Privacy Policy

Last updated: February 15, 2026

At HidroAlerta24, we are committed to protecting our users' privacy. This Privacy Policy describes how we collect, use, and protect personal data, in compliance with the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

• Controller: [Operator name]
• Email: [email protected]
• Website: https://hidroalerta.es

For any inquiry regarding the processing of your personal data, you can contact the email address above.

2. Data we collect

HidroAlerta24 collects the minimum amount of data necessary for the operation of the service:

• Email address: Voluntarily provided by the user when subscribing to the email alert system.
• Name (optional): The user can provide a name when subscribing, although this is not mandatory.
• IP address: Automatically logged by the web server as part of standard server operation.
• User preferences: Stored locally in the user's browser via localStorage (visual theme, sound preference, subscription status). This data is not sent to the server.

3. Purpose of processing

The personal data collected is used exclusively for the following purposes:

• Sending email alerts: Notifying subscribed users about flood-risk situations in their selected areas.
• Service improvement: Analyzing the operation of the website to detect errors and improve user experience.
• Anonymous usage statistics: Obtaining aggregated and anonymized data on service use to optimize performance.

4. Legal basis for processing

The processing of personal data is based on:

• Explicit consent (art. 6.1.a GDPR): For sending email alerts. The user gives consent by voluntarily subscribing to the notification service.
• Legitimate interest (art. 6.1.f GDPR): For logging IP addresses on the server, necessary to ensure security, prevent abuse, and maintain proper service operation.

5. Data recipients

No personal data is shared with third parties, except in the following cases:

• Legal obligation: When required by competent judicial or administrative authorities.
• Service providers: The web hosting provider processes data as data processor, with the corresponding contractual safeguards.

6. Retention period

• Subscription data (email and name): Retained while the subscription remains active. Once the user unsubscribes, the data is deleted within a maximum of 30 days.
• Server logs (IP addresses): Retained for a maximum period of 12 months, after which they are automatically deleted.

7. User rights

In accordance with the GDPR and the LOPDGDD, users have the right to:

• Access: Know which personal data of theirs is being processed.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of their personal data when no longer necessary for the purpose for which it was collected.
• Portability: Receive their data in a structured, commonly used, and machine-readable format.
• Objection: Object to the processing of their personal data in certain circumstances.
• Restriction of processing: Request restriction of the processing of their data in cases provided by law.

To exercise any of these rights, the user can send a request to [email protected], indicating the right they wish to exercise and including a copy of their identification document.

Users also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es if they believe that the processing of their data does not comply with current regulations.

8. International transfers

The servers hosting HidroAlerta24 are located in the European Union, so personal data is not transferred outside the European Economic Area (EEA). Should international transfers be made in the future, appropriate safeguards under the GDPR will be adopted.

9. Security measures

HidroAlerta24 implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or destruction, including:

• Encrypted communications using HTTPS/TLS.
• Restricted access to personal data only to authorized personnel.
• Periodic backups.
• Server protection through firewall and security updates.
• Storage of user preferences exclusively in the browser (localStorage), without transmission to the server.

10. Modifications to this policy

HidroAlerta24 reserves the right to modify this Privacy Policy to adapt it to legislative or judicial developments, as well as to changes in the service. Any modification will be published on this page with the corresponding update date.

Users are advised to review this policy periodically to stay informed about how we protect your personal data.