Privacy Policy

Last updated: 6 May 2026

1. Who we are

This website, Competition Actually (accessible at https://www.competitionactually.com/), is an independent peer-reviewed blog on new trends in EU Competition Law and global antitrust.

The data controller responsible for the processing of your personal data is Pablo Solano Díaz.

If you have any questions or concerns regarding the processing of your personal data, you may contact us through the form here.

2. What personal data we collect and why

This blog has a minimal data footprint. We do not require users to register, create an account or subscribe. We do not display advertisements or use any advertising-related tracking technologies.

The only personal data we collect are those that you voluntarily provide when you leave a comment on a blog post, namely:

Data Purpose
Name or pseudonym To identify the author of the comment as displayed publicly on the blog
Email address To manage the comment, notify you of replies (if applicable) and contact you if necessary regarding your comment; your email is never published
Website URL (optional) To link to your website alongside your comment, if you choose to provide it
Content of the comment To publish your contribution to the discussion
IP address Collected automatically by the platform for anti-spam and security purposes

In addition, if we use an analytics tool, we may process aggregated and anonymised browsing data (pages visited, approximate geographic location, browser type, referring site) solely for the purpose of understanding readership trends. This data does not allow us to identify individual users.

3. Legal basis for processing

We process your personal data on the following legal grounds:

  • Consent (Article 6(1)(a) GDPR): by voluntarily submitting a comment, you consent to the processing of the data you provide for the purposes described above.
  • Legitimate interest (Article 6(1)(f) GDPR): we have a legitimate interest in moderating comments to maintain a high-quality, professional and respectful academic discussion, and in analysing aggregated traffic data to improve the blog.

4. Data recipients

We do not sell, rent or share your personal data with third parties for commercial or marketing purposes.

Your data may be accessible to the following service providers, acting as data processors on our behalf:

Provider Service Server location
[Confirmar datos de Prismalia] Website hosting [Confirmar que es España]
[Confirmar si hay] Web analytics (if applicable) [Confirmar]

These providers process data solely in accordance with our instructions and applicable data protection legislation. We may also disclose your data if required to do so by law or by a competent judicial or administrative authority.

5. International data transfers

Your personal data are stored and processed within the European Economic Area (EEA). No international transfers outside the EEA take place.

6. Data retention

Your personal data associated with a comment will be retained for as long as the comment remains published on the blog. If you request the deletion of your comment, we will erase the associated personal data without undue delay, unless retention is required by law.

Anonymised analytics data, which do not constitute personal data, may be retained indefinitely.

7. Your rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access (Art. 15) — to obtain confirmation of whether your data are being processed and to access them.
  • Right to rectification (Art. 16) — to request the correction of inaccurate data.
  • Right to erasure (Art. 17) — to request the deletion of your data when they are no longer necessary or when you withdraw consent.
  • Right to restriction of processing (Art. 18) — to request that processing be limited in certain circumstances.
  • Right to data portability (Art. 20) — to receive your data in a structured, commonly used and machine-readable format.
  • Right to object (Art. 21) — to object to processing based on legitimate interest.
  • Right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us through the form here with the subject line “Data Protection Request”, including proof of your identity.

You also have the right to lodge a complaint with a supervisory authority. If you are in Spain, the competent authority is the Agencia Española de Protección de Datos (AEPD) — www.aepd.es.

8. Security measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include the use of secure protocols (HTTPS/SSL), access controls and regular software updates.

9. Third-party links

This blog may contain links to third-party websites (academic journals, EU institutions, law firms, etc.). We are not responsible for the privacy practices or content of those external sites. We encourage you to read their respective privacy policies.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. Any significant changes will be communicated through a notice on the blog. The date of the latest revision is indicated at the top of this document.