Rafkat Rafikov

Privacy policy

Last updated: 9 November 2026.

This privacy policy explains how RFKT, S.L.U. processes personal data on rafkat.com, in line with the EU General Data Protection Regulation (GDPR) and Spain’s LOPDGDD.

1. Data controller

  • Controller: RFKT, S.L.U.
  • CIF/NIF: B75371500
  • Registered office: Urb. Los Ángeles, Calle Guadaiza 25, 1º, 29670 San Pedro de Alcántara, Marbella (Málaga), Spain
  • Email: hello@rafkat.com

2. What data we process and why

  • Newsletter: email address (and a record of your consent and confirmation), to send the newsletter you requested (Art. 6(1)(a) GDPR — consent). Signup uses double opt-in: we email you a confirmation link before adding you to the list. You can withdraw consent at any time via the unsubscribe link in every newsletter or by emailing us.
  • Contact emails: if you write to hello@rafkat.com, we process your address and message content to reply (Art. 6(1)(b) or (f) — pre-contractual steps / legitimate interest in answering enquiries).
  • Analytics (Google Analytics 4), only if you accept analytics cookies: online identifiers, approximate location, device/browser data and usage events, to understand how the site is used (Art. 6(1)(a) — consent). Defaults are denied until you choose. See the cookie policy.
  • Essential technical data: server logs needed for security and delivery of the site (Art. 6(1)(f)).

We do not sell personal data. We do not use personal data for automated decisions that produce legal effects concerning you.

3. Recipients and transfers

  • Hosting: Hostinger (or successor host) as processor for serving the website.
  • Newsletter provider: Resend, Inc. (United States) processes your email as a processor to deliver confirmation messages and newsletters, under Resend’s Data Processing Addendum (pre-signed for every account). Transfers of personal data to the United States are covered by the EU Standard Contractual Clauses in that DPA; Resend also certifies under the EU-U.S. Data Privacy Framework (and UK Extension) as an additional transfer mechanism. See resend.com/legal/dpa and resend.com/security/gdpr.
  • Google Analytics 4: Google Ireland Ltd / Google LLC may process analytics data if you consent. Transfers outside the EEA rely on Google’s contractual safeguards (including Standard Contractual Clauses) where applicable.

4. Retention

  • Newsletter: confirmed subscribers until you unsubscribe, plus a short period needed to honour suppression lists. Unconfirmed signup requests expire with the confirmation link (typically 48 hours) and are not added to the list.
  • Contact emails: for as long as needed to handle your request and any related legal obligations.
  • Analytics: according to the retention configured in GA4 once the property is active (typically 2–14 months).

5. Your rights

You may request access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time, by emailing hello@rafkat.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es).

6. Minors

This site is aimed at adults. We do not knowingly collect data from children under 14.