Privacy Policy

Last updated: 3 September 2026

This policy explains how Small Desk Setup (small desk setups for apartments & renters) processes personal data when you visit this website. It is written in plain English for readers in Spain and the rest of the EU, in line with the GDPR, Spain’s LOPDGDD, AEPD cookie guidance, and the information duties of Law 34/2002 (LSSI-CE). See also ourLegal Notice.

Who we are

Small Desk Setup publishes original educational content about small desk setups for apartments & renters. The controller of personal data processed through this site is the service provider identified at the end of this page. This site does not publish an operator email inbox. You can write through the contact form.

What we process

• Hosting and delivery. The site is served via Cloudflare. Like any web host, Cloudflare may process technical data (such as IP address, user agent, timestamps and the pages requested) in order to deliver the site, keep it secure and absorb abuse. That is part of providing the service, not advertising.
• Your cookie choice. We store a small consent record in your browser (local storage) so we remember Accept, Reject or the categories you configured. That record is strictly necessary.
• Contact form. If you write to us, we process the name (optional), email and message so we can read and, if needed, reply. The message is sent by email to the operator through Cloudflare Email Routing. We do not create a user account from it.
• Newsletter (optional). If you ask for measurement notes, we process your email through Brevo (free plan) with EU double opt-in. We do not sell the list. You stay pending until you confirm the email.
• Analytics (only with consent). If you opt in to analytics and a Cloudflare Web Analytics beacon token is configured, a privacy-oriented page-view beacon may load. It stays off until you opt in.
• Advertising (when allowed). In the EEA, UK, Switzerland, and the rest of the EU, AdSense loads only after you opt in. For a United States request, ads may load unless you opt out in Cookie settings. Google may then process data as described below.

We do not run user accounts or comment systems, and we do not sell your personal data.

Cookies and similar technologies

Under Spanish and EU rules, cookies and similar technologies that are not strictly necessary require your prior consent. For those visitors the banner offers Accept, Reject and Configure with equal prominence. Optional categories start off. Rejecting is as easy as accepting. We do not use pre-ticked optional boxes or a cookie wall. United States visitors are not shown that three-button wall; they can still opt out in Cookie settings. The country comes from Cloudflare’s request data — we do not invent it or send a substitute country to Google. Full category detail is in theCookie Policy. In short:

• Strictly necessary — always on (your consent record).
• Analytics — optional, off by default. Cloudflare Web Analytics loads only if you opt in and a beacon token is set.
• Advertising — optional. In the EEA it stays off until you opt in. For a US request it may run unless you opt out.

Advertising (Google AdSense)

This site may show Google AdSense ads. The AdSense script (adsbygoogle.js, publisher ID ca-pub-3921211045095240) isnot a static head script. It is injected only when advertising is allowed for your visit (EEA opt-in, or a US request that you have not opted out of). Until then, this site does not request that Google script. We do not geo-cloak those requests.

If you opt in, Google LLC (and related Google companies) may set advertising cookies or similar identifiers, measure ads, and serve personalised or non-personalised ads according to your Google account and their own policies. That processing happens on Google’s systems. SeeGoogle’s Privacy Policy,how Google uses cookies for ads, and how Google uses data from sites that use its services.

If you later withdraw advertising consent, we remove our AdSense loader, ignore furtheradsbygoogle pushes, and strip ad slots we can reach on this page. On a static site we cannot fully unload JavaScript that has already run, and we cannot always delete cookies Google stored on its own domains. A later page load will not request AdSense again unless advertising consent is still on. You can also useGoogle Ads Settings and your browser controls.

Analytics

Analytics stay off unless you turn them on. When a Cloudflare Web Analytics token is present and you opt in, the beacon measures aggregate traffic. It is not an advertising tag. Hosting logs from Cloudflare are not an optional analytics cookie.

Fonts

Typefaces are self-hosted with the site (DM Sans, Inter, and IBM Plex Mono). This site does not call fonts.googleapis.com or fonts.gstatic.comfor page text.

Legal bases (GDPR)

• Hosting / security / strictly necessary storage: providing the website and, where relevant, legitimate interests in keeping the site available and secure.
• Contact form: your request (and, where applicable, legitimate interest in answering). We keep the message long enough to reply, then follow ordinary mailbox practice.
• Newsletter: your consent (GDPR Article 6(1)(a)), given by the form and confirmed by double opt-in. Withdraw by using the unsubscribe link in any list email.
• Advertising (AdSense) and optional analytics: your consent (GDPR Article 6(1)(a)), which you can withdraw at any time without affecting the lawfulness of processing before withdrawal.

Your rights

If GDPR applies to you, you may request access, correction, erasure, restriction, objection, or portability of personal data we hold, and you may withdraw consent where we rely on it. Use the contact form for those requests. For advertising or analytics: change or withdraw consent in Cookie settings. You also have the right to complain to the Agencia Española de Protección de Datos (AEPD) ataepd.es, or to your local EU supervisory authority. For data Google processes as an independent controller through AdSense, use Google’s own tools and privacy contacts as well.

Retention

The consent record stays in your browser until you change it or clear this site’s data. Contact messages stay in the operator mailbox as long as needed to reply. Newsletter contacts stay until you unsubscribe or we delete the list. Hosting logs follow our host’s retention practices.

International transfers

Cloudflare and, if you opt in to advertising, Google may process data in the United States and other countries. Brevo (if you join the list) may also process email in line with its own GDPR terms. Those providers are responsible for the safeguards they apply (for example standard contractual clauses). We do not operate our own servers outside the EU for this site.

Changes

If our practices change, we will update this page. Material changes to optional cookies will also be reflected in the Cookie Policy and the consent banner.

Datos del prestador / Service provider. Mark Pearse · NIF Y5130003M · Domiciliación fiscal a petición. Contact: contact form.