Privacy Policy

This policy explains which personal data we process, for what purpose, on what legal basis, and
what rights you have, in accordance with the General Data Protection Regulation (GDPR,
Regulation (EU) 2016/679) and, for users in the United Kingdom, the UK GDPR.

The essentials in three sentences: this website is a free, advertising-funded information
service. We do not require any data from you to use it: no account, no sign-up, no newsletter.
The only data processed comes from advertising and from operating the website — and advertising
data only if you consent.

1. Data controller

Trade name: TEKY
Place of establishment: Spain
Contact: contact form

2. What data we process

This website has no members’ area and no user registration, and no newsletter. We do not require
any data to access the content.

• Advertising and usage data (only with your consent): cookie identifiers, IP address, device
  and browser type, pages viewed and interactions with ads. Collected by Google as part of ad
  delivery.
• Data you send us voluntarily: if you write to us through the contact form, we process the data
  you provide there (name or alias, email address and the content of your message).
• Server log files: our host stores connection data (IP address, time, requested resource) for
  security and operational reasons.
• Comment data: if you post a comment on the blog, we process the name or alias and the email
  address you provide, the comment text and, for spam prevention, your IP address and browser data.
  Your name or alias and comment are public; your email is not. If your email is registered with
  Gravatar, your profile picture may appear next to the comment.

We do not process special categories of personal data, and we do not sell your data.

This website does not use Google Analytics, Microsoft Clarity or any other third-party audience-measurement tool. Measurement is first-party and cookieless, and is described under “First-party analytics (no cookies)”.

First-party analytics (no cookies)

To know which pages are read and whether the site’s tools are actually used, this site uses first-party analytics (Umami) hosted on a server under our control. It sets no cookies and creates no persistent identifiers on your device, and it cannot recognise you across visits or track you across other websites.

What is recorded: the page viewed, where you arrived from (search engine or link), your browser language, browser, operating system, device type, screen size and, where available, an approximate country; plus anonymous interactions within the page, such as using the internal search or pressing play. Your IP address is never stored: it is used only in transit to derive those fields and to tell visits apart within the same day, through a hashed value that is regenerated daily.

The legal basis is legitimate interest (Art. 6(1)(f) GDPR) in understanding, in aggregate, how the site is used. Because nothing is stored on or read from your device, this measurement does not require your prior consent and therefore does not appear in the cookie panel.

The data is kept on our own server and is not shared with third parties, not sold and not used for advertising. Requests travel through Cloudflare, Inc. (United States), which acts as a delivery and protection network and therefore sees your IP address in transit, as it does for the rest of the site.

3. Purposes

• Funding the website through advertising: serving ads, measuring their performance and
  preventing ad fraud.
• Answering your enquiries sent through the contact form.
• Security and operation: keeping the website available and protecting it from abuse.
• Publishing and moderating comments submitted to the Travel Blog.

4. Legal bases

• Personalised advertising: your consent (Art. 6(1)(a) GDPR and the ePrivacy rules / UK PECR),
  given through the consent banner. You may withdraw it at any time (see the
  Cookie Policy); withdrawal does not affect the lawfulness of processing carried
  out beforehand.
• Answering your messages: your consent, given by voluntarily submitting the form.
• Security and log files: legitimate interest (Art. 6(1)(f) GDPR) in the secure, uninterrupted
  operation of the website.
• Comments: your consent (Art. 6(1)(a) GDPR), given when you voluntarily submit a comment. You
  may request its removal at any time through the contact form.

If you refuse, the website remains fully usable. You will simply see non-personalised
advertising.

5. Retention

• Your cookie choice: stored for the period set by the consent tool (see the Cookie Policy);
  after that we ask again.
• Advertising data: stored by Google under its own policies (links in section 6).
• Contact-form messages: kept until your enquiry has been dealt with, then deleted.
• Server log files: kept for a limited period, according to our host’s rules.
• Comments: remain published while the article is available, unless you request removal; data
  used only for anti-spam may be retained for the period needed to protect the website.

6. Recipients and international transfers

About transfers outside the EEA — please read this carefully:

• This website is stored on servers in the European Union (Amsterdam, the Netherlands), so the
  hosting of your data does not by itself involve an international transfer. However, our host is
  BANAHOSTING.COM LLC, a company incorporated in the United States, which means staff in the US
  may access data for management and support. According to our host’s privacy policy, any such access
  relies on the European Commission’s Standard Contractual Clauses (Art. 46(2) GDPR).
• Google may also process data in the United States, safeguarded by the guarantees of Chapter V
  GDPR (Standard Contractual Clauses and/or the EU-US Data Privacy Framework). Details in the
  links above.

Note: the level of data protection in the United States is not fully equivalent to European
law; in particular, US authorities may, under certain conditions, access data. If you do not want
this, you should not use this website.

7. Your rights

Under the GDPR (and the UK GDPR) you have the right to:

• Access (Art. 15) — whether and which data we hold about you, together with a copy.
• Rectification (Art. 16) of inaccurate data.
• Erasure (Art. 17), the “right to be forgotten”.
• Restriction of processing (Art. 18).
• Object (Art. 21) to processing based on legitimate interest.
• Data portability (Art. 20).
• Withdraw your consent at any time, without affecting the lawfulness of prior processing.

How to exercise them: write to us through the contact form and state which
right you wish to exercise. We reply within one month. Exercising your rights is free of
charge.

We do not require a copy of your ID to exercise your rights. We only ask for additional
information where we have reasonable doubts about your identity, and only to the extent necessary.

Right to complain: you may complain to the supervisory authority of your place of residence. As
the controller is established in Spain, you may also contact the Spanish Data Protection Agency
(AEPD) — www.aepd.es. Users in the United Kingdom may contact the
Information Commissioner’s Office (ICO) — ico.org.uk.

8. Minimum age

This website is aimed at adults, not children. We do not knowingly collect data from minors.

9. Data security

We apply appropriate technical and organisational measures: encrypted transmission (HTTPS), a web
application firewall, security updates and restricted access to the administration of the website.

10. Changes

This policy may be updated to reflect legal developments or changes to the website. The version
published on this page is the one in force.

Last updated: 24 July 2026.