Privacy Policy

1. Data controller

CampingsDeTemporada.es is a personal project. To exercise your rights or for any privacy enquiry, write to our email address.

2. Data we collect

It depends on what you do here. If you only browse campsites, we collect nothing about you:

• Browsing analytics: we use Plausible Analytics, which uses no cookies and no personal identifiers. It only collects aggregate data (pages visited, country, device type).
• If you write to us: your email address and whatever you tell us, only so we can reply.
• If you create an account to review: your email address, a public name — chosen by you, and it may be a pseudonym — and the date you accepted this policy. Nothing else: no phone number, no address, no profile picture. The identifier Google gives us is stored so we can recognise you when you sign in again.
• If you write a review: the text, the rating and the date, next to your public name. Your email address is never published.
• If you save campsites to favourites: only the list of which campsites you marked and when. It is a private list: nobody but you sees it and it is never published.
• If you request the removal of a review: your name, your email and what you tell us, so that we can assess the request and reply to you. No account is needed, and none of this is published anywhere.
• If you manage a campsite's listing: your name, your role, your phone number and your email, the campsite's tax ID —which for a sole trader is their national ID number—, the changes you propose and the files you send us. Files are kept in a private store with no public address, and we only open them to load what they say. None of this is published: what appears on the listing is the campsite's information, once reviewed.

We do not sell or share data with anyone, and there is no profiling or automated decision-making. Two services process data on our behalf and only for this: Resend sends the campsite management emails (the sign-in link and notices about your requests) and Vercel Blob stores the files campsites send us.

3. Purpose and legal basis

Analytics are processed in aggregate to improve the service (legitimate interest, Art. 6(1)(f) GDPR). Your account data is processed to provide the service you asked for — identifying you and publishing your signed reviews (Art. 6(1)(b) GDPR) — and publishing your review relies on your consent when you submit it (Art. 6(1)(a) GDPR), the date of which we store. The data in a removal request is processed to handle the complaint and to be able to account for how it was resolved (legitimate interest, Art. 6(1)(f) GDPR). The data of whoever manages a campsite's listing is processed to check that they represent it, review what they propose and reply to them about it (performance of the service requested when accepting the conditions for campsites, Art. 6(1)(b) GDPR). If you email us, we process it to reply to you and nothing else.

4. Cookies

We use no advertising, tracking or third-party cookies, and Plausible Analytics works without cookies. If you sign in, three strictly necessary cookies are used: the session cookie (knowing who you are as you browse), the CSRF protection cookie (stopping another site acting on your behalf) and the one remembering which page to return to after signing in. Without them the service you asked for cannot be provided, so the law (Art. 22.2 LSSI) does not require asking your permission for them — which is why you will not see a cookie banner. They disappear when you sign out.

5. How long we keep it

Analytics data is aggregated and cannot identify anyone. Your account data, your favourites and your reviews are kept while your account is open: if you delete it, they are gone immediately. Removal requests are kept while the review they refer to exists — if that review disappears, the request is deleted with it — and, in any case, for as long as we need to account for the decision. Manager data is kept while you have your account: if you delete it, it is deleted along with any files you sent; changes already published stay on the listing, without your name. Files from a resolved request are deleted once 30 days have passed since it was resolved. Emails you send us are kept only as long as needed to handle the enquiry.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, object to the processing of and request the portability of your data. If you have an account, two of those you exercise yourself, instantly, from your account: changing your public name (rectification) and deleting the whole account with all your reviews —published ones included— and your favourites (erasure). We keep no copy. For anything else, write to our email address. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. Your reviews

Reviews are published with your public name and the date, never with your email address. All of them are reviewed by hand before being published, and we may decline to publish or may remove those that insult, disclose other people's data or do not describe a real stay. We do not say or imply that reviewers have a verified stay, because we do not verify it. If a review affects you, you can request its removal. The detail is in the review guidelines.

8. Changes to this policy

This policy may be updated as the service evolves. Relevant changes will be announced on this page.