Privacy and data protection

Quién es el responsable

Quien decide qué se hace con tus datos en AndalucíaYa es:

• Owner: FJCG EFICATIO · eficatio.com
• Tax ID (NIF): 45298716D
• Address: Calle Alfonso Gurrea, 13 · 52001 Melilla (España)
• Email: hola@andaluciaya.com

General principle

AndalucíaYa collects as little data as possible, and only to provide the service. Privacy by default: if something isn't needed, it isn't stored.

What data we process

• Account: name, email and, optionally, phone number.
• Listings: the content you post, including images.
• Security: access logs and incidents, with limited retention.
• Portal usage: aggregated metrics without identifying the person.
• What you search for: we keep the words you type in the search box, with nothing that says who you are, for six months. Those searched for by many different people appear as “Most searched”; never what a single person searches for, nor numbers, emails or addresses.
• And also: your alias, if you take part in the ranking; your business details, if you post as a professional (company name, tax ID and address); the contact you leave on a job offer; your phone alerts; and your vote in polls, without your name.
• Tus secciones favoritas: solo si tienes cuenta, qué secciones abres y cuántas veces, para poder ordenarte los accesos de la portada. Se explica más abajo.

If you post something, we store where from

When someone publishes something on the site —an ad on the noticeboard, a job offer through the form or a photo for the ranking missions— we keep the IP address it was sent from and the exact date and time, together with the browser used.

We do this for a specific reason: scams and impersonations occur on the noticeboard and in job offers. If someone is harmed and reports it, a court or the police may request this data, and without it the only possible answer would be "we don't know." This record is not published anywhere nor shown to other users: only the portal's moderators can see it, and it is only handed over if requested by a competent authority.

Not everything is kept for the same length of time. The IP address and the contact details you provided are kept for 12 months. The browser and technical headers are deleted earlier, at 6 months, since they are only useful for reviewing a recent incident. After that they are deleted automatically: there is no need to request it.

The record continues to exist even if the post is withdrawn or deleted, precisely because it may be needed in the posts that have to be withdrawn.

These periods are our own decision, not a legal obligation: Spanish data retention law applies to telecommunications operators, not a portal like this one. We have set them at the shortest period that is useful for the stated purpose. If data has been deleted because its period has expired, we no longer have it and cannot recover it, even if an authority requests it afterwards.

The only exception: if before that date we receive a request from a court, the Public Prosecutor's Office or the police regarding a specific post, deletion of that record is paused while the proceedings last. Only that one, not the others.

This does not apply to browsing the portal: we do not store your IP for that, as explained just below.

Si tienes cuenta: qué secciones usas

La portada tiene seis accesos rápidos y puedes elegir cuáles y en qué orden. Para poder ofrecerte el botón «ponme los que más uso», si tienes la sesión iniciada apuntamos qué secciones abres y cuántas veces.

Qué se guarda exactamente: la sección —«farmacias», «agenda»— y el número de veces. También el día de la última, sin la hora. No se guarda la dirección de la página, ni la hora, ni desde dónde, ni en qué orden las visitaste. Con lo que hay se pueden ordenar seis botones y no se puede reconstruir tu día.

Para qué se usa: solo para eso. No se usa para recomendarte contenido, ni para segmentar publicidad, ni para estadísticas, y no sale del portal ni se comparte con nadie.

Cuánto se guarda: hasta que tú lo borres. No caduca solo. Tienes un botón para borrarlo entero en «Mi Andalucía», junto al que lo usa, y borrar la cuenta también se lo lleva.

Si no tienes cuenta, no se apunta nada de esto: no hay dónde guardarlo y el portal funciona igual.

What we do NOT do

• While you browse, your full address is only used for the session and is deleted within a few hours. We keep the one from your last sign-in to your account and that of anyone who reports an ad. In the statistics it is stored truncated: from 79.117.199.107 we keep 79.117.0.0. And to count different visitors we don't use that address but a daily identifier that is no longer valid the next day. Posting is the exception, and it is explained above.
• We do not request your location when you enter. Only if you use a feature that needs it.
• We don't show your email or phone number in the public HTML of ads, unless you post as a professional: then the law requires your contact details to be shown.
• We do not share data with third parties for advertising purposes.

Cómo contamos las visitas

Miramos cuánta gente entra y qué secciones usa, porque es lo único que nos dice si esto le sirve a alguien. Lo hacemos con un programa llamado Matomo instalado en nuestro propio servidor: los datos no salen de ahí, no se ceden y no se venden.

• Sin cookies. No se guarda nada en tu navegador para medir.
• Sin tu dirección completa, como se explica arriba.
• Si tu navegador pide que no te sigan —la opción «Do Not Track»—, no se te cuenta.
• Lo que se guarda con detalle se borra a los seis meses. Después solo quedan los totales, que no señalan a nadie.
• No se cruza con otros datos, no se hacen perfiles y no se usa para publicidad.

What we store in your browser

• The session and form protection: while you browse, a few hours.
• Your language, if you change it: one year.
• The order of your front page, if you make it yours: one year.
• Your stop, your lines and your topics in My Andalucía: one year.
• Your answer to the cookie notice: six months.
• The maps and videos you agreed to load: six months.
• Whether you've already seen a full-screen ad, so it isn't repeated: the hours that ad sets.
• The days you've visited, to offer you to install the site on your phone: the last ten, only if you accept in the cookie notice.
• And only if you accept them, Google's: Google Analytics stores _ga and _ga_… for up to two years, and Google's ads store their own (such as __gads and __gpi) for up to thirteen months.

None of this leaves your browser, except the session.

