Privacy policy

Last updated: July 2026

This policy explains how the personal data you provide when using this site — which accompanies Elli and Leo on their pilgrimage along the Camino de Santiago — is handled. We look after your data and use only what is essential.

1. Data controller

The controller of your data is Dushan Wegner (hereinafter, "the Controller"). You may contact them at any time at: [email protected].

2. What data we collect

We only process the data you choose to provide when leaving a prayer:

• The name you enter.
• The prayer and language you choose, and your intention if you leave one.
• Your email address, only if you choose to provide it (optional).
• Your phone number, only if you choose to provide it (optional).
• A technical identifier stored in a cookie in your browser (see the cookies section).

We do not collect data automatically for tracking purposes, nor do we carry out profiling.

3. Purpose of the processing

• To record your prayer and publicly display only a counter (how many people have prayed at each location). Your name is never made public.
• Allowing Leo to pray for your intention as he passes through the place.
• If you provide an email or phone number, notifying you when Leo has prayed for you. We do not use them for anything else.
• To remember, by means of the cookie, that you have already left a prayer at a location, in order to avoid duplicates.

4. Legal basis

The legal basis for the processing is your consent (art. 6.1.a of the GDPR), which you give by voluntarily completing and submitting the form. You may withdraw your consent at any time (see "Your rights").

5. How long we retain your data

We retain your data for as long as necessary to fulfil the purpose described: the 2026 pilgrimage and a reasonable period thereafter. You may request its erasure at any time and we will delete it unless we are under a legal obligation to retain it.

6. Recipients and transfers

We do not sell or disclose your data for commercial or advertising purposes. It is shared only with the technical providers strictly necessary for the operation of the service, which act as data processors:

• The hosting provider of the server that runs this site, within the European Union.
• The mail server that sends the notice that Leo has prayed for your intention, if you provided an email.
• WhatsApp (Meta Platforms Ireland Ltd.), only if you provide a phone number: in that case Leo writes to you personally from his own WhatsApp, so your number and his message pass through Meta’s infrastructure. This site does not send anything to WhatsApp automatically; it is Leo who writes to you.

Using WhatsApp may involve transferring data to servers outside the European Economic Area (United States). Such transfers are covered by the adequacy decision of the EU-US Data Privacy Framework and by Meta’s own terms. If you would rather not use WhatsApp, simply do not leave your phone number: it is not required.

7. Cookies

This website uses only an essential technical cookie, which stores an anonymous identifier in your browser to remember that you have already prayed at a location and to avoid duplicates. We do not use analytics, advertising or third-party cookies. As a strictly necessary cookie, it does not require prior consent, but you may delete it from your browser settings.

Instagram: we show some photos from our Instagram as copies stored on our own server, so your browser does not contact Instagram (Meta) to view them and no third-party scripts or cookies are loaded. Only if you click a photo to open it do you go to Instagram, and then its own privacy policy applies.

8. Your rights

You may exercise the following rights at any time:

• Access: to know what data of yours we process.
• Rectification: to correct inaccurate data.
• Erasure: ask us to delete your data (the ‘right to be forgotten’).
• Objection and restriction: to object to the processing or ask us to restrict it.
• Portability: to receive your data in a structured format.
• Withdrawal of consent: to withdraw your consent at any time, without affecting processing already carried out.

To exercise these rights, write to [email protected]. If you consider that we have not properly addressed your request, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) (www.aepd.es) or with the supervisory authority in your country.

9. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. No transmission over the internet is completely secure, but we are committed to protecting your information with due diligence.

10. Minors

This website is not specifically directed at minors. If you are a minor, we ask that you use the form with the consent of your parents or guardians.

11. Changes to this policy

We may update this policy to reflect changes in the service or in the applicable regulations. The version in force will always be the one published on this page, together with its update date.

Only essential cookies. No tracking, no third parties. Thank you for walking with us.