Privacy policy

Data controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 (LOPDGDD), the Asociación de Corraleros y Pescadores a Pie «Los Corrales de Rota» sets out the conditions applying to the processing of personal data collected through this website.

• Name

  Asociación de Corraleros y Pescadores a Pie «Los Corrales de Rota».

• Tax ID (NIF)

  G72275449.

• Postal address

  Recinto Ferial s/n, 11520 Rota (Cádiz), Spain.

• Data protection contact

  info@loscorralesderota.com.

What data is processed, why, and on what legal basis

This website processes personal data in two cases, and only two.

• General contact form

  Name, email address and the text of the message are collected.

  • Purpose: To receive, handle and answer enquiries, requests for information or suggestions addressed to the association.
  • Legal basis: Express consent of the data subject (art. 6.1.a GDPR), given by submitting the form.
  • Spam filter: To hold back junk mail, the server checks how long the form took to fill in and the IP address it was sent from, and writes discarded submissions to a temporary log.
• Guided visit booking form

  Name and email address are collected; a phone number is optional.

  • Purpose: To manage in full the allocation of places, confirmation, coordination and attendance for visits to the Natural Monument, by the association itself.
  • Legal basis: Steps taken at the data subject's request prior to entering into a contract (art. 6.1.b GDPR).

No commercial use

The association guarantees that the data provided through both forms is handled directly and internally, without any intermediary or external data processor.

It will under no circumstances be used to build advertising databases or to send newsletters, and it will not be transferred or sold to third parties for promotional purposes or for anything other than handling the enquiry or the booking itself.

Booking the guided visit

The online booking for the guided visit (reservas.loscorralesderota.com) asks for your name, your email address and, if you wish to leave one, a phone number, together with the number of places: how many adults and how many under-14s. That is used for exactly what you ask for when booking: holding your place, confirming it with a code sent to your email, sending you the confirmation and the reminder, and letting you know if the visit is called off or changed. It is used for nothing else: no advertising, no mailing lists.

No data about the children is stored: only how many are coming, to apply their rate. The booking is always made by an adult with their own details.

Booking is free, requires no account and sets no cookies, and no payment details are asked for: the visit's amount is paid in person on the day of the visit.

Alongside the booking, the IP address it was made from is recorded, solely to prevent abuse of the system. Everything is processed and stored on the association's own systems, and the booking emails are sent from our own mail server.

The confirmation email includes a management link you can use to cancel your booking at any time, without asking anyone.

How long data is kept

Data is kept for as long as strictly necessary for the purpose that motivated its collection and, after that, for the period during which legal liability could arise. In practice, these are the periods the system applies.

• Contact form data

  Kept for as long as needed to handle and answer the enquiry. It is then deleted, unless there is a legal obligation to keep it.

• Booking data

  Deleted automatically twelve months after the date of the visit.

• Emails already sent

  The records of the booking emails are deleted after ninety days.

• Internal activity log

  The system records the operations carried out so that incidents can be investigated. The IP address in those records is erased after ninety days, and the record itself after twenty-four months.

Recipients and international transfers

Personal data is not transferred or disclosed to third parties, except where the law requires it. All handling of the contact and booking forms is carried out directly by the association.

The data collected through those two forms is not subject to international transfers outside the European Economic Area: the servers hosting it are in Spain.

A separate matter is the third-party services the website uses to measure its audience and to display blog news, which may involve processing by their providers. These are set out one by one in the cookie policy.

Cookies and measurement

This site loads the Google Ads tag AW-17862259314 and Google Analytics (G-3EBHR21DK0) to measure which adverts bring visitors to the monument and which pages are read. Neither runs until you accept them in the cookie notice: by default advertising and analytics storage are denied and Google receives no identifiers.

The news section links to our blog, hosted on Blogger (Google). The small photo for each item and the list of posts are downloaded from Google's servers, which learn the IP address of your connection when serving them. No measurement or advertising cookies are set for this reason. Whatever Google does with that data is governed by its own policies, not by this one.

What is stored, for how long, and how to change your mind is set out in the cookie policy.

Your rights

You may exercise your data protection rights at any time, free of charge.

• Access

  To find out what personal data we are processing.

• Rectification

  To ask for inaccurate or incomplete data to be corrected.

• Erasure (right to be forgotten)

  To ask for data to be deleted once it is no longer necessary for the purposes it was collected for.

• Objection

  To ask that your data not be processed for specific purposes.

• Restriction of processing

  To ask for your data to be flagged so that its future processing is restricted.

• Portability

  To ask for your data in a structured, machine-readable format.

How to exercise them

To exercise any of these rights, send a written communication together with a copy of your official identity document to info@loscorralesderota.com.

If you believe the processing breaches the law in force, you have the right to lodge a complaint with the competent supervisory authority: the Spanish Data Protection Agency (aepd.es).

This English text is provided for information only; the Spanish version is the legally binding one.

Last updated: 10 August 2026.