# Privacy policy

> What data The Demand Charge collects, why, on what legal basis, who it is shared with and how to exercise your rights under the GDPR.

This site has no accounts, no newsletter and no comment system. What is left is analytics and, once it is switched on, advertising.
## Who is responsible

Nil Masferrer Jiménez, an individual publisher established in Spain, operating https://thedemandcharge.com. Contact: contact@thedemandcharge.com.

That establishment is what fixes the applicable law: this site is operated under the EU General Data Protection Regulation (Regulation 2016/679) and Spanish Organic Law 3/2018 on data protection and digital rights, regardless of where a reader is.

The postal address is not published on this site. It is a private home rather than business premises, and email reaches the publisher directly for every purpose this policy describes, including a request to exercise your rights. The address is furnished on request to a supervisory authority or to anyone with a legitimate interest in it, as stated in the [legal notice](https://thedemandcharge.com/terms).

## What is collected, and why

### Reading the site

Nothing is required of you to read anything here. There is no account, no registration, no paywall and no email capture.

### Analytics

Google Analytics 4 is used to count page views and understand which articles are read. It only loads **after** you have accepted analytics cookies. Until you accept, Google Consent Mode v2 is set to `denied` in the head of every page, before any tag can run, and no analytics cookie is written.

What is processed: pages viewed, approximate location derived from IP at country or city level, device and browser type, referring site. IP anonymization is enabled. No attempt is made to identify an individual reader, and the site does not upload any user-provided data to Analytics.

- Legal basis: your consent (GDPR art. 6(1)(a)).
- Processor: Google Ireland Limited.
- Retention: as configured in the Analytics property, and no longer than 14 months.
- Withdraw at any time using **Cookie settings** in the footer.

### Advertising

Display advertising through Google AdSense is planned but is **not currently running on this site**. When it is switched on, this section will describe the processing before the first ad is served, and consent for advertising purposes will be collected through a consent management platform certified against IAB TCF v2.2, as Google requires for readers in the European Economic Area, the United Kingdom and Switzerland.

Advertising can involve personalization based on browsing behavior. Rejecting it does not remove the advertising; it removes the profiling behind it.

### The contact form

If you write through the [contact form](https://thedemandcharge.com/contact), the message, the name and the email address you supply are transmitted through Web3Forms, which relays them to the publisher's mailbox. They are used to answer you and for nothing else. They are not added to any list, because there is no list.

- Legal basis: your request, as steps taken at your request prior to a possible engagement, and the publisher's legitimate interest in answering correspondence (GDPR art. 6(1)(b) and 6(1)(f)).
- Processor: Web3Forms.
- Retention: correspondence is kept while it is useful and deleted when it is not, and in any case within two years of the last message.

You can always write directly to contact@thedemandcharge.com instead, which involves no third-party form processor at all.

### Hosting and server logs

The site is hosted on Cloudflare Pages. Cloudflare processes connection data — IP address, request time, user agent — to serve pages and to protect against attack. This is technically necessary to deliver a website to you.

- Legal basis: legitimate interest in operating and securing the service (GDPR art. 6(1)(f)).
- Processor: Cloudflare, Inc., under its data processing terms.

### Fonts

Typefaces are served from this domain. They are not fetched from Google Fonts or from any other font service, so reading a page here does not make your browser contact a third party for them, and no third party learns your IP address from the fonts.

### Global Privacy Control

If your browser sends the Global Privacy Control signal, this site treats it as a refusal of everything that is not strictly necessary: analytics stays off and advertising storage stays denied, without your being asked. You can still make an explicit choice afterwards, and an explicit choice you make later takes precedence over the signal — that is the point of a specific decision. Turning the signal on after having accepted works the other way round, and is treated as a withdrawal.

The check is `navigator.globalPrivacyControl` in `/assets/js/main.js`, and the state it produces is visible in the cookie settings panel.

### Advertising while it is switched off

No advertising script is loaded and no ad slot is rendered while the publisher ID is empty, which it currently is. There is nothing to consent to yet, and the site does not ask you to.

## What is not done

- No profiles are built for the publisher's own purposes.
- No data is sold. There is nothing to sell.
- No automated decision-making with legal or similarly significant effects.
- No special category data is collected, ever.
- The site is not directed at children under 16 and does not knowingly collect their data.

## International transfers

Google (only if you accept analytics), Cloudflare and Web3Forms (only if you send the contact form) may process data outside the European Economic Area, principally in the United States. Those transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise on Standard Contractual Clauses. If you accept nothing and send nothing, the only one of the three your browser ever contacts is Cloudflare, which serves the page.

## Your rights

Under the GDPR you can request access to your data, correction, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it at any time without affecting what was lawful before.

Write to contact@thedemandcharge.com. A reply is due within one month.

If you are not satisfied, you can complain to the Spanish supervisory authority, the [Agencia Española de Protección de Datos](https://www.aepd.es/), or to the authority in your own country of residence.

## Cookies

Which cookies are set, by whom, and for how long is in the [cookie policy](https://thedemandcharge.com/cookies).

## Changes

This policy is revised when what the site does changes, and not on a schedule. A material change — anything that alters what is done with data already collected — is announced on the site, in words, before it takes effect, rather than left for a reader to infer from a date stamp. The revision date is carried in the page's structured data and in the sitemap, where a machine can read it.

---

Canonical URL: https://thedemandcharge.com/privacy  
Site index for agents: https://thedemandcharge.com/llms.txt