If you make the front page yours without an account, we save that order in your browser so it looks the same next time. It is only saved when you press “Done”, it contains nothing that identifies you, and it is deleted if you choose “By the time of day”. If you have an account, it is saved in your account.

Google Analytics, only if you accept

On top of the above we use Google Analytics, which does store cookies in your browser and sends the data to Google. It is not loaded until you accept it in the notice shown when you arrive: if you say no, or say nothing at all, not a single line of it is downloaded and the site works exactly the same.

• It is asked to truncate your IP address before storing it.
• If you accept, we also store in your browser the day of your last visit, to know whether you come back and after how many days. It contains nothing that identifies you: all the site receives is “came back after so many days”. If you say no, it is deleted.
• Your choice is stored in your browser. To change it, press “Cookies” at the bottom of any page and we will ask you again.
• The data is handled by Google under its own terms, which we do not control.

Content from other sites

Some pages show maps and videos that are not ours, and you should know because it is not free in privacy terms: when they load, your browser connects directly to those servers, which see that connection and your IP address just as any website you visit would.

• OpenStreetMap, in the maps of the sections that have them.
• TMDB, in the cinema posters.
• Other media, in the photos of their headlines.
• VesselFinder, in the ships map in the ships section.
• Some photos in the guide and places are loaded from Wikimedia Commons servers, so your browser connects to them when you view them.
• YouTube, in the videos that come with some news stories. It loads from its “no cookies” address (youtube-nocookie.com), which does not store cookies in your browser until you press play.

Los metemos aislados en un marco propio, de forma que su código no puede acceder a tu sesión ni a nada que guarde este portal. Aun así, la conexión a su servidor ocurre, y por eso te lo contamos aquí en vez de darlo por sabido. Los mapas y las fotos se cargan al llegar a ellos; los vídeos y los mapas grandes, solo si los pulsas, y lo recordamos seis meses.

Por qué podemos tratar cada dato

Tu cuenta, tus anuncios y lo que publicas: porque nos pides el servicio y sin esos datos no se puede prestar.

Desde dónde se publicó algo: por el interés legítimo de poder perseguir estafas y suplantaciones, y para poder atender lo que nos pida un juzgado o la policía.

Cuánta gente entra y qué secciones usa, con nuestro propio contador y sin cookies: por el interés legítimo de saber si el portal le sirve a alguien, sin identificar a nadie.

Google Analytics y los avisos al móvil: solo con tu consentimiento, que puedes retirar cuando quieras, y tan fácil como lo diste.

Some alerts may carry a line from an advertiser at the end, marked “Advertising”. Never the storm alerts.

What you write to us, by email or by WhatsApp: to reply to you and, if it is a news story or a letter, to decide whether to publish it; if it is published, with your name only if you tell us so. If you write to us on WhatsApp, that message is also handled by WhatsApp (Meta).

Quién más ve los datos

El alojamiento: el portal funciona en un servidor contratado a OVHcloud, una empresa europea. Guarda los datos por encargo nuestro y no puede usarlos para nada más.

Anthropic, for your emails, your ads and your searches. When you write to the newsroom, your email goes through Anthropic’s artificial intelligence service, in the United States, which helps us sort it. So does the text of an ad before it is published, to check that it follows the rules, and what is typed into the search box, so that it learns how people ask. Anthropic handles it on our behalf and cannot use it for anything else.

Las copias de seguridad: cada noche se hace una copia, se cifra en nuestro servidor y se guarda cifrada en Cloudflare R2. La clave para abrirla no sale de nuestras manos, así que quien la guarda no puede leerla.

Google, solo si aceptas Google Analytics. Google es una empresa de Estados Unidos, así que esos datos salen de la Unión Europea. Google está adherida al Marco de Privacidad de Datos UE-EE. UU., que la Comisión Europea considera que protege los datos igual que aquí.

El servicio de avisos de tu navegador, solo si activas los avisos. El aviso viaja cifrado por el servicio de notificaciones de tu navegador (Google, Apple o Mozilla), que lo entrega sin poder leer lo que dice.

Whoever posts an ad, only if you write to them. If you write to an advertiser, we pass on your email so they can reply.

Images

The photos you upload are reprocessed on the server: they are converted to a safe format and the original metadata is discarded, including the geolocation information that many cameras include.

Your rights

Puedes acceder, rectificar y eliminar tus datos desde tu cuenta. Al eliminar la cuenta se borran tus anuncios, tu foto, tu enlace con Google y tus datos de profesional, y tu nombre y tu correo se sustituyen. Solo guardamos, tres años, una anotación de que la cuenta se borró, por si hay que demostrarlo; y lo que guardamos de desde dónde publicaste algo se queda el tiempo que se dice arriba, por si llega una denuncia. Para cualquier otra solicitud, escríbenos a hola@andaluciaya.com.

También puedes pedirnos una copia de tus datos en un formato que puedas llevarte a otro sitio, oponerte a que usemos alguno, pedir que dejemos de usarlo mientras se resuelve una queja, y retirar tu consentimiento a Google Analytics o a los avisos cuando quieras, sin que eso afecte a lo que ya se hizo antes.

Y si crees que no tratamos bien tus datos, puedes reclamar ante la Agencia Española de Protección de Datos, en aepd.es.

Retention

Each type of data has its own time limit: technical logs are deleted after 14 days and security logs after 90. The only thing kept long term is the record of what is done in the administration panel, so we know who changed what.

We keep what you write to us and what we reply for four years from the last message, in case we ever need to prove what was said. If it became a news story, for as long as that story stays published.

Qué secciones usas es la excepción y está dicho arriba: no caduca solo, se guarda hasta que tú lo borres.

The record of where something was published from has two periods —6 months for the technical detail and 12 for the IP address— applied by a single daily task. They are explained above.