Privacy policy
Template — must be reviewed by a qualified legal professional before production use.
This policy explains how Cielo Ofertas ("we", "us") processes personal data when you visit this website, in line with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on data protection and digital rights (LOPDGDD).
1. Data controller
- Legal name: [Legal name]
- Tax ID (NIF/CIF): [NIF/CIF tax ID]
- Registered address: [Registered address]
- Contact email: [Email]
2. What we do and do not process
Cielo Ofertas is an information and comparison website. We do not sell products and we do not process purchases or payments. When you click a "Check price" button you are redirected to the merchant's website, where the merchant is the controller of any data you provide there.
3. Data we may process, purposes and legal basis
- Technical data (IP address, browser, pages requested) in server logs, for security and to keep the site running. Legal basis: legitimate interest (Art. 6.1.f GDPR).
- Anonymous usage events (for example product views, searches and outbound clicks) stored without your IP address or any identifier, to understand which content is useful. Legal basis: legitimate interest.
- Web analytics, only if the site operator has enabled an analytics service (such as Google Analytics) and you have given your prior consent. Legal basis: consent (Art. 6.1.a GDPR). See the cookie policy.
- Messages you send us by email, used only to answer you. Legal basis: your request and our legitimate interest in handling it (Art. 6.1.b and 6.1.f GDPR).
We do not build profiles or take automated decisions that have legal effects on you.
4. Recipients and international transfers
We use hosting and database providers acting as processors. If analytics is enabled, data may be processed by Google, which may involve transfers outside the EEA covered by appropriate safeguards (such as standard contractual clauses or the EU–US Data Privacy Framework). Affiliate networks and merchants may set their own cookies when you visit their sites; their policies apply.
5. Retention
Server logs are kept for a limited period (typically up to 90 days). Anonymous usage events are kept only as long as needed for aggregate statistics. Emails are kept while needed to handle your request and, afterwards, for the limitation periods of any potential liability.
6. Your rights
You may request access, rectification, erasure, restriction, portability and object to processing, and withdraw consent at any time, by writing to [Email]. If you believe your rights have not been respected you may lodge a complaint with the Spanish Data Protection Agency (AEPD).
7. Minors
This website is not directed at children under 14 and we do not knowingly collect their data. If you are a parent or guardian and believe a child has given us data, write to us so we can delete it.
8. Security
We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or alteration.
9. Changes
We may update this policy; the current version is always published on this page.