PennyNex logo

Privacy Policy

Last Updated: 23 April 2026

This Privacy Policy describes how pennynex.com (the “Site”) processes personal data. The Site is operated as a personal blog by Sergio Ligero, an individual resident in Spain. By using the Site, you acknowledge the practices described below. If you do not agree, please do not use the Site.

1. Data controller

The data controller responsible for processing your personal data is:

For all questions about this policy or requests concerning your personal data, use the email above.

2. What we collect and why

2.1 Data you provide directly

  • Newsletter subscriptions. If you subscribe to the newsletter we collect your email address (and optionally your first name) with your consent, to send you articles and site updates.
  • Contact form / email. If you contact us via the contact form or by email we receive your name, email address, and the content of your message, so we can reply.

Legal basis: your consent (Art. 6(1)(a) GDPR) and, once we are in contact, performance of a pre-contractual request (Art. 6(1)(b)).

2.2 Data collected automatically

When you visit the Site, standard technical data is collected so that the Site works and so we can understand how it’s used:

  • IP address (truncated where possible)
  • Browser type and version, operating system, device type, screen size
  • Referring URL
  • Pages visited and time spent
  • Timestamp of your visit

Legal basis: legitimate interest in keeping the Site available and measuring audience (Art. 6(1)(f) GDPR), and — where cookies require it — your consent (ePrivacy).

3. Cookies

The Site uses three kinds of cookies:

  • Essential cookies — required for basic functionality, e.g. to remember your cookie-consent choices. Always active.
  • Analytics cookies — set by Google Analytics 4 (see §4) to measure audience in aggregate. Only set if you accept analytics cookies in the banner.
  • Advertising cookies — set by Google AdSense and its partners (see §5) to serve ads. Only set if you accept advertising cookies.

You can change or withdraw your consent at any time from the cookie banner (link in the footer). Most browsers also let you block or delete cookies in their settings.

4. Google Analytics

The Site uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (and Google LLC in the US). GA collects anonymised data about how you use the Site. IP addresses are anonymised where the feature is available. Data may be transferred to Google servers in the EU or the US; Google relies on Standard Contractual Clauses for transfers outside the EEA.

5. Google AdSense and advertising

The Site displays ads served by Google AdSense (Google Ireland Limited / Google LLC). Google and its partners use cookies to serve ads based on your previous visits to this Site and other sites. This is commonly called interest-based advertising. Google may collect device identifiers, browsing activity, and approximate location to personalise ads.

You can control or opt out of personalised advertising:

More on how Google uses partner-site data: Google partner sites policy.

6. Newsletter

If you subscribe to the newsletter we store your email address (and optionally your first name) to send you content. We use a third-party email provider to manage the mailing list and to deliver emails; your email address is stored on their servers. We do not sell, rent, or trade your email address.

You can unsubscribe at any time using the link at the bottom of any newsletter email, or by writing to sergioligero@gmail.com.

Some articles include affiliate links — if you click one and sign up or purchase, we may receive a commission at no extra cost to you. Affiliate relationships are disclosed on the pages where they apply. Affiliate programmes may set their own tracking cookies; consult the partner’s privacy policy for details.

8. International data transfers

Google (Analytics and AdSense) may transfer data to servers outside the EEA, including the United States. Google relies on Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable. You can review Google’s transfer mechanisms in its privacy policy.

9. Data retention

  • Newsletter data: for as long as you remain subscribed, plus reasonable backups, then deleted on unsubscribe.
  • Contact messages: up to 12 months after the last exchange.
  • Analytics data: retained for the default GA4 retention period (14 months).

10. Your GDPR rights

As a data subject in the EEA (or UK) you have the right to:

  • Access — ask what personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your data, subject to legal exceptions.
  • Restriction — ask us to restrict processing.
  • Objection — object to processing based on legitimate interest or direct marketing.
  • Portability — receive your data in a portable, structured format.
  • Withdraw consent — for anything relying on consent, at any time.

To exercise any right, email sergioligero@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with your local supervisory authority.

11. Children

The Site is not directed at children under 13. We don’t knowingly collect personal data from children under 13. If you believe we have, contact us and we will delete it.

The Site links to third-party websites, products, or services. We are not responsible for their privacy practices. Review their privacy policies before providing any personal data.

13. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, or destruction. No method of transmission or storage is 100% secure and we cannot guarantee absolute security.

14. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, the tools we use, or the law. When we do, the “Last Updated” date at the top of this page is changed. Substantive changes may be announced in the cookie banner or the newsletter.

15. Contact

For any question about this policy or your data: