Privacy policy

Draft – to be reviewed before publishing. Last updated: [DATE].

This policy explains which personal data visitbodegas processes, why, and what rights you have.

Controller

[COMPANY NAME], [COMPANY NUMBER], [ADDRESS]. Email: [CONTACT EMAIL].

What we process

Clicks on links that leave the site. When you click a bodega's website, booking link or phone number, or a partner link, we record the click: what you clicked, the time, the language, the page you came from, your browser's user agent and a hash of your IP address. The hash is made with a secret value that changes every day and is never stored, so it cannot be traced back to you. We use no cookies for this. Purpose: statistics on how many visitors we send on, including to the bodegas themselves, and settling accounts with partners. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). Individual clicks are deleted after 13 months; after that we keep only daily totals.

Language. We use a cookie to remember the language you chose. To suggest a language on your first visit, we look up your country in a local database (IP geolocation by DB-IP). Your IP address is not stored.

Forms. When you send an error report or register a bodega, we store what you enter, including your name and email if you give them, so we can follow up. Deleted when the case is closed, at the latest after [PERIOD].

Favourites, route and comparison are stored only in your browser (localStorage) and are not sent to us.

Maps. Map tiles are loaded from CARTO. Your browser then contacts CARTO's servers, which see your IP address.

Partners

When you follow a partner link, you leave visitbodegas. The partner then processes data about you under its own privacy policy and may set its own cookies to record that the booking came from us:

• Booking.com – [link to privacy policy]
• Expedia – [link to privacy policy]
• GetYourGuide – [link to privacy policy]
• Viator – [link to privacy policy]

We share no personal data with the partners. We receive only commission reports (date, product and amount) without names or contact details.

Your rights

You can ask for access, correction, deletion and restriction, and object to processing based on legitimate interest. Contact [CONTACT EMAIL]. You can also complain to your data protection authority.

See also the cookie policy and how we make money.