Home / Privacy

Privacy and your rights

What data this website uses, what for, how long it keeps it and how you can see, correct or delete it. Also the rules for using it and for sending us photos or texts.

Version 1 · Updated October 20, 2026

Who's behind it

Qué hacer en Jerez (www.quehacerenjerez.com) is an information guide to Jerez de la Frontera. The person responsible for the website and your data is:

Owner
María Paz Spotorno
Trade name
SomosMates
NIF
Z-4227406-B
Address
Calle Porvenir, 9 · 11401 Jerez de la Frontera (Cádiz), Spain
Email
[email protected]
Instagram
@quehacerenjerez

For any privacy matter, write to that address with the subject "Privacy".

Owner details under art. 10 of the LSSI-CE.

What data we use

It depends on what you do on the website. If you only read, almost nothing. We never ask for data we don't need.

If you just browse

What we store
What happened (view a page, touch a link, share), on which page, if you entered from a phone or a computer and from which website you arrived. We add it up per day. We don't store your IP or anything that says who you are, and we don't count robots. If you search for something on the web and nothing appears, we save the searched text (up to 60 letters) and how many times it was searched that day, to know what is missing. Do not enter personal information in the search engine.
What for
To know which guides are useful, what's missing and what to fix.
Legal basis
Legitimate interest in improving the guide with data that doesn't identify you (art. 6.1.f GDPR).
How long
Only the daily totals remain, and they don't identify you.

The route of each visit

What we store
The pages you see in a single visit, how long and how far you scroll down, if you touch WhatsApp, the phone, the map or a business website, what you search for (up to 60 letters) and if you activate the notifications. To unite the steps of a visit we use a code that comes from mixing your IP and your browser with a key that changes every day. The IP is not saved and the password is deleted the next day, so the code does not allow us to know who you are or follow you from one day to the next. It does not use cookies or save anything in your browser. If your browser asks not to be tracked (GPC or Do Not Track), we do not measure anything.
What for
See which guides and businesses actually work, and tell each business how many people contacted them from the guide.
Legal basis
Legitimate interest in improving the guide with data that doesn't identify you (art. 6.1.f GDPR).
How long
90 days. Then it is deleted.

If you sign up for the Thursday email

What we store
Your email, your name if you give it, the topics you choose, the date, the exact text you accepted and which part of the website you signed up from. Also a fingerprint of your IP encrypted with a key that changes every day: it helps stop abuse and doesn't allow your IP to be recovered.
What for
To send you plans and news from Jerez, and to be able to prove that you gave your permission.
Legal basis
Your consent (art. 6.1.a GDPR and art. 21 LSSI-CE).
How long
While you're subscribed. Every email has a link to unsubscribe with one tap. When you unsubscribe, we stop writing to you and keep only a record of the unsubscription, so we don't write to you again by mistake, unless you ask us to delete that too.

If you turn on browser notifications

What we store
The technical address your browser creates to receive notifications (with its keys), the topics you chose, the language, the date, the event reminders you asked for and whether a notification was shown or opened. It doesn't include your name, your email or your phone number.
What for
To let you know about what you chose: weekend plans, public holidays or the event you don't want to miss.
Legal basis
Your consent: your browser asks you before turning them on (art. 6.1.a GDPR).
How long
Until you turn them off on the website or in your browser. If your browser stops accepting them, the subscription is switched off and no longer used. We also delete it whenever you ask.

If you write to us through a form

What we store
What you enter: name, phone or Instagram, neighbourhood, languages, when you're available, your message and, if you suggest a business, its details.
What for
To reply to you and, if it's a business, review the listing before publishing it.
Legal basis
Your consent (the form checkbox) and your own request (art. 6.1.a and 6.1.b GDPR).
How long
For as long as the conversation lasts and, afterwards, only what the law requires. We delete it sooner if you ask us.

If you leave a review of a place

What we store
Your rating from 1 to 5, whether you're from Jerez or visiting, the name you choose, your text and the date. While we review it, also a fingerprint of your IP encrypted with a key that changes every day, to prevent abuse: it is deleted once reviewed. If someone reports a problem with a review, we store how many reports it has and the reason, not who reported it; to prevent abuse, an encrypted fingerprint of their IP is deleted within a day.
What for
Publishing it on the place's page, under your name, so locals and visitors know how it went for others. Anyone can read it, search engines included.
Legal basis
Your consent: the form checkbox (Art. 6(1)(a) GDPR).
How long
As long as the place stays in the guide or until you ask us to remove it: write to us with the place, the date and your name. Reviews that break the rules are deleted without being published.

