Privacy policy.

Last updated: 12 November 2026

This is a courtesy translation. If there is any difference, the Spanish version prevails.

1. Controller

The controller is the Club Ciclista Estivella.

• NIF (tax identification number): G98249832
• Address: Camí Nelo al Pla, s/n, 46590 Estivella (València)
• Email: direccionccmestivellacom

This policy applies to classicacampdemorvedre.com and clubciclistaestivella.com.

2. Data we process

• Visit measurement: Google Analytics 4 processes browsing data and measurement cookies once the cookie notice has been accepted, which happens automatically after 10 seconds if you do not reject it before then.
• Emails you send us: if you write to the club’s address, we process your name, your email address and the content of the message.
• Technical logs: the hosting service may record the IP address, the date, the page requested and the browser, for technical and security reasons.
• Third-party services on the page: when a route map or an embedded video loads, the relevant provider receives the request and its technical data (see section 4).
• Content manager accounts: the people who edit the sites have an account with their name and email.
• Team riders’ social media: if you are a team rider and you send us your name and your social media accounts through the team form, we store them with your consent in order to publish them on the website and follow your accounts, for as long as you remain on the team.
• Media list: for the journalists and media outlets to whom we send press releases and media advisories about the race, the team and the club, we process:
  • First and last name, professional email address, media outlet, type of outlet, scope and language.
  • The delivery data of each mailing and, where enabled, whether the email is opened or a link is clicked.

The sites have no accounts for the public, and their only form is the one for the team riders. We do not sell personal data.

Source of the media list data

The contact details on the media list come from three sources:

• Those published by the media outlets themselves on their websites.
• Those provided by journalists and media outlets.
• Previous press lists of the person responsible for the club’s communications.

People who asked to be removed from those lists are not included.

3. Purposes and legal bases

• Measuring visits to improve the content: with your consent, through the cookie notice (Art. 6.1.a GDPR).
• Responding to the enquiries you send us: on the basis of legitimate interest in answering them (Art. 6.1.f).
• Keeping the sites secure and running: on the basis of legitimate interest (Art. 6.1.f).
• Managing the accounts of the people who edit the sites: on the basis of their relationship with the club (Art. 6.1.b) or legitimate interest (Art. 6.1.f).
• Sending press information to the media: on the basis of legitimate interest in making the race, the team and the club known to information professionals (Art. 6.1.f). Every mailing allows you to unsubscribe in one click.

4. Recipients and transfers

Providers that process data on behalf of the club:

• Google (Google Analytics), for visit measurement.
• GitHub (GitHub Pages), for hosting the sites.
• Supabase (database hosted in the European Union), for the content manager and the accounts of the people who edit. It does not receive data from the people who visit the sites, except that of the riders who submit the team form.
• Mailchimp (The Rocket Science Group LLC, part of Intuit, in the United States), for the media list and for sending press releases.

Providers your browser connects to directly:

• Route maps: OpenFreeMap (map), Esri (satellite view) and Amazon Web Services (terrain).
• Embedded videos: YouTube or other platforms, when a page includes a video.

Some of these providers are located outside the European Economic Area or may process data from third countries. In such cases, the mechanisms provided for by the GDPR apply, such as adequacy decisions or standard contractual clauses.

5. Retention

• Visit measurement: Google Analytics user and event data is kept for 14 months. Aggregated reports may be kept for longer.
• Emails: for the time needed to handle the enquiry and, afterwards, for the legal periods during which liabilities may arise.
• Technical logs: the retention periods of the hosting provider.
• Content manager accounts: for as long as the person collaborates in editing the sites.
• Media list: for as long as the contact remains on the list. After an unsubscribe, we only keep an encrypted fingerprint of the address, without storing it in clear text, so as not to add it again.

6. Your rights

You can request access, rectification, erasure, restriction of processing, objection and portability of your data where applicable. You can also withdraw your consent at any time, without affecting the processing carried out beforehand.

• How to exercise them: write to direccionccmestivellacom.
• Media list: you can unsubscribe using the link in any mailing, or by writing to that same address.
• Cookie management: you can change your choice at any time with “Cookie management”, in the footer.
• Complaints: if you consider that we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. Minors

The sites are not specifically aimed at minors and do not collect their data. Images of athletes under the age of majority are only published with the authorisation of their parents or guardians.

8. Changes

We will update this policy when the sites, their providers or the regulations change. The date above identifies the current version.