Privacidad
PRIVACY AND DATA PROTECTION POLICY
Last updated: August 2026
1. Data Controller
The controller responsible for the personal data collected and processed through Diabetes Forum is:
Data Controller: Fernando Rafart
Website: Diabetes Forum
Domain: diabetesforo.com
Email: foro@diabetesforo.com
Any questions or requests regarding privacy and data protection may be sent to the email address above.
2. Purpose and Scope
This Privacy Policy explains how Diabetes Forum collects, uses, stores and protects the personal data of visitors and users of diabetesforo.com.
It applies, among other things, to data processing related to:
registration and administration of user accounts;
user authentication;
participation in the forum;
posts, comments and images submitted by users;
community communication features;
notifications related to forum activity;
newsletters and other email communications;
website security and technical operation;
audience measurement and advertising, where the user has provided the required consent.
3. Applicable Legislation
Personal data is processed in accordance with applicable Spanish and European legislation and, in particular, with:
Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR);
Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD);
Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE);
and any other applicable legislation concerning privacy, data protection and information society services.
4. Personal Data We Process
The personal data processed depends on how each person uses Diabetes Forum.
We may process the following categories of data:
Account and Identification Data
Username, email address, internal account identifiers and other information necessary to create and administer an account.
Credentials
Passwords are stored using the hashing and security mechanisms provided by Django. Diabetes Forum does not store passwords as readable plain text.
Data Obtained Through Google Login
When users choose to use Google Login, we may receive the information necessary to authenticate them and identify their account in accordance with the permissions granted during the authentication process.
User-Generated Content
Topics, replies, comments, messages, images, profile information and any other information that users choose to provide through the community features.
Preferences
Preferences relating to notifications, communications, newsletters and account settings.
Technical and Security Data
IP address, dates and times of access or activity, session information, technical logs, browser information and other data necessary for the operation, maintenance, diagnosis and security of a web application.
Analytics and Advertising Data
Where users have provided the appropriate consent, data relating to the use of the website may be processed through services such as Google Analytics and Google AdSense.
5. Health Information and Special Categories of Personal Data
Diabetes Forum does not require users to provide medical or health information in order to create an account.
However, Diabetes Forum is a community dedicated to diabetes and, by its nature, users may voluntarily choose to share information relating to their health, such as experiences with diabetes, treatments, devices, results, symptoms or other personal circumstances.
Health-related data constitutes a special category of personal data under Article 9 of the GDPR.
Users should carefully consider what information they wish to make public and should avoid providing medical, identifying or third-party information that is not necessary to participate in a discussion.
Information published in public areas of the forum may be visible to any visitor and may be indexed by search engines.
Diabetes Forum may moderate, hide or remove content where necessary in accordance with its General Terms of Use, community rules or applicable legal obligations.
6. Purposes of Processing
Diabetes Forum may process personal data for the following purposes:
Account Management
To create, administer and maintain user accounts, authenticate users and provide the features available to registered users.
Participation in the Community
To enable users to create and publish topics, replies, messages, images and other content.
Service-Related Communications
To send account verification messages, password recovery emails, security alerts, notifications and other communications necessary for or related to the operation of the forum.
Newsletters and Informational Communications
To send newsletters and other informational communications where users have requested them or provided the required consent.
Security and Abuse Prevention
To detect and prevent fraudulent use, spam, unauthorised access, attacks and other activities that could compromise the security of the service or its users.
Maintenance and Improvement of the Service
To diagnose incidents, maintain the infrastructure and improve the technical operation of Diabetes Forum.
Audience Measurement
To obtain statistics about the use of the website through Google Analytics where the user has provided the required consent.
Advertising
To manage and display advertising through Google AdSense where applicable and in accordance with the user's consent preferences.
7. Legal Bases for Processing
The legal basis depends on the specific purpose of each processing activity.
Diabetes Forum may process personal data on the basis of:
the provision of the service requested by the user and the management of their account;
the user's consent where consent is required;
the legitimate interests of Diabetes Forum in ensuring the security, integrity, availability and proper operation of the community;
compliance with legal obligations;
and, where applicable, other legal bases provided for under applicable legislation.
Where processing is based on consent, users may withdraw their consent at any time.
Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
8. Registration and Google Login
Users may create an account on Diabetes Forum through the available registration mechanisms.
The option to use Google Login may also be provided.
When this option is used, authentication is carried out through Google's services and Diabetes Forum receives the information necessary to identify and link the user's account in accordance with the permissions granted.
Google may carry out certain processing activities in accordance with its own terms and privacy policies.
9. Newsletters and Email Communications
Diabetes Forum may send communications necessary to manage and protect user accounts, including:
account confirmation and verification;
password recovery;
security alerts;
communications relating to forum activity;
other communications necessary to provide requested features.
These operational communications must be distinguished from newsletters and other non-essential informational communications.
Subscription to the newsletter will be provided through a separate and voluntary option where consent is the applicable legal basis.
Users may withdraw their consent and disable newsletter delivery through their account preferences.
Newsletters will also include a mechanism allowing users to unsubscribe.
Diabetes Forum uses IONOS and Mailrelay services to manage and send email communications.
10. Cookies and Similar Technologies
Diabetes Forum uses cookies and similar technologies.
Technical or strictly necessary cookies may be used to provide functions such as:
authentication;
session management;
security;
abuse prevention;
storage of certain technical preferences;
operation of services requested by the user.
These cookies may be used without consent where they are legally exempt from the consent requirement.
Technologies associated with the following services may also be used:
Google Analytics, for measurement and analytics;
Google AdSense, for advertising;
Google Login, for authentication;
Google reCAPTCHA, for protection against spam and abuse.
