Privacy policy

This explains what personal data we process on this website, why, for how long, and what you can do about it, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 (LOPDGDD).

This policy covers dr.juanmoradelgado.com. The training campus (campus.juanmoradelgado.com) also processes account, payment and progress data, and has its own policy.

Data controller

• Company: PAPERORNOT, S.L.U. (trading as «PaperORnot»)
• Spanish VAT number: B93830719
• Registered office: Calle Oropéndola 9, 3.º D, 11500 El Puerto de Santa María (Cádiz), Spain
• Email: hola@juanmoradelgado.com
• Website: dr.juanmoradelgado.com

We are not required to appoint a data protection officer: we do not process data on a large scale or special categories of data. For any privacy matter, write to the address above.

What we process and why

1. The starter kit form

• Data: your name (optional) and your email address.
• Purpose: to send you access to the repository and, afterwards, communications about artificial intelligence applied to healthcare: new resources, content and, occasionally, information about my courses and services.
• Where it is processed: the form is submitted to a server of ours (campus.juanmoradelgado.com), where the date of your sign-up and the exact wording you accepted are recorded, and from there the address is added to Brevo. No third party sits in between.
• Legal basis: your consent (art. 6.1.a GDPR), given by ticking the box on the form. You may withdraw it at any time from the unsubscribe link in every email or by writing to us, without affecting the lawfulness of processing before withdrawal.
• If you do not provide it: we cannot send you access. That is the only consequence.

2. When you write to us

• Data: whatever you include in your message: name, email address, company or institution and what you tell us.
• Purpose: to reply and, where appropriate, prepare a proposal.
• Legal basis: steps taken at your request prior to entering into a contract (art. 6.1.b GDPR) and our legitimate interest in answering the enquiries we receive (art. 6.1.f).

3. Server logs

• Data: IP address, date and time, page requested, browser type.
• Purpose: keeping the site working and protected against abuse and attacks.
• Legal basis: legitimate interest in network and information security (art. 6.1.f GDPR, recital 49).

All the data comes from you. We do not buy databases, we do not build profiles and we do not take automated decisions with legal effects on you.

Who else sees your data

We do not sell or share personal data. It is only processed by providers acting as processors, under contracts compliant with article 28 GDPR:

• Brevo (Sendinblue SAS, a French company): mailing list management and email delivery. The data is hosted in the European Union.
• Scalingo (Scalingo SAS, a French company): website hosting. The servers are in France, within the European Union.

In addition, public authorities and courts may access your data where a legal rule requires it.

International transfers

We do not transfer data outside the European Economic Area. This site loads no third-party resources: the typefaces are served from our own server precisely so that your IP address does not reach anyone else when you visit.

How long we keep it

• Mailing list: until you withdraw consent. If you unsubscribe, we keep your address on a suppression list for the sole purpose of never writing to you again by mistake.
• Email enquiries: as long as needed to deal with them and then for the limitation periods of any possible claims.
• Server logs: short rotation periods, normally no more than 12 months.

Security

We apply technical and organisational measures appropriate to the risk: the site is served encrypted (HTTPS), access to the email tool is limited to the people who need it and protected with two-step verification, and we store no personal data on this site beyond what is described here.

Minors

This site is aimed at healthcare professionals and students and at companies, aged 18 and over. We do not knowingly collect data from minors. If you notice that a minor has given us data, write to us and we will delete it.

No patient data

Neither this site nor the materials we deliver are intended for processing patient data. Do not send us medical records, images or any other information that could identify someone under care: if it reaches us, we will delete it.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to hola@juanmoradelgado.com stating which right you are exercising. We will reply within one month. To stop the emails you do not even need that: there is a link at the foot of every message.

If you believe we have not handled your request properly, you may complain to the Spanish Data Protection Agency, C/ Jorge Juan 6, 28001 Madrid (aepd.es), or to the supervisory authority of your own country.

Cookies

This site uses no cookies. We explain it in detail in the cookie policy.

Changes to this policy

If it changes substantially, we will publish the new version here with its date and, where the change affects the purpose of the emails, we will tell you by email before applying it.

Last updated: 1 September 2026.