Privacy policy

Last updated: 20 September 2026

1. Data controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you that the controller of your personal data is:

2. Personal data we collect

We collect the following data depending on how you interact with the platform:

  • Email registration: email address and password (stored encrypted). During registration we also record the timestamp and the IP address at which you confirm that you are at least 14 years old and accept the Terms of use and this Privacy policy, as evidence of the consent given (art. 7 GDPR).
  • Google registration: name, email address and profile picture provided by Google OAuth.
  • User profile: username, public name, professional headline, location, bio, avatar, links to your social networks, work experience and education. All these fields are optional and filled in by you.
  • Activity on the platform: blog comments, product reviews, likes, the tags and users you follow, achievements unlocked, progress and answers in the training content, products you have compared, and notification preferences.
  • Price alerts: email address, product and target price for each alert you set up.
  • Newsletter subscription: email address, preferred language, timestamp, IP address and version of the policy accepted at the time of sign-up. The subscription uses double opt-in: we do not add your address to our mailing list until you confirm it through the link you receive.
  • Resource downloads: the email address we send the resource to, whether or not you accept the newsletter sign-up, and the evidence of consent (timestamp, IP address, browser and version of the policy accepted).
  • Contact form: name, email address, subject and body of your message, together with the evidence of consent. The message is sent to our mailbox; it is not stored in the site's database.
  • Technical and usage data: IP address, browser type, operating system and pages visited, collected through Google Analytics only if you consent to analytics cookies.
  • Error reports: when something goes wrong on the site, Sentry records the page where it happened, the error message, the browser and the IP address, for the sole purpose of detecting and fixing faults. It is not used for analytics, advertising or profiling.

We do not collect special categories of data (health, beliefs, racial origin, etc.) and we do not take automated decisions with legal effects on you. Under art. 7 of the LOPDGDD, you must be at least 14 years old to create an account, and you confirm this expressly during registration. If you are under 14, do not use this platform and ask your parent or legal guardian to manage access on your behalf.

3. Which of your data is public

If you create an account, your profile is a public page at sonidoenred.com/profile/your-username. Any visitor can see it, and search engines may index it.

The following are public: your username and public name, headline, location, bio, avatar, links to social networks, work experience, education, achievements, who you follow and who follows you, and the comments and reviews you publish. Apart from the username, all those fields are optional: you can leave them empty or delete them whenever you like from your profile editor.

The following are not public: your email address, your price alerts, your notification preferences, your training progress and the evidence of consent.

4. Purpose of the processing

We process your data for the following purposes:

  • Managing your registration and authentication on the platform.
  • Give you access to the training content, the blog and the price comparator.
  • Display your public profile and the content you publish, and manage following between users and achievements.
  • Sending you price alert notifications that you have configured.
  • Send you transactional communications relating to your account (email confirmation, password reset, notices about changes to the legal terms).
  • Deliver the downloadable resources you request.
  • Reply to the messages you send us through the contact form.
  • Sending you the newsletter with content, updates and platform resources, if you have voluntarily subscribed. You can unsubscribe at any time via the link included in each email.
  • Moderate published content and prevent abuse, fraud and automated sign-ups.
  • Detect and fix technical errors, and analyse use of the platform in order to improve it.

5. Legal basis for the processing

  • Performance of a contract: the processing is necessary in order to provide you with the service (registration, authentication, profile, publication of content, price alerts and emails relating to your account).
  • Consent: for analytics cookies, for the newsletter subscription and for the delivery of downloadable resources. You can withdraw it at any time.
  • Legitimate interest: for the security of the platform (preventing abuse and automated sign-ups), content moderation, fixing technical errors and aggregate statistical analysis aimed at improving the service.
  • Compliance with a legal obligation: to retain the evidence of the consent given and be able to demonstrate it if required.

6. Data retention

We keep your account data for as long as you keep the account active. If you delete it from Settings, we remove your profile and your photo, your comments, reviews, price alerts, achievements, follows, notifications and the record of the resources you have downloaded.

The newsletter subscription is independent of your account, because it can be created without being registered. When you delete your account we ask whether you also want to cancel it; if you say yes, we delete your address both from our database and from Brevo. You can also cancel it at any time through the 'Unsubscribe' link included in every email, without touching your account.

The evidence of consent (timestamp, IP address and version of the policy accepted) and the record of resource downloads are kept for as long as the corresponding relationship lasts, so that we can demonstrate, if required, that consent was given freely and in a specific, informed and unambiguous manner.

Browsing data collected by Google Analytics is kept for 14 months, in line with the configuration applied to our account. Error reports in Sentry are kept for a maximum of 90 days.

7. Recipients and international transfers

Your data may be processed by the following providers, acting as data processors with adequate safeguards under the GDPR (EU Standard Contractual Clauses or the EU-US Data Privacy Framework, depending on the provider):

  • Render (EE. UU.) — hosting of the application server.
  • Supabase, Inc. (EE. UU.) — PostgreSQL database where the platform's information is stored.
  • Cloudflare, Inc. (EE. UU.) — content delivery network and protection against attacks. All traffic to the site passes through their servers, including your IP address.
  • Cloudinary (EE. UU.) — storage and delivery of images, including profile avatars.
  • Resend (EE. UU.) — sending of transactional emails: account verification, password reset, price alerts, delivery of resources and legal notices.
  • Brevo (Sendinblue Iberia S.L., España) — newsletter management and sending of commercial communications to subscribers. Provider established in the European Economic Area.
  • Google LLC (EE. UU.) — Google OAuth (signing in with your Google account) and Google Analytics (usage statistics, only with your consent).
  • Functional Software, Inc. — Sentry (EE. UU.) — logging of technical errors on the site.

We do not sell or transfer your data to third parties for their own purposes, and we do not share it with the comparator's shops or with the affiliate networks.

8. Affiliate links and third-party sites

Some of the comparator's links are affiliate links, as set out in the legal notice. When you click one, you leave SonidoenRed: the affiliate network and the destination shop may set their own cookies in your browser in order to attribute the sale, under their own privacy and cookie policies, over which we have no control.

We do not send any of your personal data to those networks or shops: the link is an ordinary link and it is you who decides whether to click it. Nor do we receive from them your identity or details of what you buy; only commission statistics in which you are not identified.

9. Your rights

As a user, you have the following rights regarding your personal data:

  • Access: knowing what data we process about you.
  • Rectification: correcting inaccurate or incomplete data.
  • Erasure: requesting the deletion of your data when it is no longer necessary.
  • Portability: receiving your data in a structured, commonly used format.
  • Objection: objecting to processing based on legitimate interest.
  • Restriction: requesting that we temporarily suspend the processing of your data.
  • Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

You can exercise these rights by writing to us at [email protected]. In addition, from the Settings → Privacy section of your account you can directly download a JSON file with your personal data (right to portability) and delete your account. If you believe the processing infringes the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

10. Cookies

We use our own and third-party cookies. You can find all the details in our Cookie policy.

11. Changes to this policy

We may update this privacy policy at any time. We will notify you of relevant changes by email or through a visible notice on the platform. The date of the last update always appears at the beginning of this document.

Confirm