Privacy policy
Language note. This is a courtesy translation. The binding version of this document is the Spanish original at Política de privacidad, which prevails in the event of any discrepancy.
This policy explains what personal data andaventura.com processes, for what purpose and on what legal basis, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
It describes only the processing that actually exists today on the site. When anything new is added — a newsletter, a contact form or measurement tools — this policy will be updated before it goes live.
1. Data controller
- Controllers: Alessandro Mora Infante (NIE Y8197312B) and Astrid Carolina González (NIE Y8197368K), joint owners of andaventura.com.
- Address: Ronda República Argentina, 39 — 27002 Lugo (Spain).
- Email: info@andaventura.com
2. Browsing the site does not require giving us data
Reading the content of andaventura.com requires no registration and no personal data. There is no user area, no data is collected covertly, and the controllers do not build profiles from browsing information.
3. Processing we carry out
3.1 Email communications
| Data processed | Email address, your name if you provide it, and the content of the message. |
|---|---|
| Purpose | To handle and answer your query, notice or proposal. |
| Legal basis | Pre-contractual measures or legitimate interest in handling communications addressed to us (art. 6.1.b and 6.1.f GDPR). |
| Retention | For as long as needed to resolve the communication and, after that, for the period in which liability could arise. |
| Recipients | The email service provider, as a processor. |
3.2 Server technical logs
| Data processed | IP address, date and time of the request, resource requested, response code, browser and operating system. |
|---|---|
| Purpose | To keep the service running, diagnose incidents and protect the site against abusive access. |
| Legal basis | Legitimate interest in ensuring the security and correct operation of the site (art. 6.1.f GDPR). |
| Retention | The log retention period applied by the hosting provider. |
| Recipients | The hosting provider (Hostinger), as a processor. |
3.3 Google AdSense advertising
The site displays advertising served by Google through AdSense. This processing is detailed in section 4.
4. Advertising: what Google does on this site
Andaventura is funded by advertising. The current implementation is as follows, described as it actually works:
- Google’s advertising script loads only on article pages. It does not load on the home page, the section pages or these legal pages.
- When it loads, the browser communicates with Google domains (
pagead2.googlesyndication.comand associated ad-quality domains). - Google may use cookies or other identifiers to serve ads, measure their performance and cap how often the same ad is shown.
In this processing Google acts on its own account in respect of the data it collects through its own technologies. Information on how it uses that data is in Google’s own privacy and advertising policies, available from its sites.
Legal basis: the user’s consent to the use of cookies and advertising identifiers and to the associated processing (art. 6.1.a GDPR and art. 22.2 LSSI-CE).
International transfers: Google also processes data outside the European Economic Area. Those transfers rely on the mechanisms provided for in Chapter V of the GDPR that Google states it applies at any given time.
Current state of consent
Transparently: the consent mechanism for EEA and UK users is pending configuration and will be activated before the site starts serving advertising on its final domain. Until then the ad units do not display advertising. The detail is in the cookie policy.
5. Processing we do NOT carry out
Worth stating explicitly, because many policies declare these by default:
- We use no web analytics. There is no Google Analytics and no audience measurement system installed.
- There is no working newsletter. The form on the home page is a design mock-up: it sends data nowhere and stores no addresses.
- There is no working contact form. The one on the contact page is a leftover from the previous version of the site and is not operational; the valid channel is email.
- No comments are published on the articles, and no data is collected that way.
- There are no social network pixels and no third-party tracking tools other than the advertising described.
- We do not sell or transfer personal data to third parties.
6. Processors
To provide the service we use suppliers who may access personal data as processors, under a contract compliant with article 28 GDPR:
- Web hosting provider (Hostinger): site infrastructure and server logs.
- Email provider: handling of the communications received.
Google, in relation to advertising, does not act as a processor but as set out in section 4.
7. Minors
The site is not directed at children under 14 and does not deliberately collect personal data from them.
8. Your rights
You may at any time exercise your rights of access, rectification, erasure, restriction of processing, objection and portability, and withdraw consent given, without this affecting the lawfulness of processing carried out beforehand.
How to exercise them: by writing to info@andaventura.com, stating which right you wish to exercise. We may ask you to prove your identity. We will respond within the periods laid down by law.
Complaint to the supervisory authority: if you believe the processing does not comply with the rules, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), based in Madrid, through its electronic office.
9. Security
We apply reasonable technical and organisational measures to protect information: encrypted HTTPS connection across the site, restricted access to the administration panel and up-to-date software maintenance.
10. Changes to this policy
This policy will be updated when the processing, the suppliers or the applicable rules change. The version in force is the one published on this page.