If you use "Nearest to you"

What we store
Your location, only if you give your browser permission, or the address you type. It's stored in your browser and never reaches us. If you type an address, it's sent to OpenStreetMap (Nominatim) to turn it into a point on the map.
What for
To sort places from nearest to farthest.
Legal basis
Your consent: the browser permission (art. 6.1.a GDPR).
How long
In your browser, until you delete it.

If you have a business in the guide

What we store
Business name, contact email, description, opening hours, phone, website, Instagram, the photos and events you upload, and the plan (free, featured or collaboration). The link to access your dashboard is stored encrypted. If a payment is made by card, Stripe processes it: we don't see or store the card details.
What for
To show your listing, review every change before publishing it and manage your plan and its invoices.
Legal basis
The agreement with your business (art. 6.1.b GDPR) and tax obligations (art. 6.1.c GDPR).
How long
While you're in the guide. Invoices, for the period required by tax and commercial law.

If your business appears without you asking

What we store
Only public business data: name, address, phone, website, opening hours and the public Google rating with the date we checked it.
What for
So residents and visitors can find what's on in Jerez.
Legal basis
Legitimate interest in providing information (art. 6.1.f GDPR). You can object whenever you like.
How long
While the business stays open, or until you ask us to correct or remove it.

If you message us on Instagram, WhatsApp or Facebook

What we store
Your username and what you write. If you comment a word to get a guide, we send it to you by private message, sometimes automatically.
What for
To reply to you and send you what you asked for.
Legal basis
Your own request and your consent (art. 6.1.a and 6.1.b GDPR).
How long
Those conversations live on Meta and follow its rules. If you ask us to delete what we have, we delete it on our side.

Who else is involved

We don't sell or share your data. It's only used, on our behalf and under contract, by the services that make the website work:

  • Cloudflare: hosts the website, stores the email list data, the notifications and the visit totals, and counts visits without cookies.
  • Formspree: receives the forms.
  • Brevo: sends the Thursday email.
  • Stripe: charges businesses for their plans, if they pay by card.

Also, for the website to work, your browser connects directly to these services, which receive your IP like any website you visit:

  • Google Fonts: the website's fonts.
  • Open-Meteo: the weather in Jerez.
  • Google Maps: only if you tap "See map" on the home page. From then on, Google's privacy policy applies.
  • OpenStreetMap (Nominatim): only if you type an address in "Nearest to you".
  • Your browser's notification service (Google, Mozilla or Apple): only if you turn on notifications.

Some of these services are in the United States. These transfers are made with GDPR safeguards: the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

Your rights

They're yours by law and you can use them whenever you like, for free. You have the right to:

  • Knowwhat data we have about you and get a copy.GDPR, access, art. 15
  • Correctanything that's wrong or incomplete.GDPR, rectification, art. 16
  • Deleteyour data when it's no longer needed or you withdraw your consent.GDPR, erasure, art. 17
  • Pausethe use of your data while we review a complaint or a correction.GDPR, restriction, art. 18
  • Take your data with youin a file to use it with another service.GDPR, portability, art. 20
  • Objectto a particular use, for example to your business appearing in the directory.GDPR, objection, art. 21
  • Withdraw your consentwhenever you like, without affecting what was done before.GDPR, art. 7.3
  • Not have a machine decideanything important about you: we don't do profiling or automated decisions here.GDPR, art. 22
  • Complainto the Agencia Española de Protección de Datos (the Spanish data protection authority) if you think we didn't do it right.GDPR, art. 77

How to ask

Write to [email protected] with the subject "Privacy" and tell us what you want. We reply within a month at most. If the case is complex, it may take two more months and we'll let you know beforehand.

We'll only ask you for an ID document if there's reasonable doubt that it's you. No special form is needed.

  • To stop the email: the unsubscribe link in every email.
  • For notifications: the button on the website or your browser settings.
  • For what's stored in your browser: delete this site's data in your settings.

