Privacy Policy

Last updated: 2026-04-26

Who is the data controller

The data controller is J. Alonso, the editor and operator of goingspanish.com, based in Madrid, Spain. Contact for privacy matters: privacy@goingspanish.com.

What data we collect, why, and on what legal basis

  • Necessary cookies and storage (session, security, consent state): legal basis: legitimate interest (Art. 6.1.f GDPR). Always active. Cannot be opted out without breaking site functionality.
  • Analytics — Google Analytics 4 (measurement ID G-LCB14FDXBY): aggregated traffic statistics. Legal basis: consent (Art. 6.1.a GDPR). Loaded only after explicit consent via banner. Operates under Google Consent Mode v2; before consent, no analytics or advertising cookies are set. Data is processed by Google LLC under the EU-U.S. Data Privacy Framework. Retention: as configured in GA4 (default 14 months from last activity).
  • Privacy-friendly analytics — Umami (self-hosted on control.marques.com.es): aggregated, cookie-less metrics about site usage. Legal basis: legitimate interest (Art. 6.1.f GDPR). No personal data leaves the operator infrastructure.
  • Affiliate redirects (/go/<code>): when you click an affiliate link, we log the click locally (timestamp, hashed IP, user agent, referer, target affiliate code) for fraud prevention and reporting. Legal basis: legitimate interest. Retention: 12 months. We then redirect you to the affiliate's site, which has its own privacy policy.
  • Email (when you contact us): used only to reply. Legal basis: consent / pre-contractual measures. Not added to any marketing list.
  • AdSense / advertising: NOT currently active. If activated in the future, this policy will be updated and consent re-requested.

Cookies and tracking

Detailed table of cookies and similar technologies used on this site is available at /cookies.

Recipients and international transfers

Google LLC (United States) under the EU-U.S. Data Privacy Framework. No other international transfers.

Your rights under GDPR

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent at any time, and lodging a complaint with the Spanish Data Protection Agency (AEPD). To exercise any of these rights, email privacy@goingspanish.com.

Changes to this policy

Material changes are announced on the home page for at least 14 days before taking effect.