Personal data
Privacy Policy
This policy explains what personal data Calpe Local collects, why it is used, who may process it and the rights available to you.
Last updated: 23 July 2026
01
Data controller
- Controller
- Sina Bohn
- info@calpelocal.com
Privacy enquiries and requests to exercise data-protection rights should be sent to the email address above. Full statutory operator details are available in the Legal Notice.
02
Data collected and how it is used
| Activity | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Contact enquiries | Name, email, selected topic, subject, message and any optional page URL supplied. | To read, manage and respond to the enquiry. The basis is taking steps at your request before a possible relationship, or Calpe Local’s legitimate interest in managing genuine correspondence. | Normally up to 24 months after the last meaningful contact, unless longer retention is necessary for a legal claim or obligation. |
| Business enquiries | Business name, contact name, email, optional phone details, website or social profile, category, selected interest and message. | To assess the enquiry, manage the founding-business contact list and discuss possible listings, sponsorships or advertising. The basis is pre-contractual steps requested by you and legitimate business administration. | Normally up to 24 months after the last meaningful contact, unless a contract is formed or longer retention is legally required. |
| Newsletter | Email address, signup date, consent record and subscription preferences. | To send The Calpe Weekend and related subscription messages. The basis is consent. You may withdraw it at any time. | Until you unsubscribe. A minimal suppression record may then be retained to respect the opt-out and demonstrate compliance. |
| Technical operation and security | IP address, date and time, browser and device information, requested URL, server logs and security events. | To deliver and protect the website, diagnose faults, prevent abuse and maintain security. The basis is legitimate interest in operating a secure website and, where applicable, legal obligations. | For the shortest period reasonably required for security, troubleshooting and legal compliance, subject to the hosting provider’s retention processes. |
| Paid services and administration | Contact, contractual, billing, transaction and invoice information where a paid service is agreed. | To provide the service, administer the relationship, issue invoices and meet accounting, tax and legal obligations. The bases are contract and legal obligation. | For the duration of the relationship and the statutory periods applicable to accounting, tax and legal records. |
03
Where the data comes from
Most personal data is provided directly by you when you email Calpe Local, submit a contact or business form, subscribe to the newsletter, or enter into a commercial relationship.
Technical data is generated automatically when a browser communicates with the website and hosting infrastructure.
04
Service providers and recipients
Personal data may be processed by carefully selected service providers where this is necessary to operate the website or provide a requested service.
- DreamHost: website hosting, server infrastructure and related technical services. DreamHost acts as a processor for customer data under its data-processing terms.
- WordPress: open-source content-management software used to operate the website. WordPress software does not by itself receive personal data, although separately installed plugins or external services may do so and will be identified when applicable.
- Professional advisers: accountants, lawyers, technical specialists or other advisers where reasonably necessary and subject to appropriate duties.
- Authorities: courts, regulators, tax authorities or law-enforcement bodies where disclosure is legally required.
If a third-party newsletter, analytics, advertising, payment or directory provider is introduced, this policy will be updated before or when that provider begins processing personal data.
Calpe Local does not sell personal data.
05
International transfers
DreamHost is based in the United States. As a result, data stored or processed through the hosting service may be transferred outside the European Economic Area.
DreamHost’s customer data-processing addendum states that, where an adequacy decision does not apply, protected customer data is transferred using the European Commission’s Standard Contractual Clauses and related safeguards. You may request further information about applicable safeguards by emailing Calpe Local.
06
Your data-protection rights
Subject to the conditions in applicable law, you may request:
- access to personal data held about you;
- correction of inaccurate or incomplete data;
- deletion of data where there is no continuing lawful reason to keep it;
- restriction of processing in relevant circumstances;
- objection to processing based on legitimate interests or direct marketing;
- portability of data where the legal requirements apply; and
- withdrawal of consent at any time, without affecting processing already carried out lawfully.
Send a request to info@calpelocal.com. Calpe Local may ask for enough information to verify identity before acting on a request.
If you believe your data-protection rights have not been respected, you may complain to the Agencia Española de Protección de Datos after first giving Calpe Local an opportunity to address the issue.
07
Required and optional information
Fields marked as required are needed to process the relevant request. If required information is not supplied, Calpe Local may be unable to respond or provide the requested service.
Optional information should only be provided where it is relevant. Please do not send sensitive personal information unless it is genuinely necessary and specifically requested.
08
Automated decisions and profiling
Calpe Local does not currently make decisions with legal or similarly significant effects based solely on automated processing.
09
Security and policy changes
Reasonable technical and organisational measures are used to protect personal data, including controlled administrative access, software updates, hosting security and data minimisation. No internet service can guarantee absolute security.
This policy may be updated when the website, providers or legal requirements change. The updated date at the top of the page will show when the wording was last revised.
Related policies