Privacy policy

This notice explains how the personal data of visitors to afortia.com is processed, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR) and the UK GDPR.

Data controller

Stefano Pasquali (Afortia), Avenida Eugenio Alfonso Domínguez 5, 38660 Adeje (Santa Cruz de Tenerife), Spain, NIE (Spanish tax ID) Z1074288D. Email: info@afortia.com. Full details in the legal notice.

What data we process

• Browsing data: IP address, date and time of the request, page visited, browser and operating system. It is logged automatically by our hosting provider to run and secure the site.
• Data you send us: if you write to info@afortia.com, we process your email address and the content of your message.
• Cookies: see the cookie policy.
• Visit statistics: we use Vercel Web Analytics, which does not use cookies. Each visit is recognised by an anonymous code derived from the request, which is discarded after 24 hours. We only see aggregated data: page visited, referring site, approximate country and city, operating system, browser and device type.

The site has no sign-up forms and does not collect payment data.

Purposes and legal bases

• Aggregated visit statistics, to understand which pages are useful: legitimate interest (Art. 6(1)(f) GDPR).
• Running the site and protecting it from abuse: legitimate interest (Art. 6(1)(f) GDPR).
• Replying to your messages: your request (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).
• Travelpayouts affiliate tools: only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

Who we share data with

• Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States (website hosting and visit statistics), as data processor.
• Travelpayouts, a brand of Go Travel Un Limited, a Hong Kong company (no. 1658681), Suite 1504, 15/F, Chinachem Tower, 34–37 Connaught Rd Central, Hong Kong, only if you accept cookies. See its privacy policy.
• Google (Google Fonts), only if you accept cookies: the Travelpayouts tool loads some fonts from Google's servers, which receive your IP address.
• Microsoft (Microsoft 365, provided through GoDaddy), to handle the mail sent to info@afortia.com, as data processor.

We do not sell or publish your data.

Transfers outside the EU/UK

Vercel, Microsoft and Google adhere to the EU-U.S. Data Privacy Framework and its UK Extension: transfers to the United States rely on the corresponding adequacy decisions. Travelpayouts states that it stores data in the European Union (the Netherlands), but the company is based in Hong Kong, which has no adequacy decision: that is why the tool is only activated with your explicit consent, which is the basis for the transfer (Art. 49(1)(a) GDPR).

How long we keep data

• Browsing data: the site's runtime logs are kept for 1 hour to 1 day, depending on the hosting plan (Vercel documentation). Vercel may keep other technical data under its own privacy notice.
• Emails: as long as needed to handle your request and no longer than 24 months after the last message, unless the law requires otherwise.
• Cookies: see the cookie policy.

Your rights

You can ask for access, rectification, erasure, restriction and portability of your data, object to processing (Articles 15–22 GDPR) and withdraw consent at any time by writing to info@afortia.com. You also have the right to lodge a complaint with the Spanish supervisory authority, where the controller is based, the Agencia Española de Protección de Datos, or with the authority of the country where you live: in Italy the Garante per la protezione dei dati personali, in the UK the Information Commissioner's Office (ICO).

Changes

We will update this notice when the site changes (for example when new services are added). The date at the top shows the latest version.