Privacy Policy

1. Data Controller

The data controller for personal data is:
Gran Canaria Best Roads
Contact email: [email protected]

2. Personal data processed

When browsing this site, the following personal data may be processed:

• Browsing data, such as IP address, user agent, date and time of the request, automatically collected from server logs.
• Technical session cookies, necessary for the operation of the web application built with Elixir Phoenix.
• Aggregate usage data, such as pages visited, referring site, approximate country of origin, browser and device type, collected in anonymous form by our analytics service.

The analytics service does not use cookies and does not store any information on your device. Your IP address is processed only momentarily to derive an anonymous statistical identifier, and is never stored by us in a form that allows you to be identified.

This site does not require registration, login, or user account creation.

3. Purposes of processing

Personal data is processed exclusively to:

• enable correct display and navigation of the site;
• ensure the technical operation and security of the service;
• measure in aggregate form how the site is used, in order to improve its content and services;
• comply with any legal obligations.

4. Digital products and payments

The purchase of digital products takes place via redirection to an external platform, Polar.sh.

• Polar.sh operates as an independent data controller.
• Data entered during checkout (e.g. payment or billing details) is not processed or accessible by the owner of this site.
• For more information, please refer to Polar.sh's Privacy Policy.

5. Analytics

This site uses Umami, a privacy-friendly analytics service, to understand in aggregate form how the site is used.

• Umami acts as a data processor on behalf of the controller, under a data processing agreement pursuant to Article 28 of the GDPR. Analytics data is stored on servers located in the European Union.
• The provider is established outside the European Union and may make use of sub-processors based in third countries. Any such transfer is governed by the Standard Contractual Clauses adopted by the European Commission.
• The service does not use cookies and does not store any information on the user's device.
• No personally identifiable information is collected, and no cross-site tracking or profiling is carried out.
• The data collected is never sold or shared with third parties for advertising purposes.

Browsers that send a Do Not Track signal are automatically excluded from measurement.

6. Legal basis for processing

Data processing is based on:

• legitimate interest of the controller in the correct operation and security of the site, and in measuring its use in aggregate form (Art. 6(1)(f) GDPR);
• compliance with legal obligations, where applicable.

7. Data retention

Browsing data is retained for the time strictly necessary for the purposes for which it is collected, unless otherwise required by law.

Aggregate statistical data is retained in anonymous form for as long as the analytics service remains active, as it does not allow individual users to be identified and is used to observe trends over time.

8. User rights

Users may exercise the rights provided by Articles 15–22 of the GDPR, including access, rectification, erasure, and objection, by contacting the controller at the details provided.

In particular, users have the right to object at any time to processing based on legitimate interest, including aggregate analytics measurement. Enabling the Do Not Track setting in your browser is sufficient to be excluded from measurement.

9. Changes to this policy

The controller reserves the right to modify this Privacy Policy at any time. Changes will be published on this page.