Data controller
The controller of any personal data processed on this site is its owner, who can be contacted at info@ultraciclismo.es.
What data we process and why
At present the site has no forms, user registration, comments or newsletter. The only data processed is technical browsing data:
- IP address and browser data, which remain in the hosting server logs. Purpose: security and operation of the site. Legal basis: legitimate interest (Art. 6.1.f GDPR). Retention: as set by the hosting provider for its logs.
- Visit statistics. We measure which pages are visited with Umami, a cookie-free analytics tool: it records the page visited, the site you came from, browser, system and device type and country, without storing your IP address or identifying you personally. Purpose: to know which content is of interest. Legal basis: legitimate interest (Art. 6.1.f GDPR). If your browser sends the “Do Not Track” signal, your visit is not measured.
- Your cookie choice and, if you change language, your language preference, stored in your browser. Legal basis: necessary to provide the service you requested.
If a form, newsletter or advertising is added in the future, this policy will be updated beforehand and your consent will be requested where required.
Third-party services that receive your IP address
- Analytics: Umami Software, Inc. (Umami Cloud, with data in its European region), acting as processor of the site statistics.
- Web hosting: BanaHosting, provider of the server where the site is hosted.
- Maps: when you view the map of a route, your browser requests the map images from the OpenStreetMap Foundation servers (tile.openstreetmap.org). If you turn on the 3D view, data is also requested from OpenFreeMap (tiles.openfreemap.org) and Amazon Web Services (s3.amazonaws.com).
- Videos: YouTube trailers are not loaded until you press the play button. They are then loaded from youtube-nocookie.com (Google) and YouTube’s privacy policy applies.
Recipients and international transfers
No data is disclosed to third parties other than the providers mentioned above, which act as processors or as controllers of their own services. Some (Google, Amazon) may process data outside the European Economic Area with the safeguards provided by the GDPR, such as standard contractual clauses.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to the contact email stated on this page. If you believe your data is not being processed properly, you have the right to lodge a complaint with the supervisory authority:
Spanish Data Protection Agency (Agencia Española de Protección de Datos) — Edificio Cuzco IV, Paseo de la Castellana 141, planta 9, 28046 Madrid · www.aepd.es · e-office: sedeaepd.gob.es
Minors
The site is not aimed at children under 14 and does not knowingly collect data from them.