Who is responsible. K.W. Dionton, an independent publisher of book recommendations, based in Spain. Contact: question@kwdionton.com
What data I receive. When you comment on a K.W. Dionton Instagram post asking for a book, or write to the account, I receive your Instagram username, your comment or message, and its date. This is provided through Instagram's official API.
Why. Only to answer you. The account sends you one direct message with the link to the book you asked about. I may also reply to you personally. I do not use your data for advertising, profiling or training any AI model, and I do not sell it or share it with anyone.
Legal basis. My legitimate interest in answering the people who write to me (GDPR art. 6.1.f).
Who processes it. Cloudflare, Inc. (hosts the small service that answers comments) and Meta Platforms Ireland Ltd. (Instagram), each under its own privacy policy. Transfers outside the EU are covered by the EU–US Data Privacy Framework and/or the Standard Contractual Clauses.
How long I keep it. The record that you were sent a message is kept about nine days after the post and then deleted. Messages I answer personally are kept only as long as needed to answer you, and at most 12 months.
Your rights and how to delete your data. You can ask me to access, correct or delete your data, limit or object to its use, or receive it in a portable format. To delete your data, email question@kwdionton.com with your Instagram username and the subject "Delete my data". I delete it within one month and confirm by reply. You can also remove the app's access in Instagram under Settings › Apps and websites. You may complain to the Spanish Data Protection Agency (www.aepd.es).
Minors. The account is for people aged 14 or over.
Changes. If this policy changes, the new version will be published here with its date.