Privacy & Aviso Legal
Last updated: 2026. This page covers both the GDPR privacy notice and the Spanish LSSI-CE legal notice (aviso legal).
Draft — pending review by a Spanish-qualified solicitor before launch.
Who runs this site
This website is operated by Andy Brooke, a self-employed professional (autónomo) registered in Spain. Andy's personal name is the legal entity that owns and operates the site.
- Name: Andy Brooke
- NIE: X9335313G
- Professional address: Valencia region, Spain. A registered professional address will be published here within 30 days of Andy's studio relocation. Until then, correspondence should be sent by email.
- Email: andy@andy-brooke.com
- Website: andy-brooke.com
What data this site collects
This site is deliberately low-data. In normal operation it collects only what is needed to serve pages, book appointments, and answer emails.
Automatically collected
- Server logs from the hosting provider (IP address, timestamp, URL requested, user agent). Retained for up to 30 days for security and diagnostic purposes.
- Privacy-friendly analytics (Plausible, if configured): aggregated page views and referrers. No cookies. No personal identifiers. Data stored in the EU.
Collected when you contact me or book a fit
- Email correspondence you send to andy@andy-brooke.com: the contents of your email and any attachments.
- Booking data submitted through the AIDOS booking widget on the Bike fitting page: name, contact details, and the information you provide to prepare for your fit. AIDOS is the data processor for this flow and stores booking data on its own systems. See the AIDOS privacy policy at aidos.fit for details.
Why this data is processed
- To provide the service you asked for (answering enquiries, scheduling fits, delivering consultations) — legal basis: contract or pre-contractual measures (GDPR Art. 6(1)(b)).
- To run the site securely (server logs) — legal basis: legitimate interest (GDPR Art. 6(1)(f)).
- To understand how the site is used (privacy-friendly analytics) — legal basis: legitimate interest (GDPR Art. 6(1)(f)); no cookies are used.
- To comply with legal and tax obligations (retaining invoices, responding to lawful requests) — legal basis: legal obligation (GDPR Art. 6(1)(c)).
Who the data is shared with
The third-party processors involved in running this site are:
- Hosting provider — serves the site and keeps short-term server logs.
- AIDOS (aidos.fit) — booking widget and fit-record platform, operated by the same legal entity (Andy Brooke). Booking data you submit through the widget is processed by AIDOS.
- Plausible Analytics (if enabled) — cookieless, EU-hosted web analytics.
- Email provider — handles the andy@andy-brooke.com mailbox.
No data is sold, rented, or shared with advertising networks.
International transfers
The site preferentially uses EU-resident providers. Where a provider is based outside the EU, it operates under the European Commission's Standard Contractual Clauses or an equivalent safeguard.
How long data is kept
- Server logs: up to 30 days.
- Email correspondence: as long as reasonably necessary to continue the conversation or comply with a legal obligation.
- Booking records: as required by Spanish tax law (typically 6 years) or as set out in the AIDOS privacy policy.
Your rights under GDPR
If you are in the EU/EEA you have the right to:
- Access the data held about you.
- Correct inaccurate or incomplete data.
- Ask for data to be erased where legally possible.
- Restrict or object to certain processing.
- Request portability of data you have provided.
- Lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos) if you believe your rights have been breached.
To exercise any of these rights, email andy@andy-brooke.com. You'll receive a reply within 30 days.
Cookies
This site does not set any cookies for analytics, advertising, or tracking. If the embedded AIDOS booking widget or any future tool introduces cookies, that use will be disclosed here and, where required, consent will be requested before the cookies are set.
Aviso legal (Spanish LSSI-CE)
Under Spain's Ley 34/2002, de 11 de julio, de Servicios de la Sociedad de la Información y de Comercio Electrónico (LSSI-CE), the following information is published:
- Titular: Andy Brooke, autónomo.
- NIE: X9335313G.
- Domicilio profesional: Valencia region, Spain. Full registered address to be published within 30 days of studio relocation.
- Contacto: andy@andy-brooke.com.
- Actividad: applied cycling biomechanics — bike fitting, consulting, mentoring, and writing.
Changes to this policy
If this policy changes materially (for example, a new processor is added, or the newsletter launches), the update is summarised at the top of the page and the "last updated" date is revised.