Cabezas del PozoCabezas del Pozo

Privacy policy

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), this page explains how personal data is processed on this website.

1. Data controller

  • Identity: Ayuntamiento de Cabezas del Pozo (Cabezas del Pozo Town Council)
  • Tax ID (CIF): P0504300E
  • Address: Plaza de la Constitución s/n, 05211 Cabezas del Pozo (Ávila), Spain
  • Email: cabezaspozo@diputacionavila.es

2. Data we process and purposes

This website has no contact form, no analytics cookies, and no visitor user accounts. The only personal data processed is the following:

Administration panel

  • Data: email address and password (encrypted) of people with access to the content management panel.
  • Purpose: managing access to editing the website's content (heritage, places, nature, festivals).
  • Legal basis: legitimate interest of the controller (Art. 6.1.f GDPR).
  • Retention period: while the account remains active.

Visitor log (QR code)

The municipality's points of interest carry (or will carry) a physical QR code. Before showing the page, the visit is logged once per person per visit — the same way a physical tourist office counts how many people come in and, when they share it, where they are visiting from.

  • Data: the date of the visit, always; country and, optionally, city and purpose of the visit (leisure, work, visiting family, or passing through, from a closed list) only if the visitor chooses to provide them. Tapping "I'd rather not say" still counts the visit, with no origin data at all. No name, email, IP address or any other identifier is ever collected, and the answer is not linked to which specific page was visited.
  • Purpose: understanding, in aggregate and anonymous form, how many people visit the municipality and, when they share it, where they come from.
  • Legal basis: legitimate interest of the controller (Art. 6.1.f GDPR). Providing country, city and purpose is always optional; counting the visit itself is not, the same way a physical tourist office counts footfall.
  • Retention period: indefinite, as this is aggregate statistical data with no identifying information.

3. Recipients of data

Data is stored on Supabase (Supabase Ireland Ltd.) servers, hosted in the eu-central-1 (Frankfurt, Germany) region, within European Union territory. No international transfers outside the European Economic Area take place.

We do not share personal data with third parties except where required by law.

4. Your rights

You may exercise the following rights at any time by writing to cabezaspozo@diputacionavila.es:

  • Access: know what data is processed about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your data.
  • Restriction: request restriction of processing.
  • Objection: object to processing based on legitimate interest.

If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

5. Cookies

This website uses only the technical session cookie required to keep you signed in to the administration panel (/admin). No analytics, advertising or third-party cookies are used. As it is strictly a technical cookie necessary for the panel to work, it does not require prior consent (Art. 22.2 LSSI-CE).

Last updated: October 2026