Privacy and data protection

General principle

InfoCórdoba collects as little data as possible, and only to provide the service. Privacy by default: if something isn't needed, it isn't stored.

What data we process

• Account: name, email and, optionally, phone number.
• Listings: the content you post, including images.
• Security: access logs and incidents, with limited retention.
• Portal usage: aggregated metrics without identifying the person.
• Tus secciones favoritas: solo si tienes cuenta, qué secciones abres y cuántas veces, para poder ordenarte los accesos de la portada. Se explica más abajo.

If you post something, we store where from

When someone posts on the portal —a listing on the noticeboard or a job offer via the form— we store the IP address it was sent from and the exact date and time, along with the browser used.

We do this for a specific reason: scams and impersonations occur on the noticeboard and in job offers. If someone is harmed and reports it, a court or the police may request this data, and without it the only possible answer would be "we don't know." This record is not published anywhere nor shown to other users: only the portal's moderators can see it, and it is only handed over if requested by a competent authority.

Not everything is kept for the same length of time. The IP address and the contact details you provided are kept for 12 months. The browser and technical headers are deleted earlier, at 6 months, since they are only useful for reviewing a recent incident. After that they are deleted automatically: there is no need to request it.

The record continues to exist even if the post is withdrawn or deleted, precisely because it may be needed in the posts that have to be withdrawn.

These periods are our own decision, not a legal obligation: Spanish data retention law applies to telecommunications operators, not a portal like this one. We have set them at the shortest period that is useful for the stated purpose. If data has been deleted because its period has expired, we no longer have it and cannot recover it, even if an authority requests it afterwards.

The only exception: if before that date we receive a request from a court, the Public Prosecutor's Office or the police regarding a specific post, deletion of that record is paused while the proceedings last. Only that one, not the others.

This does not apply to browsing the portal: we do not store your IP for that, as explained just below.

Si tienes cuenta: qué secciones usas

La portada tiene seis accesos rápidos y puedes elegir cuáles y en qué orden. Para poder ofrecerte el botón «ponme los que más uso», si tienes la sesión iniciada apuntamos qué secciones abres y cuántas veces.

Qué se guarda exactamente: la sección —«farmacias», «agenda»— y el número de veces. También el día de la última, sin la hora. No se guarda la dirección de la página, ni la hora, ni desde dónde, ni en qué orden las visitaste. Con lo que hay se pueden ordenar seis botones y no se puede reconstruir tu día.

Para qué se usa: solo para eso. No se usa para recomendarte contenido, ni para segmentar publicidad, ni para estadísticas, y no sale del portal ni se comparte con nadie.

Cuánto se guarda: hasta que tú lo borres. No caduca solo. Tienes un botón para borrarlo entero en «Mi Córdoba», junto al que lo usa, y borrar la cuenta también se lo lleva.

Si no tienes cuenta, no se apunta nada de esto: no hay dónde guardarlo y el portal funciona igual.

What we do NOT do

• No guardamos tu dirección IP completa por navegar. Se recorta antes de escribirla: de 79.117.199.107 se guarda 79.117.0.0, que señala a una provincia entera y no a una persona. Y para contar visitantes distintos no se usa esa dirección, sino un identificador diario que al día siguiente ya no vale. Publicar es la excepción, y está explicada arriba.
• We do not request your location when you enter. Only if you use a feature that needs it.
• We do not display your email or phone number in the public HTML of listings.
• We do not share data with third parties for advertising purposes.

Cómo contamos las visitas

Miramos cuánta gente entra y qué secciones usa, porque es lo único que nos dice si esto le sirve a alguien. Lo hacemos con un programa llamado Matomo instalado en nuestro propio servidor: los datos no salen de ahí, no se ceden y no se venden.

• Sin cookies. No se guarda nada en tu navegador para medir.
• Sin tu dirección completa, como se explica arriba.
• Si tu navegador pide que no te sigan —la opción «Do Not Track»—, no se te cuenta.
• Lo que se guarda con detalle se borra a los seis meses. Después solo quedan los totales, que no señalan a nadie.
• No se cruza con otros datos, no se hacen perfiles y no se usa para publicidad.

Google Analytics, only if you accept

On top of the above we use Google Analytics, which does store cookies in your browser and sends the data to Google. It is not loaded until you accept it in the notice shown when you arrive: if you say no, or say nothing at all, not a single line of it is downloaded and the site works exactly the same.

• It is asked to truncate your IP address before storing it.
• Your choice is stored in your browser. To change it, clear this site’s data and we will ask you again.
• The data is handled by Google under its own terms, which we do not control.

Content from other sites

Some pages display maps that are not ours, and you should know this because it is not free in terms of privacy: when they load, your browser connects directly to those servers, which see that connection and your IP address just as any website you visited would.

• OpenStreetMap, in the location maps for pharmacies, health centers and the agenda, and in the aircraft map.
• VesselFinder, in the ships map in the ships section.

We embed them isolated in their own frame, so that their code cannot access your session or anything stored by this portal. Even so, the connection to their server does happen, which is why we tell you here instead of assuming it's known. None of these maps loads until you reach the part of the page where it is located.

Images

The photos you upload are reprocessed on the server: they are converted to a safe format and the original metadata is discarded, including the geolocation information that many cameras include.

Your rights

You can access, correct and delete your data from your account. Deleting the account removes your listings and anonymizes your personal data. For any other request, write to us at hola@infocordoba.es.

Retention

Each type of data has a defined retention period: technical and analytics logs are automatically purged periodically, and only the audit log of administrative actions is kept long-term, for traceability purposes.

Qué secciones usas es la excepción y está dicho arriba: no caduca solo, se guarda hasta que tú lo borres.

The record of where something was published from has two periods —6 months for the technical detail and 12 for the IP address— applied by a single daily task. They are explained above.