La Voz de Galicia, S.A. has revised its guidelines for handling personal data provided by users. The company says it will process that information to deliver requested services under the existing contractual relationship. It may also send users information about its own products or services on the basis of legitimate interest, unless they object. Dated August 21, 2026, the update distinguishes service-related processing from promotional communications.
Users who wish to receive commercial communications from third-party companies must give explicit consent. They can indicate preferences for communications sent electronically or by phone, depending on the information provided. The company says it will not share personal data with third parties unless sharing is necessary to perform a contract or required by law.
La Voz de Galicia also lets users manage advertising preferences directly. Deselecting one option lets users refuse marketing messages about the company’s own products and services. Selecting another allows them to agree to receive information about products and services from other companies, including those in the same corporate group. The choices separate promotional purposes instead of treating all marketing as a single preference.
The company provides access to its privacy policy, with details about data processing and instructions for exercising data-protection rights. Submitting the relevant form counts as acknowledgment of the privacy policy and acceptance of the general terms and legal notice. It also covers the cookie policy. Under the EU General Data Protection Regulation (GDPR), consent must be specific and informed, and users can withdraw it. They also have the right to object to processing based on legitimate interests, including processing for direct marketing.
The structure governing these distinctions includes the GDPR, Regulation (EU) 2016/679, and Spain’s Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights. The GDPR recognizes different legal bases for processing, including performance of a contract and legitimate interests. Consent is another basis. The applicable basis depends on the purpose of the processing, while the policy’s preference controls give users a way to express their marketing choices.
Separate coverage by La Voz de Galicia in October 2026 addressed a dispute over Meta’s proposed terms for automated access to publishers’ online material. The Asociación de Medios de Información (AMI) and WAN-IFRA opposed terms they said could allow Meta to access and use journalistic content without prior authorization or payment. A subsequent report said Meta delayed implementation after pressure from publishers. That dispute concerns publishers’ content rights, a separate issue from the personal-data choices in La Voz de Galicia’s policy update.
Privacy and the handling of sensitive information have also come up in other contexts, including the urgent transfer of vulnerable minors in Ceuta, where authorities emphasized privacy and legal compliance. More details are available in the coverage of migrant minors' relocation from Ceuta to mainland Spain.
