Privacy statement
Last updated:
Discover Xaló is a small guide, kept by hand. It uses no cookies, no advertising and no tracking. Visits are counted, but anonymously. This page explains the little personal data that is involved anyway, and what you can do about it.
Who is responsible
Discover Xaló is run by me, Jasper Plantinga, from Xaló (Alicante, Spain). I am the controller for the personal data described on this page. For anything to do with privacy, email GDPR@discoverxalo.com.
The rules that apply are the European General Data Protection Regulation (GDPR, called RGPD in Spain) and the Spanish data protection act that supplements it (LOPDGDD, Ley Orgánica 3/2018).
No cookies, no tracking
The site sets no cookies and stores nothing in your browser. There is no advertising and there are no social media widgets. I count how many people visit (see below), but I don’t know who you are, and I don’t try to find out.
Visiting the site
The site is hosted by Cloudflare. To deliver a page, Cloudflare has to process technical data such as your IP address, your browser type and the page you ask for. Cloudflare also uses this data to protect the site against abuse. Cloudflare is an American company certified under the EU-U.S. Data Privacy Framework. More in Cloudflare’s privacy policy.
I don’t keep visitor logs myself. Only technical errors are logged, without the details of individual visits, and these are deleted automatically after 7 days at most.
The fonts and all other files come from this site itself, so nothing is sent to Google or any other font service. The only exception is the statistics script described below, which comes from Cloudflare.
Legal basis: my legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).
Visitor statistics
To see how many people use the site, and which pages they read, I use Cloudflare Web Analytics. A small script from Cloudflare measures each page view: which page, which site you came from, your country, the type of device and browser, and how fast the page loaded.
It uses no cookies and stores nothing in your browser, and Cloudflare does not use your IP address or other data to recognise you or follow you across websites. I only see totals, such as "120 visits from the Netherlands this week", never individual visitors. Legal basis: my legitimate interest in knowing whether the site is useful and read (Article 6(1)(f) GDPR).
Maps
The map page and the small map on each business page load their map images from OpenStreetMap. Your browser then sends your IP address and the part of the map you are looking at to the OpenStreetMap Foundation in the United Kingdom. See their privacy policy. Legal basis: my legitimate interest in showing where each place is (Article 6(1)(f) GDPR).
Links to other sites
Business pages link to Google Maps for directions, to Instagram and Facebook, and to the businesses’ own websites. Nothing is sent to those services until you click a link. After that, their own privacy policies apply.
When you email me
If you email me, for example to ask for a change or to add your business, I use your email address and your message only to reply and to deal with your request. I keep the conversation for as long as that takes, and delete it no later than one year after it has been dealt with. Legal basis: my legitimate interest in answering your message (Article 6(1)(f) GDPR).
Businesses on this site
The listings contain information about businesses: name, address, phone number, opening hours, photos and links. For most businesses that is business information, but for a sole trader it can also be personal data. It comes from the business itself, from what the business publishes (its website, social media, the sign on the door) and from my own visits.
I publish it to give residents and visitors a reliable overview of what the village has to offer (legitimate interest, Article 6(1)(f) GDPR). If you run a listed business and want something corrected or removed, email GDPR@discoverxalo.com.
Photos
Where the photos come from, and how to have one changed or removed, is explained on the Photos page.
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. To use any of these rights, email GDPR@discoverxalo.com. I’ll reply within a month.
If you think I’m handling your data incorrectly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD).
Changes
If the site changes in a way that affects your privacy, for example once businesses can sign up through a form, this page will be updated. The date at the top shows the current version.