Privacy policy

Controller

• Alonso Montalvo Arias
• info@elclubdelanzuelo.com

Data we process

• Account: email, password (hashed, we never see it), display name and language.
• Logbook: your spots (name and coordinates), trips, catches, notes and techniques.
• Forecast use: the coordinates you look up and your IP address, needed to answer and to prevent abuse.
• Browser preferences: language and last spot viewed.

Purposes and legal basis

• Providing the service (account, logbook, personalised forecast): performance of the contract you accept when signing up (Art. 6.1.b GDPR).
• Security and abuse prevention (technical logs, rate limiting): legitimate interest (Art. 6.1.f).
• We do not sell your data or use it for personalised advertising.

Your spots are private

Only you can see your spots, trips and catches. The database enforces this with per-user security rules, not just the website.

Processors acting on our behalf

• Supabase (accounts and database) – servers in the EU (Paris).
• Vercel Inc. (website hosting) – may process technical data outside the EU under standard contractual clauses.
• Railway Corp. (forecast server) – same.
• OpenFreeMap (maps): your browser downloads map tiles directly from their servers.
• Open-Meteo only receives coordinates from our server, never your IP or identity.

Retention

We keep your data while you have an account. If you delete it, your data is removed immediately and irreversibly (except provider backups, which expire in their normal cycle).

Your rights

You can access, rectify, erase, object, restrict and port your data. From "My account" you can download all your data and delete your account instantly; for anything else, email info@elclubdelanzuelo.com.

You may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minimum age

You must be at least 14 years old to create an account.