Privacy policy

1. In short

• You do not need to register or give us any data to browse the calendar, the map or transport information.
• We do not use analytics, advertising or tracking tools, and we never sell or share your data.
• We only process personal data when you submit a fiesta, when an organiser has a panel account or when you write to us.

2. Data controller

• Controller: Fabio José González Waschkowitz (KORA SOLUTIONS)
• NIF: 78765575M
• Address: Calle San Pedro 24/10, 35572 Tías, Las Palmas
• Contact email: info@koradigitalsolutions.com

3. What data we process and why

Browsing the website and the app

• Data: IP address, browser or device type, page requested and date and time of the request.
• Purpose: to show you the content, keep the service secure and detect technical errors.
• Legal basis: our legitimate interest in providing a secure, working service (Art. 6(1)(f) GDPR).
• Retention: technical logs are deleted automatically within a few days.

Fiesta submission form (website)

• Data: the fiesta details (title, description, date, venue, organiser and link), the poster or photo if you attach one and, optionally, a contact email or phone number. To stop automated submissions, the form uses Cloudflare Turnstile, which analyses technical signals such as your IP address and browser.
• Purpose: to review the fiesta, publish it in the calendar and, if needed, contact you to clarify details. Your contact details are never published.
• Legal basis: your consent, given when you send the form and which you can withdraw at any time (Art. 6(1)(a) GDPR); for the bot check, our legitimate interest in protecting the service from abuse (Art. 6(1)(f) GDPR).
• Retention: contact details, for as long as needed to review the submission and no longer than 12 months; published fiesta information stays in the calendar while it is of informational interest, unless you ask us to remove it.

Organiser accounts (creator panel)

• Data: login email and password (stored encrypted), display name and the public profile details you choose to add (name, logo, bio, website, Instagram and WhatsApp), plus the events you publish.
• Purpose: to give you access to the panel, publish your events and show your public organiser profile. Profile and event details are visible to anyone.
• Legal basis: the relationship established when you accept the invitation and use the panel (Art. 6(1)(b) GDPR).
• Retention: while the account is active. If you ask to close it, we delete the account and profile, except for any data we are required by law to keep.

Contacting us by email

• Data: your email address and whatever you tell us.
• Purpose: to answer your query or request.
• Legal basis: your consent when you write to us and, when you exercise your rights, compliance with a legal obligation (Art. 6(1)(a) and 6(1)(c) GDPR).
• Retention: as long as needed to deal with your message and, for rights requests, for the statutory periods during which liability may arise.

Mobile app

The fiestas you save as favourites are stored only on your device: they never reach us and we cannot see them. The app does not access your location, contacts or microphone. It only asks for access to your photo library if you are an organiser and want to upload an event poster, and only the image you choose is sent.

4. Who processes your data

We do not sell or share your data with third parties unless required by law. To run the service we rely on providers that process data on our behalf (processors), under contracts that require them to protect it:

• Cloudflare, Inc.: website hosting, content delivery network, security and bot protection (Turnstile). It may process data outside the European Economic Area; those transfers are covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
• Supabase, Inc.: database, login accounts and image storage. Data is hosted on servers in London (United Kingdom), a country covered by a European Commission adequacy decision; any access from other countries is covered by standard contractual clauses.
• OpenFreeMap (Hyperknot Software Kft., Hungary): serves the map images. Your browser or the app requests them directly, so it receives technical connection data; according to its policy, it does not use cookies or routinely log IP addresses.

If you download the app, Apple (App Store) or Google (Google Play) process the download data under their own policies.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, by emailing info@koradigitalsolutions.com. Tell us which right you want to exercise; if we have reasonable doubts about your identity, we may ask for additional information to verify it. We will reply within one month at most.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).

6. Children

Fiestas Lanzarote is not aimed at children under 14. If you are under 14, please do not send us personal data without the consent of your parent or guardian.

7. Security

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), panel access only with a username and password, role-based permissions in the database, bot protection on the form and human review of submissions before publication.

8. Automated decisions

We do not make automated decisions or build profiles with your data.

9. Changes to this policy

If we change how we process data (for example, when adding a new feature), we will update this policy and the date at the top. If the change is significant, we will announce it prominently.