Privacy policy
11 October 2026 / 11 de octubre de 2026
Controller
Data controller: Eduardo San Millán Gómez, operating ED LOST LEGIONS. Contact address: Avenida de Filipinas 1B, 3.º D, 28003 Madrid, España. Privacy requests: contact@edlostlegions.com.
What information is collected
If you contact us, we process your email address, message and any details you provide. The III Legion recruitment form asks for name, age, place of origin, occupation/Instagram details where applicable, email address, reasons for joining and the name to display publicly. Some fields may be optional. We also process your choices concerning publication on the legion roll and optional email updates.
Why we use this information and legal bases
We process contact enquiries to reply to the request (legitimate interest or pre-contractual measures, as applicable); registration information to handle voluntary legion recruitment (consent and the requested relationship, as applicable); a chosen public legion name only if the applicant separately consents; and occasional news about ED LOST LEGIONS or new books only if the applicant separately opts in. Consent may be withdrawn at any time by writing to contact@edlostlegions.com. Withdrawal does not affect processing already lawfully carried out.
Publication and access
A chosen public name and legion-related details may appear on the public roll if you authorise it. Do not include sensitive or other people’s personal data in free-text fields.
Service providers
The site uses Cloudflare Pages for hosting, a Cloudflare Worker/database service for the legion recruitment form, and Cloudflare Email Routing forwarding messages to Gmail. Their processing arrangements and any international transfers must be verified against the accounts and live deployment prior to release.
Retention
We keep contact requests for the time reasonably necessary to handle them and any related legal obligations. Recruitment data are held while the participant remains registered, subject to regular review and deletion when they withdraw or the activity ends, except where retention is legally required. Marketing contact details are retained until consent is withdrawn or the mailing activity ends. Specific operational deletion procedures must be verified against the recruitment database.
Your rights
You can ask to access, rectify, erase, restrict or object to the processing of your personal data, request portability where applicable, and withdraw consent without affecting earlier lawful processing. Contact contact@edlostlegions.com. You can also complain to the Spanish Data Protection Agency (AEPD): aepd.es.
Analytics and cookies
The supplied website files do not load Google Analytics 4. No non-essential analytics have been enabled as part of this website package. If analytics are added later, this policy and the cookie policy must be updated, and prior consent must be implemented when required.