Privacy Policy

Last updated: 3 July 2026

At ciclismoenmarcha.com (hereinafter, «the Site») we respect your privacy and comply with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data (LOPDGDD).

1. Data controller

• Owner: ciclismoenmarcha.com
• Contact: info@ciclismoenmarcha.com

2. Data we process

• User registration: email and hashed password, needed to create your account and access personalised features (favourites, publishing routes, newsletter).
• Published content: cycling routes the user chooses to share (name, distance, elevation, start/finish, climbs, links).
• Browsing data: IP address, device type and pages visited, for statistical and security purposes.

3. Purpose and legal basis

• Service delivery and account management — contract performance.
• Sending updates and newsletter with upcoming rides — user consent, revocable at any time.
• Site improvement, fraud prevention and security — legitimate interest.
• Compliance with applicable legal obligations.

4. Retention

We keep the data while the account is active and, after cancellation, during the legal limitation periods for potential liabilities.

5. Recipients

We do not share data with third parties except by legal obligation. We use infrastructure providers (hosting, database and authentication) acting as processors under contract pursuant to Art. 28 GDPR, hosted in the European Union or with adequate international transfer safeguards.

6. Rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by emailing info@ciclismoenmarcha.com. You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply reasonable technical and organisational measures to protect the data, including encryption in transit (HTTPS) and access controls.

8. Changes

We may update this policy to reflect legal or service changes. We will always publish the current version on this page.