Privacy policy.

Last updated: 30 May 2026

1. Data controller

The party responsible for the processing of personal data carried out through the website www.lasacramental.com (the "Website") is:

• Controller: La Sacramental
• Email: lasacramental@pm.me

This Privacy Policy explains what personal data is processed in connection with the Website, for what purposes, on what legal basis, and what rights you have. It is governed by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

2. Nature of the Website

The Website is purely informational. It contains no registration forms, no contact forms, no online shop and no user accounts. As a result, the personal data processed through it is limited to what is described in this Policy.

3. Processing activities

3.1. Website analytics

The Website uses GoatCounter, a privacy-focused analytics tool, to obtain aggregate statistics on visits (such as pages viewed, approximate country, referring site and type of browser or device).

• Purpose: to understand general use of the Website and improve its content.
• Legal basis: the legitimate interest of the Owner in evaluating and improving the Website (Article 6.1.f GDPR).

GoatCounter does not use cookies and does not create persistent identifiers that would allow an individual visitor to be recognised. IP addresses are processed only transiently to derive approximate location and are not stored by the Owner.

3.2. Email communications

If you contact the label by email, the Owner will process the data you provide (such as your email address and the content of your message).

• Purpose: to read, manage and respond to your communication.
• Legal basis: your consent, given freely when you choose to contact the label (Article 6.1.a GDPR), and the legitimate interest in maintaining the resulting correspondence (Article 6.1.f GDPR).

3.3. Embedded content (Bandcamp)

Certain pages of the Website include an embedded music player provided by Bandcamp, LLC. When the embedded player loads, your browser establishes a direct connection with Bandcamp's servers, which may process your IP address and technical browser data in accordance with Bandcamp's own privacy policy (available at bandcamp.com/privacy).

• Purpose: to allow you to listen to and purchase music directly on the Website.
• Legal basis: the legitimate interest of the Owner in providing an integrated listening experience (Article 6.1.f GDPR).

The Owner does not receive or store any personal data transmitted to Bandcamp through the embedded player.

4. Newsletter

The label's newsletter is hosted on an external platform (Substack). Subscription takes place entirely on Substack's own pages, not on this Website. If you subscribe, the data you provide is processed by Substack as data controller for that purpose, under its own terms and privacy policy. The Owner does not collect newsletter subscription data through this Website.

5. Recipients

Personal data is not sold, rented or transferred to third parties, except to the service providers strictly necessary to operate the Website and the label's communications, who act as data processors on the Owner's behalf:

• The analytics provider (GoatCounter), for the purpose described in section 3.1.
• The email service provider (Proton), which hosts the label's email account.

Data may also be disclosed where required by a legal obligation or by a competent authority.

6. International data transfers

The Owner's email service is provided by Proton, based in Switzerland, a country recognised by the European Commission as providing an adequate level of data protection. Should any processing involve a transfer of data outside the European Economic Area without an adequacy decision, the Owner will ensure that appropriate safeguards under the GDPR are in place.

7. Retention

Data is kept only for as long as necessary for the purposes for which it was collected:

• Email communications are retained for the time needed to deal with your request and for a reasonable period thereafter, after which they are deleted, unless their retention is required to comply with a legal obligation.
• Analytics data is retained in aggregate form for the period configured in the GoatCounter service.

8. Your rights

You may exercise the following rights free of charge: access to your personal data; rectification of inaccurate data; erasure of your data; restriction of processing; portability; and objection to processing. Where processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, you may write to lasacramental@pm.me, indicating the right you wish to exercise. The Owner may ask you to verify your identity.

If you consider that your data has not been processed in accordance with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

9. Cookies

The Website does not use cookies, neither its own nor those of third parties, for analytics, advertising or any other purpose. For this reason, no cookie consent banner is displayed.

10. Changes to this Policy

This Privacy Policy may be updated to reflect changes in the Website or in applicable legislation. The version in force is the one published on the Website, with its corresponding date of last update.