Privacy
Policy.

Data controller

The controller responsible for the processing of personal data associated with Vektral is:

Personal data we collect

Vektral may process the following categories of personal data:

• Newsletter data: your email address, subscription status and information associated with your subscription.
• Communication data: your name, email address and any information you voluntarily provide when contacting Vektral.
• Technical data: IP address, browser, device, access time, security logs and other technical information generated when using the website.
• Engagement data: information made available through the newsletter platform, such as email delivery, opens, clicks and interactions.

Vektral does not intentionally request or collect special categories of personal data, such as health, biometric, political, religious or sexual-orientation information.

How we use personal data

Personal data may be processed for the following purposes:

• To manage subscriptions to the Vektral newsletter.
• To send editorial briefings, publications and communications requested by subscribers.
• To manage subscription preferences and unsubscribe requests.
• To answer questions, messages or requests sent to Vektral.
• To operate, maintain and secure the website.
• To understand the performance and relevance of Vektral publications.
• To comply with legal obligations or respond to valid requests from public authorities.

Vektral does not sell personal data to third parties.

Legal basis for processing

The legal bases used by Vektral depend on the purpose of each processing activity:

Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Service providers and recipients

Vektral uses external providers that may process personal data where necessary to provide their services.

Personal data may also be disclosed to courts, regulators, law-enforcement bodies or other competent authorities when required by law.

International data transfers

Some service providers used by Vektral, including Substack, are based in or operate from countries outside the European Economic Area.

Where personal data is transferred internationally, the transfer will be subject to an applicable legal mechanism or appropriate safeguard, such as an adequacy decision, Standard Contractual Clauses or another mechanism recognised under European data-protection law.

Additional information about transfers carried out by Substack is available in its own privacy documentation.

How long we keep personal data

• Newsletter data: for as long as the subscription remains active or until consent is withdrawn.
• Communication data: for the time necessary to answer and manage the relevant request.
• Technical and security data: for the period reasonably necessary to protect the website, investigate incidents and maintain its operation.

After the relevant purpose ends, certain information may be retained in a restricted form when necessary to comply with legal obligations or establish, exercise or defend legal claims.

Your data-protection rights

Subject to the conditions established by applicable law, you may exercise the following rights:

You may also withdraw your consent at any time. Newsletter subscribers can unsubscribe by using the link included in each email.

To exercise your rights, send an email to:

tomorrow@vektral.io →

The request should identify the right you wish to exercise and provide sufficient information to verify your identity where reasonably necessary.

You also have the right to submit a complaint to the Spanish Data Protection Agency:

Agencia Española de Protección de Datos ↗

Cookies and similar technologies

Vektral may use technical cookies that are necessary for the website to function correctly.

Where analytics, advertising or other non-essential technologies are introduced, they will be managed in accordance with applicable consent requirements.

Detailed and updated information about the technologies used on this website will be available in the Cookie Policy.

View Cookie Policy →

Security and confidentiality

Vektral applies reasonable technical and organisational measures intended to protect personal data against accidental loss, unauthorised access, alteration, disclosure or misuse.

No online system can guarantee absolute security. Users should therefore also take appropriate precautions when communicating information through the internet.

Vektral does not use personal data to make decisions that produce legal or similarly significant effects based solely on automated processing.

Changes to this Privacy Policy

This Privacy Policy may be updated when Vektral changes its services, introduces new providers or when legal or regulatory requirements change.

The current version will always be published on this page together with its latest update date.