Privacy Policy

The data controller responsible for the processing of your personal data is:

• Operator: STAKKER SYSTEMS
• Responsible: Samuel Martínez García
• Tax ID (NIF): 53928594B
• Activity: Servicios de información turística online (IAE 844, CNAE 7311)
• Jurisdiction: Málaga, España
• Contact e-mail: [email protected]

For any question about this policy or the processing of your data, contact us at [email protected]. E-mail is our direct communication channel.

We only process the data strictly necessary to operate this site and respond to you:

• Analytics data — via Google Analytics 4 and Microsoft Clarity (aggregated statistics, heatmaps and session data). Loaded ONLY after you grant analytics consent. Purpose: understand how the site is used and improve it.
• Contact management — if you write to us by e-mail, we process your address and the content of your message. Purpose: answer your enquiry.
• Affiliate links — some outbound links are affiliate links. When you click them you are redirected to a third-party provider (e.g. a booking platform) that processes your data under its own privacy policy; we may receive a commission at no extra cost to you.
• Saved preferences (theme, language, favourites) — stored locally in your browser and never transmitted to our servers.

We do not process your name, e-mail or any other identifying data unless you voluntarily contact us. We do not carry out automated decision-making or profiling.

Each processing activity relies on a lawful basis under Art. 6 GDPR:

• Analytics (Google Analytics 4 and Microsoft Clarity) — your consent (Art. 6.1.a GDPR), requested via our cookie banner. No analytics runs until you accept.
• Contact management by e-mail — your consent and/or our legitimate interest in answering your enquiry (Art. 6.1.a / 6.1.f GDPR).
• Website operation, security and abuse prevention — our legitimate interest (Art. 6.1.f GDPR).
• Affiliate links — your consent when you choose to click the link; subsequent processing is governed by the third-party provider.

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies (analytics) are only set with your prior consent. You can manage your preferences at any time via the "Cookie settings" link in the footer.

Where you have consented to analytics, data may be shared with the following providers acting as data processors:

• Google Ireland Ltd. / Google LLC — Google Analytics 4 (usage analytics). Data may be transferred to the United States under Standard Contractual Clauses. Privacy policy: policies.google.com/privacy.
• Microsoft Corporation — Microsoft Clarity (heatmaps and session analytics). Data may be transferred to the United States under Standard Contractual Clauses. Privacy statement: privacy.microsoft.com.

We do not sell your data to any third party.

Analytics data in Google Analytics 4 and Microsoft Clarity is retained for a maximum of 14 months and then deleted or anonymised.

E-mails you send us are kept only for as long as needed to handle your enquiry and any related follow-up, and then deleted.

Consent records and preferences stored in your browser (localStorage) persist until you clear your browser data or withdraw your consent.

Under the GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Objection — object to processing based on legitimate interest.
• Restriction — restrict how we process your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Withdrawal of consent — withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, e-mail us at [email protected] stating the right you wish to exercise. We will respond within one month.

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at www.aepd.es, or with the supervisory authority in your EU country of residence.

We may update this policy from time to time. The "Last updated" date at the top of this page indicates when the latest revision was made. We encourage you to review this page periodically.