Last updated: September 29, 2026
Who is the controller
The controller of your data is DroneFlyBlog (droneflyblog.com). For anything about your personal data, write to [email protected].
What data we process and why
When you read the blog
The server and the content delivery network log technical data about the request (IP address, browser, page requested, date and time) to display the site, protect it against abuse and diagnose errors. Legal basis: legitimate interest in keeping the site secure and working (Article 6(1)(f) GDPR).
Visitor statistics
We use Google Analytics 4 to find out which pages are read and to improve the content. It is only activated if you accept it in the consent notice; until then it runs with analytics storage turned off. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
Advertising
The blog is funded by Google AdSense ads. Google and its partners may use cookies and identifiers to show ads, measure their performance and, if you allow it, personalise them. Your choices are collected by Google’s consent management platform (IAB TCF standard) in the notice that appears on your first visit; without consent, Google shows only limited ads: no personalisation and no advertising cookies (Google still uses your IP address to deliver the ads and may use cookies solely to detect invalid traffic). Personalised ads involve profiling by Google and its partners; we do not make automated decisions that produce legal effects concerning you. Legal basis: your consent to cookies and to personalised advertising (Article 6(1)(a) GDPR and Article 5 of the Portuguese ePrivacy law, Lei n.º 41/2004) and, for limited ads, legitimate interest in funding the site (Article 6(1)(f) GDPR). More information: how Google uses data from partner sites.
Newsletter
If you subscribe to the newsletter, we store your email address to send you new articles. Without your email address we cannot send you the newsletter. Legal basis: your consent (Article 6(1)(a) GDPR). You can unsubscribe at any time by writing to [email protected], and every email we send contains an unsubscribe link; your address is then deleted from the list.
Contact
If you write to us through the contact form, we use your name, email address and message only to reply to you; without your name and email address we cannot reply to you. Legal basis: legitimate interest in replying to people who write to us (Article 6(1)(f) GDPR).
Cookies
- pll_language (DroneFlyBlog): remembers the language you read the site in; up to 1 year.
- Cloudflare security cookies (for example __cf_bm): tell people apart from bots; up to 30 minutes.
- Google cookies (Analytics and AdSense): only with your consent; the list and their duration are in the consent notice, where you can change your choices at any time.
Who we share data with
- Hetzner Online GmbH (Germany): server hosting.
- Cloudflare, Inc.: content delivery network and protection against attacks.
- Google Ireland Limited / Google LLC: statistics (Google Analytics) and advertising (Google AdSense).
Cloudflare and Google may process data in the United States. These transfers are covered by the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and by the Commission’s standard contractual clauses. You can request a copy of these safeguards by writing to [email protected].
How long we keep data
- Technical server logs: 90 days.
- Newsletter: until you unsubscribe.
- Contact messages: 12 months after the last reply.
- Google data: according to the retention settings of the Google Analytics account (14 months) and Google’s policy.
Your rights
You can request access to, rectification, erasure, restriction or portability of your data, object to processing based on legitimate interest and withdraw your consent without affecting processing carried out before. Write to [email protected]; we reply within one month. If you believe your data has not been processed as it should have been, you can lodge a complaint with the Comissão Nacional de Proteção de Dados (www.cnpd.pt) or with the data protection authority of the country where you live.
Minors
The blog is not intended for anyone under 16, and we do not deliberately collect data from children.
Changes
If this policy changes, the date at the top is updated.
DroneFlyBlog Newsletter
DroneFlyBlog is the controller. We store your email, language and consent evidence to send this newsletter through Amazon SES. We do not collect health or belief data. Unconfirmed requests are deleted after 7 days and subscriptions with no sends for 24 months are deleted. After an opt-out, we retain only necessary evidence and a suppression record to prevent further sends. See the policy for your rights and contact details.
The legal basis is consent (GDPR Article 6(1)(a)). Subscription is optional and does not affect site access. We do not use open pixels or tracking links.
You can withdraw consent in any email and request access, correction, deletion, restriction or portability. You may complain to the CNPD or your national data protection authority. Contact: [email protected]
Sending uses the European eu-central-1 Amazon SES region. Processing and any international transfers are covered by the AWS data processing agreement and, where applicable, standard contractual clauses. Amazon Web Services.