Privacy policy

Who is responsible for your data?

The data controller is canarydays.com (the site operator). Legal identification details are available on request through the contact form at /contact.

What data do we process and why?

• Contact form. When you write to us, we receive your name, email address and message. We store them on our own server and use them only to answer you. Legal basis: your request and our legitimate interest in replying.
• Newsletter. If you sign up, we store your email address on our own server only to send you the newsletter. Legal basis: your consent. You can unsubscribe at any time using the link in each email or by asking us through the contact form.
• Server logs. Like any website, our server keeps standard technical logs (such as IP address, date and time, page requested and browser type) to keep the site running and secure. They are not used to build profiles.

We do not sell personal data and do not share it with third parties for their own marketing.

Do we use analytics or advertising trackers?

No. Canary Days uses no analytics tools and no advertising trackers. See the cookie policy for the only cookies the site sets.

Which third-party services can receive data?

• Map tiles. Our maps load tiles from OpenFreeMap. When a map is displayed, your browser connects to their servers, so your IP address reaches OpenFreeMap, as with any externally hosted resource.
• Affiliate links. Some accommodation links go through Stay22 and lead to Booking.com. Once you click such a link, you are on their services and their own privacy policies apply.

How long do we keep data?

Contact messages are kept for as long as needed to deal with your request and any follow-up. Newsletter addresses are kept until you unsubscribe. Server logs are kept for a limited period for security and then deleted.

What are your rights?

Under the GDPR you can request access to your data, its rectification or erasure, and you can object to its processing (you may also ask to restrict processing or to receive your data in a portable format). To exercise any of these rights, use the contact form at /contact.

If you believe your data has been mishandled, you have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD).

Changes to this policy

If the way we process data changes, we will update this page.