This Privacy Policy governs the processing of personal data that users provide when using the website madinat-albalat.org, belonging to the Madinat Albalat Project. Your privacy matters to us and we are committed to handling it with full transparency and in accordance with applicable regulations.
1. Data Controller
Name: Madinat Albalat Project — Romangordo Town Council
Address: Romangordo, Cáceres, Spain
Email: info@madinat-albalat.org
Website: madinat-albalat.org
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), we inform you of this Privacy Policy.
2. Personal data processed
The following personal data may be collected through this website:
- Full name
- Email address
- Phone number
These data are collected through the contact and guided visit booking form available on the website, only when the user voluntarily fills it in. No special category data (health, ideology, etc.) are collected.
3. Purpose of processing
The personal data collected are processed for the following purposes:
- Managing enquiries and requests for information about the archaeological site.
- Coordinating and confirming guided visits.
- Responding to messages received.
Data will not be used for any purpose other than that which motivated their collection, nor for marketing or advertising without express consent.
4. Legal basis for processing
The processing of your data is carried out on the following legal bases:
- Consent of the data subject (Art. 6.1.a GDPR): by submitting the contact form, the user gives consent for the processing of their data for the stated purposes.
- Performance of pre-contractual measures (Art. 6.1.b GDPR): when the request is related to booking a guided visit.
- Legitimate interest (Art. 6.1.f GDPR): to respond to general enquiries received by email.
5. Retention period
Personal data will be retained only for as long as necessary to handle the request or manage the visit, and in any case for legally required periods.
Once the request has been dealt with, data will be blocked and deleted after the applicable statutory limitation period (generally 3 years for civil claims in Spain).
6. Transfers to third parties and third-party services
Personal data will not be transferred to third parties except as required by law. However, the website incorporates third-party services that may process user data:
- Google Maps (Google LLC): the site includes an embedded Google Maps map to indicate the location of the site. Google may collect browsing data according to its own privacy policy (policies.google.com/privacy).
- YouTube (Google LLC): the site includes a documentary video hosted on YouTube. When played, YouTube may collect data according to its own terms.
- WordPress / Elementor: the website is built with WordPress and the Elementor plugin, which may generate technical access logs.
We recommend consulting the privacy policies of these third parties for further information.
7. Rights of data subjects
You may exercise the following rights at any time:
- Right of access to your personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”).
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing.
- Right to withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, please contact: info@madinat-albalat.org
If you believe that the processing of your data infringes the applicable regulation, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es, or with the supervisory authority of your country of residence.
8. Cookie Policy
This website may use strictly necessary technical and functional cookies for its correct operation. No proprietary advertising tracking cookies are used.
Integrated third-party services (Google Maps, YouTube) may set their own cookies when the user interacts with them. For more information, consult each provider’s cookie policy.
You can configure your browser to reject or delete cookies, although this may affect the functioning of the site.
9. Security
Appropriate technical and organisational measures are applied to protect personal data against loss, misuse, unauthorised access, disclosure or alteration, in accordance with Article 32 of the GDPR.
10. Policy updates
This privacy policy may be amended to adapt to legislative changes or changes to the website. Any amendments will be published on this page. We recommend reviewing it periodically.
Last updated: June 2026