If we don't reply or you disagree, you can file a complaint with the Agencia Española de Protección de Datos: www.aepd.es · C/ Jorge Juan, 6 · 28001 Madrid.

GDPR (EU) 2016/679, arts. 7, 12 and 15 to 22, and art. 77.

Minors

The guide is for all audiences. The email, notifications and forms are for people over 14. If you're younger, ask your mum, your dad or whoever looks after you to do it for you.

Art. 7 of the LOPDGDD (Organic Law 3/2018).

Terms of use

You don't need to sign up to use the website. When you use it, and especially when you send us something to publish, we ask you:

  • That what you send is true and doesn't mislead anyone.
  • That the photos are yours or you have permission to use them, and that the people in them agree. If children appear, with their families' permission.
  • Nothing offensive, discriminatory or illegal, and no disguised advertising.
  • Don't use the website to harass anyone or to copy other people's data in bulk.

Everything businesses and residents send is reviewed before it's published. We may not publish it, adjust it so it's clear, or remove it if it doesn't follow these rules. If you left us a contact, we'll tell you why.

Reviews of each place

  • Share your real experience of a place you went to. One review per place per day.
  • No personal data about you or anyone else: no emails, phone numbers, links or staff names.
  • No insults, no advertising, and no reviewing your own business or a competitor's.

We read them before publishing and publish them as they are or not at all: we don't change them. They appear from newest to oldest, and the average rating comes only from these reviews, separate from Google's.

No business can pay to remove, hide or reorder a review, and appearing as "Featured" changes nothing here. If a review has a problem, tap "Report a problem": after three reports from different people, it is hidden until we review it.

By sending us texts or photos to publish, you give us permission to show them on the website and on Qué hacer en Jerez's social media, with your credit, without payment and until you withdraw it. They're still yours.

Information and paid content

Qué hacer en Jerez is an information guide. Dates, times and prices come from official and public sources, but they can change: always check the official link before you go.

  • Paid content is always labelled: "Featured" or "Collaboration". We never sell reviews or ratings.
  • Some booking links are affiliate links: if you book, that website may pay us a commission. It doesn't cost you any more.
  • Google ratings are shown with the date we checked them.

Art. 20 of the LSSI-CE and Law 34/1988 on General Advertising.

Photos and texts

The texts and design belong to Qué hacer en Jerez: you can quote them with a link to the page. The photos belong to their authors, with their licence and credit at the bottom of each page.

If a photo is yours and you don't want it to appear, or your credit is missing, write to us and we'll fix it.

Report a problem

If you see wrong information, a photo that shouldn't be there or something you think is illegal, write to [email protected] with the subject "Report", the link and why. We review it and tell you what we did.

That email address is also the point of contact for users and authorities.

Digital Services Act (EU) 2022/2065, arts. 11, 12, 16 and 17.

Links and liability

We link to official, business and booking websites so you can check and book. Once you leave here, that website's privacy policy applies. We don't control those websites and aren't responsible for their content, prices or services.

If a link doesn't work or leads somewhere it shouldn't, let us know.

Changes and applicable law

If we change anything important on this page, you'll see it here with the new date and, if you're subscribed to the email, we'll tell you beforehand.

Spanish and European law apply: the GDPR (EU) 2016/679, the LOPDGDD (Organic Law 3/2018), the LSSI-CE (Law 34/2002), Law 34/1988 on General Advertising and the Digital Services Act (EU) 2022/2065.

If there's any disagreement, let's talk first: write to us. If we can't reach an agreement, the courts designated by law will decide; if you're a consumer, those where you live.

This page is automatically translated into other languages. If there are differences, the Spanish version prevails.

Frequently Asked Questions

Does Qué hacer en Jerez use cookies?

No. The website doesn't set its own or third-party cookies. It only stores in your browser what you choose, like your plan or your location, and that never reaches us.

How do I unsubscribe from the email?

With the unsubscribe link in every email, or by writing to [email protected]. We stop writing to you right away.

Do you sell or share my data?

No. It's only used, on our behalf, by the services that make the website work, such as hosting or sending the email.

Can a business pay to remove a review?

No. Reviews are read before they are published and appear from newest to oldest. No business can pay to remove them, hide them or change their order.

How do I ask for my data to be deleted?

Write to [email protected] with the subject "Privacy". It's free and we'll reply within a month at most.