Privacy policy
This Privacy Policy explains how personal data is processed on casinosonlineandorra.es under the EU General Data Protection Regulation (GDPR).
1. Data controller
Francisco Expósito Alentorn, NIF 46637168E, Calle Ramón Llull, nº3, 08339, Vilassar de Dalt, Barcelona. Contact: shaman.aicc@gmail.com.
2. Data we collect
We collect only the data strictly necessary to run the website:
• Anonymous navigation data (IP, browser, device type, pages visited) for statistical purposes, if you consent to analytics cookies.
• Marketing data (advertising identifiers) only if you consent to marketing cookies.
• Contact data (name, email) if you voluntarily send us a message through our contact channels.
We do not collect sensitive personal data, and we do not process payment information.
3. Legal basis
• Consent (Art. 6.1.a GDPR) for non-essential cookies and communications you subscribe to.
• Legitimate interest (Art. 6.1.f GDPR) for strictly necessary cookies and basic website operation.
4. Data sharing
We do not sell your data. We may share strictly necessary data with:
• Hosting and CDN providers (Netlify) to serve the website.
• Analytics providers (only with your consent).
• Legal authorities when required by law.
5. International transfers
Some of our providers (such as Netlify) may process data in the United States. They operate under EU-approved frameworks such as Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework.
6. Retention
Analytics data is retained for a maximum of 26 months. Consent records are retained for 1 year. Contact data is retained only as long as necessary to respond to your request.
7. Your rights
Under GDPR you have the right to: access, rectify, erase, restrict processing, object, data portability, and to withdraw consent at any time. To exercise any of these rights, contact shaman.aicc@gmail.com.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
8. Security
We apply appropriate technical and organisational measures to protect your data, including HTTPS encryption, security headers (HSTS, CSP) and regular software updates.