Last updated: Apr 14th, 2026
1. Who controls your data
Data Controller: Juan Carlos Cantele
Trading name: The Admin Workshop
Address: Marqués de la Ensenada 24, Logroño, La Rioja, Spain
NIF: ESY7070003R
Contact: legal@theadminwork.shop
Juan Carlos Cantele is the sole data controller for all personal data processed through theadminwork.shop. All data protection enquiries should be sent to legal@theadminwork.shop.
No Data Protection Officer (DPO) has been appointed. The processing activities carried out by this business do not meet the thresholds requiring mandatory DPO appointment under Article 37 of the General Data Protection Regulation (GDPR) and Article 34 of Spain’s Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).
2. What data is collected and why
Email subscribers
Data collected: Name and email address.
Purpose: To send newsletters, content updates, and commercial communications about The Admin Workshop’s consulting services and digital products.
Legal basis: Your consent (Article 6(1)(a) GDPR). Consent is obtained through an active, unticked sign-up form. You may withdraw your consent at any time by clicking the unsubscribe link in any email or by writing to legal@theadminwork.shop. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
Digital product purchases
Data collected: Name, email address, and purchase record.
Purpose: To fulfil your purchase, deliver the product, and maintain records required by Spanish tax law.
Legal basis: Performance of a contract to which you are party (Article 6(1)(b) GDPR) and compliance with a legal obligation (Article 6(1)(c) GDPR) for tax record-keeping.
Note on payment data: All payment processing is handled exclusively by Gumroad, Inc. Payment card data is never transmitted to or stored by The Admin Workshop.
Contact enquiries
Data collected: Name, email address, and the content of your message.
Purpose: To respond to your enquiry and, where applicable, to take pre-contractual steps at your request.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR) for general enquiries; pre-contractual measures at your request (Article 6(1)(b) GDPR) for service enquiries.
3. How long your data is kept
Email subscriber data is retained for as long as you remain subscribed. Upon unsubscription, your data is blocked (quarantined and made inaccessible for ordinary processing) and then permanently deleted once the applicable statutes of limitation expire, in accordance with Article 32 LOPDGDD.
Purchase records are retained for a minimum of four years in accordance with Spain’s General Tax Law (Ley 58/2003, Article 70), and for up to six years to cover applicable civil limitation periods. After this period, data is blocked in accordance with Article 32 LOPDGDD and then permanently deleted.
Contact enquiry data is retained for the duration of any resulting relationship and for three years thereafter.
Consent records are retained for as long as necessary to demonstrate that consent was properly obtained, in accordance with Article 7(1) GDPR.
4. Who your data is shared with
Personal data is shared only with the processors described below. It is not sold, rented, or disclosed to any other third party.
MailerLite
UAB MailerLite (registered in Lithuania, operating infrastructure in the EU) acts as a data processor on behalf of The Admin Workshop for the processing of email subscriber data. MailerLite stores subscriber data on ISO 27001-certified servers located in Germany. A Data Processing Agreement compliant with Article 28 GDPR is incorporated by reference into MailerLite’s Terms of Use. Subscriber data processed by MailerLite remains within the European Economic Area.
Gumroad
Gumroad, Inc. (San Francisco, California, USA) processes data in two distinct capacities:
As data processor: Gumroad processes buyer data on behalf of The Admin Workshop for the purposes of completing your purchase and delivering the product.
As independent data controller: Gumroad also processes data for its own separate purposes, including fraud prevention, platform security, and analytics. For data Gumroad processes in this capacity, Gumroad’s own Privacy Policy applies. That policy is available at gumroad.com/privacy.
International transfer. Because Gumroad is based in the United States, personal data is transferred to the US when you complete a purchase. This transfer is made on the basis of Standard Contractual Clauses adopted by the European Commission pursuant to Article 46(2)(c) GDPR. You may request a copy of the applicable safeguards by writing to legal@theadminwork.shop.
5. Cookies and tracking
This website does not use cookies or other tracking technologies. No analytics, advertising, or profiling tools are active on this site.
MailerLite sign-up forms embedded in this site may use a browser storage item to manage form display frequency. No personal data is collected or transmitted through this mechanism unless you actively submit the sign-up form.
6. Your rights
Under GDPR (Articles 15–22) and LOPDGDD, you have the following rights regarding your personal data:
Access — to obtain confirmation of whether your data is being processed and, if so, to receive a copy of that data.
Rectification — to request correction of inaccurate or incomplete data.
Erasure — to request deletion of your data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to the data blocking obligations described in Section 3.
Restriction — to request that processing be limited while a dispute about accuracy or lawfulness is resolved.
Portability — where processing is based on consent or contract and is carried out by automated means, to receive your data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
Objection — to object to processing based on legitimate interest. You have an absolute right to object to processing for direct marketing purposes at any time, with immediate effect.
Not to be subject to solely automated decisions — no automated decision-making or profiling with legal or similarly significant effects is carried out on the basis of your data.
Withdrawal of consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Rights of deceased persons (Article 3 LOPDGDD) — family members, de facto partners, and heirs of a deceased data subject may exercise access, rectification, and deletion rights on their behalf, unless the deceased expressly prohibited this in a digital will (testamento digital) under Article 96 LOPDGDD.
To exercise any of these rights, write to legal@theadminwork.shop with your full name, a description of your request, and a copy of identification. A response will be provided within one month of receipt. For complex or multiple requests, this period may be extended by a further two months, in which case you will be informed within the first month.
7. Right to lodge a complaint
If you consider that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with Spain’s supervisory authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan 6, 28001 Madrid
Telephone: +34 91 266 35 17
Website: www.aepd.es
Electronic filing: sedeagpd.gob.es
8. Changes to this policy
This policy may be updated from time to time to reflect changes in processing activities or applicable law. The date at the top of this page shows when it was last revised. Continued use of the website after updates are published constitutes acceptance of the revised policy. For material changes, notice will be provided via email to subscribers.
For website operator identification and terms of use, see the Legal Notice and Terms of Use.