Privacy policy

Controller

Sumeria Global, S.L.U. — NIF B93980084 — C/ Bolos, 15, 17800 Olot (Girona).

Privacy contact: [email protected].

Data, purpose and legal basis

  • Weekly digest: email address, saved place, language, request and confirmation dates, a daily IP fingerprint and browser family. We use these to manage double opt-in, send the requested digest and prevent abuse. The legal basis is your consent (Art. 6(1)(a) GDPR).
  • My neighbourhood and pilot: your chosen place is stored in your browser. Only if you enable permission in Mi barrio is a cookie with a pseudonymous identifier stored and the date and time, action and place code recorded when you open it or interact with a card. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw there at any time.
  • Preferences: bb-theme and other local storage preferences remember interface choices. They are functional, do not require consent and do not leave your browser on their own.
  • Security and infrastructure: Cloudflare and the server may process IP address, date, requested URL and technical data in logs needed to deliver and protect the site. The legal basis is legitimate interest in security and availability (Art. 6(1)(f) GDPR).
  • Analytics: our self-hosted Plausible installation produces aggregate metrics without cookies or persistent identifiers. The legal basis is legitimate interest in understanding overall site use (Art. 6(1)(f) GDPR).

The subscription form stores a daily salted IP fingerprint and browser family (ua_family) to limit abuse. Municipality search uses a local index. If you select “My location”, your browser obtains your coordinates to move the map; this feature does not send them to our server. The region API returns the country and autonomous community based on Cloudflare headers and does not store the query.

Recipients and transfers

Data may be processed by Hetzner (hosting in Germany), Cloudflare (proxy, CDN and security) and Resend (sending confirmation emails; also the digest once enabled). xAI (or Anthropic as an alternative provider) processes news text to extract the facts published by Live; we do not send it visitor data. Press pages are obtained through an extraction service and a proxy under our control, which never receive visitor data. When the map is displayed, your browser requests tiles directly from OpenFreeMap, CARTO and Protomaps, which receive your IP address and the area you are viewing. Cloudflare, Resend, xAI and Anthropic may process data from the United States; where applicable, transfers rely on the EU–US Data Privacy Framework or the provider’s standard contractual clauses. We do not sell visitor or subscriber data or share it for advertising; the archive of press publications, without visitor data, is part of a paid service.

Retention

  • Subscriptions: the database row for an unconfirmed request or an unsubscribed user is deleted in the weekly purge, between 30 and 37 days later. A confirmed subscription is retained while it remains active.
  • Pilot visits: 90 days in the database. The cookie may remain for up to 400 days unless you withdraw permission or delete it.
  • Input files: requests first arrive in restricted-access import files that currently have no automatic deletion; a dedicated retention period is planned.
  • Backups: the nightly backup is retained on the server for 14 days; the external backup, when active, leaves the server encrypted and is retained for up to 12 months. Data deleted from the database disappears from backups when they expire.

Your rights

You can withdraw consent for the pilot in Mi barrio and unsubscribe from the digest through the link in the email. You can also request access, rectification, erasure, objection, restriction or portability by writing to [email protected]. State which right you wish to exercise and provide the information needed to locate your data. Withdrawing consent does not affect earlier processing. You can also complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es.

Automated decisions

We do not make automated decisions with legal or similar effects on users. Territorial scores describe areas using public data; they do not profile the person visiting the site.

Last updated: 25/09/2026.