Privacy policy

Last updated: 25 September 2026

Controller

Mikel R. Nieto · NIF: ES34090370T · Basque Country, Spain ·info@petitbardo.xyz

What data we process, why, and on what legal basis

Visitors. You can browse the whole anarchive without an account. We do not use analytics or advertising. The server and the security plugins record technical data (IP address, browser, pages requested, failed login attempts) to protect the website and keep it working. Legal basis: our legitimate interest in the security of the website (art. 6.1.f GDPR).

Researchers. Access to the materials is by invitation. For each invited researcher we keep their name, email address and affiliation, their password (stored only as a hash), the works in their list, and the requests they send with their message. We use this data only to manage access to the anarchive and to answer requests. Each request is emailed to the project and a copy to the researcher. Legal basis: the relationship you ask us to start (art. 6.1.b GDPR). Name, email and affiliation are needed to create an account; without them we cannot give you access.

Email. If you write to us, we use your email only to reply. Legal basis: your consent when you write (art. 6.1.a GDPR).

Embedded players and fonts. Records embed players from Bandcamp, YouTube, SoundCloud, Vimeo, Mixcloud and the Internet Archive. When they load, your browser connects to those providers, which receive your IP address. Legal basis: our legitimate interest in showing and letting you listen to the documented works (art. 6.1.f GDPR). YouTube videos load in privacy-enhanced mode (youtube-nocookie.com). Fonts are served from our own server.

We make no automated decisions or profiles about you.

How long we keep it

Researcher accounts: while the account is active; deleted when you ask us to. Requests: 5 years, as a record of the anarchive’s use; once an account is deleted, its requests are no longer linked to that person. Security logs: 30 days. Emails: as long as needed to answer them.

Who receives it

We do not sell or share your data. Service providers that process it on our behalf: web hosting (IONOS), email delivery (Google, through Gmail) and backups (Google Drive, through UpdraftPlus).

International transfers

Some providers (Google, including Gmail, Google Drive and YouTube; Bandcamp; SoundCloud; Vimeo; Mixcloud; the Internet Archive) may process data in the United States or other countries outside the European Economic Area. Where applicable, transfers rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.

Your rights

You can ask to access, correct or delete your data, object to or restrict its processing, and ask for its portability, by writing to info@petitbardo.xyz. You can withdraw your consent at any time. You can also complain to the Spanish Data Protection Agency (aepd.es).

See also the cookie policy and the legal notice.