Cookies or technologies that are not strictly necessary will not be installed or activated before valid consent has been obtained where such consent is legally required.
Merely continuing to browse the website will not be considered consent.
Users will be able to accept, reject or configure categories of cookies requiring consent and subsequently change their preferences using the mechanisms provided on the website.
Additional information is available in the Diabetes Forum Cookie Policy.
11. Service Providers and Data Recipients
Diabetes Forum does not sell its users' personal data.
In order to provide, protect and maintain the service, certain providers may need to process personal information.
The main services used include:
IONOS
Infrastructure and hosting provider used by Diabetes Forum. The website's main infrastructure is hosted in Spain.
IONOS also provides certain email-related services.
Mailrelay
Service used to manage and send newsletters and other email communications.
Diabetes Forum uses certain services provided by Google, including:
Google Login;
Google Analytics;
Google AdSense;
Google reCAPTCHA.
Each of these services may involve different processing activities depending on its purpose and the user's consent settings.
Personal data may also be disclosed where required by law, in response to a request from a competent authority or where necessary for the establishment, exercise or defence of legal claims.
12. International Data Transfers
Some technology providers belong to international groups and may involve the processing of or access to information from countries outside the European Economic Area.
Where applicable, such transfers must be carried out using the mechanisms and safeguards established by the GDPR, such as adequacy decisions, Standard Contractual Clauses or other legally recognised instruments.
13. Data Retention
Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and subsequently for the periods required to address potential liabilities and comply with legal obligations.
The general criteria are as follows:
User Account
Data associated with a user account will be retained while the account remains active and until its deletion is requested or carried out, without prejudice to data that must be temporarily retained for legal or security reasons.
Posts and Discussions
When an account is deleted, content published on the forum may be retained in anonymised form in order to preserve the continuity, coherence and understanding of discussions.
Technical Data and Logs
Logs and other technical data will be retained for periods reasonably necessary to ensure security, diagnose incidents, prevent abuse and comply with applicable legal obligations.
Newsletter
Data required to send newsletters will be retained for as long as the user remains subscribed.
After a user unsubscribes, the minimum information necessary to demonstrate and respect the opt-out request and prevent further unauthorised communications may be retained.
Cookies and Third-Party Services
Data will be retained according to its purpose, the user's consent preferences and the applicable retention periods for each service.
14. Account Deletion and Anonymisation
Users may request the deletion of their account.
When an account is deleted, Diabetes Forum may retain posts made by the user in anonymised form, so that they are no longer associated with the identity of the account.
This allows the continuity and understanding of discussions involving multiple users to be preserved.
Anonymisation of an account does not prevent specific requests concerning personal data contained within a post from being considered where deletion of that information is legally required.
Each request will be assessed according to its particular circumstances.
15. Minors
The minimum age at which a person may independently provide consent for the processing of their personal data on Diabetes Forum is 14 years, in accordance with Spanish law.
Where a child under the age of 14 needs to provide consent for processing, authorisation from a parent or legal guardian will be required in accordance with applicable law.
Given the nature of Diabetes Forum, minors are particularly advised not to publish information that could identify them, unnecessarily detailed medical information, their address, telephone number, school or other private information.
16. Security and Confidentiality
Diabetes Forum applies technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, destruction or improper disclosure.
The website uses encrypted communications through HTTPS/SSL and security mechanisms provided by the application and its infrastructure.
Passwords are not stored as readable plain text but are protected using Django's hashing and security mechanisms.
However, no Internet-connected service can guarantee absolute security.
Security measures may be reviewed and adapted according to risks, technological developments and the needs of the service.
17. Users' Rights
Users may exercise, where applicable, the rights recognised under data protection legislation:
Access: to know what personal data is being processed.
Rectification: to request correction of inaccurate or incomplete data.
Erasure: to request deletion of personal data where applicable.
Restriction: to request restriction of processing in the circumstances provided by law.
Objection: to object to certain processing activities where applicable.
Data portability: to receive certain data in a structured, commonly used and machine-readable format where the legal requirements are met.
Withdrawal of consent: to withdraw previously granted consent at any time.
Automated decision-making: not to be subject, where applicable, to decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise these rights, users may send a request to:
The request should provide sufficient information to identify the right being exercised and the account or personal data concerned.
Diabetes Forum may request information reasonably necessary to verify the identity of the person making the request.
A copy of an identity document will not be required systematically where identity can be verified using less intrusive means.
18. Complaints to the Supervisory Authority
If a person believes that Diabetes Forum has processed their personal data in breach of applicable legislation, they may first contact:
They also have the right to lodge a complaint with the competent data protection supervisory authority.
In Spain, the supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).
19. External Links and Third-Party Services
Diabetes Forum may contain links to websites, platforms and services operated by third parties.
When users access these services, any processing carried out directly by those third parties will be governed by their own privacy policies and terms.
Diabetes Forum does not generally control the processing activities carried out by external websites.
20. Changes to This Privacy Policy
Diabetes Forum may amend this Privacy Policy to reflect legal, technical or functional changes.
The version published on the website will be the applicable version at any given time.
Where a change is relevant to users' rights, users will be informed through the mechanisms available on Diabetes Forum.
Where new processing requires consent, such consent will be requested before the processing takes place.
Simply using or browsing Diabetes Forum will not replace consent where the law requires a specific indication of the user's wishes.
21. Contact
For any questions regarding this Privacy Policy or the processing of personal data:
Fernando Rafart
Diabetes Forum
foro@diabetesforo.com
Last updated: August 2026