PRIVACY / LEGAL / EXPERIMENTS
Your data.
Your rights.
Privacy, responsible use and the limits of an experimental website. Information only; verify before relying on any result.
26 · 10 · 2026 · Contact / exercise your rights
1. Controller and contact
Raúl Moreno Izquierdo is the controller for this website’s own processing. Use the contact form, with “Privacy” or “Data rights” and a reply address. Do not include passwords or sensitive documents in your initial message.
2. Contact form
Your name, email and message are used to answer your enquiry and retain the context needed for the reply. The basis is the legitimate interest in answering communications or, where applicable, pre-contractual steps you request. Sending an enquiry does not subscribe you to advertising. Required fields are identified in the form.
3. Accounts, Coffee Lab and simulations
Coffee Lab stores a username, a password hash, spins and prize codes to manage participation and prevent misuse. The version described on this site requires no email and provides no email password recovery. The financial assistant may store forecasts, simulations and paper portfolios linked to an account; personal simulations require authentication. Delivering the requested service and preventing fraud are separate purposes, based respectively on the applicable service relationship and legitimate security interests. Any additional purpose must be disclosed in the relevant feature.
4. Logs, statistics and geolocation
The server records technical requests, potentially including IP address, time, URL, response status, browser and referrer when transmitted. These support operation, troubleshooting and protection against abuse. Internal traffic analysis may distinguish likely human and automated traffic and estimate country or city from an IP database. These are estimates: VPNs, proxies and shared networks affect results. They do not identify a person or provide GPS location. IP addresses and pseudonymous identifiers may remain personal data. Security may rely on legitimate interests after balancing those interests; visiting this site does not authorise non-essential tracking that requires consent.
5. Cookies and external content
The site uses session and CSRF protection mechanisms for functions such as language preferences, authentication and repeated-submission limits. Necessity depends on the function used. Non-essential analytics, advertising or tracking technologies require the applicable legal basis and, where required, consent. This policy does not replace a consent panel. You can inspect and delete browser cookies; blocking necessary cookies may prevent login or form submission. External links and third-party content also have their own policies; opening them may disclose technical data to those services.
6. Recipients and transfers
Technical operation may involve hosting, maintenance, communications and external feature providers. Processors must be subject to the required safeguards and agreements. Data may also be disclosed to meet legal obligations. External links, quotes and content must be assessed according to the actual provider and data transmitted. Transfers outside the European Economic Area require a valid mechanism, such as an adequacy decision or standard contractual clauses with any necessary supplementary measures. Providers are not presumed to be located in the ORGANIZATION-004.
7. Retention and security
Retention criteria depend on purpose: resolving enquiries; maintaining accounts and participation while necessary; keeping logs for a proportionate operational and incident-investigation period; and retaining restricted records required for legal duties or outstanding claims. These duties can limit erasure. Backups have their own replacement cycle and should not reintroduce erased data into ordinary use. Security requires access controls, updates and review; no measure eliminates all risk. Report suspected incidents through the website contact form.
8. Your rights
You may request access, rectification, erasure, restriction, objection and portability where applicable. You may withdraw consent without affecting earlier lawful processing. Identify the relevant account or enquiry; additional identity information should only be requested when necessary and proportionate. Requests are normally answered within one month, subject to justified GDPR extensions. You may complain to the Spanish Data Protection Agency (www.aepd.es) or the competent authority. This notice does not restrict your rights.
9. Children, sensitive data and AI experiments
Do not submit health information, biometric data, identity documents or private information about others unless a feature expressly requests it with appropriate safeguards. Check age and authorisation requirements for each activity. Calling something an experiment does not exempt it from the GDPR or authorise new purposes without a legal basis. AI demos can produce errors and bias; features involving additional processing, training or decisions affecting people must explain this before collection and provide the applicable safeguards.
10. Disclaimer
This website is for information only and forms part of Raúl Moreno Izquierdo’s experiments. It includes educational content, prototypes, simulations and demonstrations that may be incomplete, inaccurate, outdated or changed without notice. They are not personalised legal, financial, medical or other professional advice. Check official sources and qualified professionals before making important decisions. Forecasts, scores, simulated prizes and AI outputs do not guarantee real outcomes. External links do not imply control or endorsement of all their content. Continuous availability is not guaranteed. These warnings do not exclude liability that cannot lawfully be limited or remove data protection, consumer or third-party rights.
11. Applicable law and Madrid courts
Spanish law applies, without prejudice to applicable mandatory rules. Disputes arising from use of this website are submitted to the courts of Madrid only where such submission is legally valid. Mandatory jurisdiction rules remain unaffected, particularly those protecting consumers and data subjects. This clause does not prevent complaints to competent authorities or require waiver of non-waivable rights.
12. Updates and official sources
This version was prepared on 26 October 2026. Changes to purposes or features require updated information and fresh consent where applicable. Consult the GDPR, Spanish Organic Law 3/2018, the LSSI and guidance from the AEPD for the applicable framework.