Privacy Policy

Last updated: January 2025

1. Introduction

At Spain on Foot ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and safeguard your information when you visit our website spainonfoot.com (the "Website").

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee (LOPDGDD), and other applicable data protection legislation.

2. Data Controller

The data controller responsible for your personal data is:

3. What Data We Collect

We may collect and process the following categories of personal data:

  • Identity Data: Name, username, or similar identifier when you leave comments or contact us.
  • Contact Data: Email address.
  • Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
  • Usage Data: Information about how you use our Website, including pages visited, time spent on pages, and navigation paths.
  • Marketing Data: Your preferences in receiving marketing communications from us (if applicable).

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to a newsletter, leaving comments, accepting cookies).
  • Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., website analytics, spam prevention, improving our services), provided these do not override your rights.
  • Legal Obligation: Where we need to comply with a legal obligation.

5. Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor's IP address and browser user agent string to help with spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

6. Cookies

Our Website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us analyse website traffic, remember your preferences, and improve functionality.

Types of cookies we use:

  • Essential Cookies: Necessary for the Website to function properly.
  • Analytics Cookies: We use Google Analytics to understand how visitors use our Website. Google Analytics collects data such as your IP address, pages visited, and time spent on pages. This data is transferred to and stored by Google in the United States. For more information, see Google's Privacy Policy.
  • Functional Cookies: Remember your preferences (e.g., comment form details).
  • Affiliate/Marketing Cookies: Track referrals from affiliate partners.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect Website functionality.

For more information about cookies, visit All About Cookies.

7. Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles, maps). Embedded content from other websites behaves in the exact same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

8. Data Sharing and Third Parties

We may share your personal data with:

  • Service Providers: Third-party companies that help us operate our Website (e.g., hosting providers, email services, analytics providers).
  • Affiliate Partners: When you make a purchase through affiliate links, we may receive commission data (but not your personal payment information).
  • Legal Requirements: If required by law, court order, or government regulation.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

9. International Data Transfers

Some of our third-party service providers (such as Google Analytics) are based outside the European Economic Area (EEA), which means your personal data may be transferred to and processed in countries outside the EEA.

Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.

10. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Comments: Retained indefinitely to allow us to recognise and approve follow-up comments automatically.
  • Analytics Data: Retained for up to 26 months.
  • Contact Form Submissions: Retained for as long as necessary to respond to your enquiry and for our records.

11. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to Restrict Processing: Request that we limit how we use your data.
  • Right to Data Portability: Request transfer of your data to another organisation.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at admin@spainonfoot.com. We will respond within 30 days.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

13. Children's Privacy

Our Website is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

15. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

16. Contact Us

If you have questions about this privacy policy or our data practices, please contact us at: admin@spainonfoot.com