Privacy Policy

Introduction

We care about your privacy and handle your data carefully. We follow the rules of the General Data Protection Regulation (GDPR). This policy explains what data we collect, why, and what your rights are.

What data we collect

We only collect data that you give us yourself, plus some basic technical data when you visit the site.

Newsletter. If you sign up for our newsletter, we collect your email address. We use double opt-in, which means you confirm your subscription by clicking a link in a confirmation email. You can unsubscribe at any time using the link in every newsletter.

Contact form. If you contact us through our contact form, we collect your name, email address, and the message you send. We use this only to answer you.

Technical data. When you visit the site, our security and content delivery provider (Cloudflare) processes your IP address to keep the site secure and fast. If we use a spam-protection tool (Cloudflare Turnstile) on our forms, it also processes limited technical data to tell humans apart from bots.

We do not collect special categories of data (such as health, religion, or ethnicity), and we do not knowingly collect data from anyone under 16.

Why we use your data, and our legal basis

We use your email address to send you the newsletter, based on your consent. We use your contact-form details to reply to your message, based on our legitimate interest in answering people who reach out. We process technical data to keep the site secure and working, also based on our legitimate interest. You can object to processing based on legitimate interest, or withdraw your consent for the newsletter, at any time.

Who we share your data with

We do not sell your data. We share it only with the service providers we need to run the site. They process data on our behalf, under data processing agreements, and only for these purposes:

• Brevo (EU) — sends and manages our newsletter and stores subscriber email addresses.
• Zoho Mail (EU) — delivers and stores messages sent through our contact form.
• Cloudflare — provides DNS, security, caching, and spam protection; processes IP addresses.
• Independent Analytics — gives us anonymous, cookieless visitor statistics; the data stays inside our own WordPress installation and does not identify individual visitors.
• Hosting — our website is hosted on LiteSpeed Enterprise servers within the European Economic Area (EEA), with Cloudflare APO for performance.

All of these providers process data within the EU or EEA, so your data does not leave this area.

Affiliate links

GoHiddenSpain contains affiliate links. When you click one, you are taken to a partner website (for example a booking or travel provider). That partner may set cookies or track your visit on their website to record that you came from us. This happens on the partner’s site, under their own privacy policy, not ours. We recommend reading their policy before booking. We never receive your payment details.

Cookies

We do not place tracking or analytics cookies, and we do not ask you to accept cookies. Our analytics tool (Independent Analytics) is cookieless and does not identify you. We only use techniques that are strictly necessary for the site to work, such as Cloudflare’s security and spam protection. These do not identify individual users.

How long we keep your data

• Newsletter: until you unsubscribe.
• Contact messages: up to 2 years after our last contact, so we can follow up if needed.

We do not store visitors’ technical data ourselves. IP addresses are processed by Cloudflare for security, and kept only in their systems under their own retention periods.

If you want your data deleted sooner, you can ask us using the contact details below.

Your rights

Under the GDPR you have the right to access your data, correct it, delete it, restrict how we use it, receive it in a portable format, object to processing, and withdraw consent. To use any of these rights, contact us at the address below. We will reply within four weeks at the latest.

You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Changes

We may update this policy, for example if the law changes or we add new tools. We recommend checking it now and then. If we ever start using non-essential cookies, we will update the cookie section and ask for your consent first.

Contact

For any questions about this policy or your personal data:

GoHiddenSpain (operated by Proxxius)
Email: [email protected]
Chamber of Commerce number: 71895698