be subject to automated individual decisions (Article 22 GDPR): we take no decisions based solely on automated processing with legal or similarly significant effects on you; in any case, you can ask for human intervention, express your point of view and contest the decision, as with the comment review in section 3.4.
• Withdraw your consent at any time (Article 7(3) GDPR), without affecting the lawfulness of prior processing: one-click newsletter unsubscribe, turning off notifications in settings and changing preferences in «Cookie settings».

In addition, under Article 3 LOPDGDD, persons linked to a deceased user for family or de facto reasons, or their heirs, may contact us to access their data and request its rectification or erasure, unless the deceased expressly prohibited this or the law so provides.

10. How to exercise your rights and where to complain

• By email to info@guay.news, preferably from the address linked to your account or subscription.
• By post to WEBSITESYSEO S.L., Calle Antonio Rosón 1, 27002 Lugo (Spain), marked «Data protection – GUAY.news».
• From your account, to change your details or preferences or delete the account, and from each newsletter to unsubscribe.

Please state which right you wish to exercise and, if possible, which service it relates to (account, newsletter, comments, shop, a specific story, etc.).

Identity verification. We will only ask for what is necessary to check that it is you. Usually it is enough for you to write from the email address linked to your account or to confirm the request via a link we send you. Only where there are reasonable doubts will we ask for additional information, and never more than necessary. If you are acting on behalf of someone else, you must prove your authority to do so.

Time limit and cost. We will reply within one month of receiving your request. That period may be extended by a further two months where necessary, taking into account the complexity and number of requests; in that case we will inform you within the first month, explaining the reasons (Article 12(3) GDPR). Exercising your rights is free of charge, except for requests that are manifestly unfounded or excessive, in particular because of their repetitive character (Article 12(5) GDPR).

Complaint to the supervisory authority. If you believe that we have not properly handled your rights or that we process your data in breach of the law, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, e-office sedeagpd.gob.es) or with the supervisory authority of your country of residence in the EU. We would be grateful if you wrote to info@guay.news first so that we can try to resolve it, although this is not compulsory.

11. Children

Reading GUAY.news requires no data. To create an account, comment, subscribe to the newsletter or turn on notifications in your own name, you must be at least 14 years old, the age from which Article 7 LOPDGDD allows people to consent to the processing of their own data. If you are under 14, your mother, father or guardian must do it for you. If we detect or are informed that an account belongs to a child under 14 without that consent, we will close it and delete their data.

The shop is reserved for people aged 18 or over, because entering into sales contracts requires full legal capacity.

If you are a parent or guardian and believe that a child has given us data, write to us at info@guay.news.

12. Data security

We apply technical and organisational measures appropriate to the risk (Article 32 GDPR), including:

• Encryption in transit: the entire website, the app API and the forms operate exclusively over HTTPS.
• Encryption at rest of access keys to external services (APIs) and of the original media texts stored for verification.
• Passwords stored only as a salted cryptographic hash; no one at GUAY.news can see them.
• Two-factor authentication (2FA) mandatory for administrator accounts.
• Least privilege: each team member and each process only accesses the data strictly necessary for its function, under a duty of confidentiality.
• Audit logs of relevant administrative and editorial actions (publications, moderation, configuration changes, access).
• Daily backups, so that data can be restored after an incident.
• Pseudonymisation and anonymisation wherever possible (statistics and comment IP addresses, cookie consent IP addresses).
• Regular updates of software and plugins, and review of providers before engaging them.

No system is infallible. If a security breach affecting personal data occurred, we would notify the Spanish Data Protection Agency within 72 hours where required and inform you without undue delay if it is likely to result in a high risk to your rights (Articles 33 and 34 GDPR). To protect your account, use a unique password and do not share it.

13. Data about other people that you provide

If you give us data about someone else (for example, the delivery address for a gift, the details of someone you represent or of a person featured in a story you suggest to us), you confirm that you have informed them of this policy and that you may provide their data for that purpose. We will only use it to handle your request. In the case of a gift, we will use the recipient’s data only to deliver the order.

Do not post other people’s personal data in comments (telephone numbers, addresses, email addresses, health data, etc.); we will remove it during moderation.

14. What happens if you do not give us your data

We mark the required data in each form. If you do not provide it, we will not be able to provide that specific service (create the account, publish the comment, send the newsletter, process the order or request), but you can still read the newspaper without limitation. All other data is optional. You are responsible for ensuring that the data you give us is truthful and up to date.

15. Changes to this policy

This policy is versioned: the version and effective date appear at the top, and we keep previous versions, which you can request from us. We may amend it to reflect legal, technical or service changes. If the changes are material (for example, new purposes, new types of data or new recipients), we will give you reasonable advance notice through a prominent notice on the website and in the app and, if you have an account or subscription, by email. Where a change requires your consent or a new declaration that you have been informed, we will ask you for it when you log in, and the cookie panel will be shown again when the Cookie Policy changes. We will never use your data for a new incompatible purpose without informing you first and, where necessary, without your consent.

16. Related documents

• Cookie Policy, with the cookie inventory and the button to change your choice.
• Terms and Conditions.
• AI Disclaimer.
• App Privacy Policy, with the specific details for iOS and Android and the app store privacy labels.
• Community Guidelines.
• Terms of Sale.
• Advertising Policy.
• Legal Notice.

For any question about this policy, write to us at info@guay.news.

This English version is provided for convenience. In the event of any discrepancy between the Spanish and English versions, the Spanish version shall prevail, unless mandatory consumer protection law provides otherwise.