Privacy Policy — The Union Report
Legal

Your data,
handled responsibly.

This Privacy Policy explains what personal data The Union Report collects, why we collect it, how we use it, and the rights you hold under EU law. The publication is operated by Javier Iglesias and our website is theunionreport.eu.

Operator Javier Iglesias
Last updated April 2026
Applicable framework Regulation (EU) 2016/679 — GDPR
Hosting jurisdiction France (EEA)
Contents
§1
What data do we collect?
Why do we collect it?
01 · Accounts
User registration
When you register for a free account we collect your name, email address, and a password. This is used solely to manage your account and provide access to the publication. You may request deletion at any time from your account profile page, or by emailing javieriglesias@theunionreport.eu.
02 · Subscriptions
Paid membership
Payment is processed by a third-party processor. We do not store your card details directly. We retain records of your subscription status and billing history for legal and accounting purposes as required by applicable law.
03 · Communications
Newsletter & emails
If you subscribe to our newsletter or create an account, we may send email updates about new publications. You may unsubscribe at any time via the link in any email or by contacting us. We will not send marketing communications without your explicit consent.
04 · Forms
Contact form submissions
If you contact us through our contact form, we collect your name and email address solely to respond to your enquiry. This data is not shared with third parties and is not used for marketing purposes without your explicit consent.
05 · Technical
Cookies
Our site uses essential cookies for basic functionality (temporary cookies set when you visit our login page that contain no personal data) plus cookies to remember your display preferences. No tracking or advertising cookies are used.
06 · Site usage
Analytics
We may collect anonymised data about site visits (pages visited, time spent, referral to sources) solely to understand how our content is used and improve the publication. Analytics data does not identify individual visitors.

Embedded content. Articles may include embedded content from third-party sources such as EUR-Lex. Embedded content behaves as if you had visited those websites directly and may collect data according to their own privacy policies.

§1.1  Legal basis for processing (GDPR)
Processing activity Legal basis GDPR reference
Contact form submissions
Consent, withdrawable at any time
Art. 6(1)(a)
Account registration & login
Performance of a contract
Art. 6(1)(b)
Billing records retention
Compliance with a legal obligation
Art. 6(1)(c)
Anonymised analytics
Legitimate interest in improving the publication
Art. 6(1)(f)
§1.2  Cookies & data retention

Contact form submissions are retained only as long as necessary to respond to your enquiry and are deleted thereafter. Analytics data is retained in anonymised form.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will set cookies to save your login information and screen display choices. Login cookies last two days; screen-options cookies last one year. If you select Remember Me, your login persists for two weeks. If you log out, the login cookies are removed.

This website does not use third-party tracking or advertising cookies.

Data retention at a glance
Data type
Retention period
Basis for retention
Account data
Until account is deleted; erasure within 30 days
Contract
Billing records
7 years (accounting regulations)
Legal obligation
Contact form submissions
Deleted once the enquiry is resolved
Consent
Analytics data
Retained in anonymised form (no time limit)
Legitimate interest
Login cookies
2 days (14 days with "Remember Me")
Functional
Reader rights
§2
Your rights under GDPR

As a data subject under EU law, you hold the following rights with respect to your personal data. To exercise any of them, contact javieriglesias@theunionreport.eu. You also have the right to lodge a complaint with your national data protection authority.

Art. 15
Access
Request a copy of the personal data we hold about you and information on how it is processed.
Art. 16
Rectification
Request correction of inaccurate or incomplete personal data without undue delay.
Art. 17
Erasure
Request deletion of your personal data, subject to any legal retention obligations.
Art. 18
Restriction
Request that we restrict the processing of your data in certain circumstances.
Art. 20
Portability
Receive your personal data in a structured, machine-readable format for transfer to another controller.
Art. 21
Objection
Object to processing based on legitimate interests, including for direct marketing purposes.
Data handling
§3
What happens to your data?

We do not sell or share personal data with third parties for commercial purposes. Data may be processed by our hosting provider Hostinger in accordance with their privacy policy, solely for the purpose of operating the website.

Account data is retained for as long as your account remains active. Upon deletion, personal data is erased within 30 days except where retention is required by law. Billing records are retained for seven years in accordance with applicable accounting regulations. Contact form submissions are deleted once your enquiry has been resolved.

Hosting
Our website is hosted on servers located in France (Europe). No personal data is transferred outside the European Economic Area. Processing by Hostinger is governed by a data processing agreement in compliance with GDPR requirements.
Questions about this policy? For any privacy-related enquiry — including exercising your rights under GDPR — contact Javier Iglesias directly. We aim to respond within two business days.
Contact us →
Last updated: April 2026 — The Union Report, operated by Javier Iglesias — theunionreport.eu