Last update: 2026-05-21

Privacy policy

Aire Canarias is designed to minimise personal data processing: there are no accounts, forms, advertising, active analytics or health profiles. This policy explains the processing activities that are real or technically prepared and their conditions.

Data controller

Controller: Moisés Cabello Alemán. Privacy contact: contacto@moisescabello.com. No data protection officer has been appointed. For any privacy question, use the contact shown above.

General approach

The site publishes aggregated environmental information about air quality in the Canary Islands. It does not identify visitors, sell data, create commercial profiles or combine technical information with personal health data.

Processing activities

Each processing activity is limited to the purpose shown. When a feature is disabled or depends on a voluntary action, it is not enabled without that action or without a prior update to the applicable legal information.

Technical site visit and server/proxy logs

Purpose: Serve the website, maintain security, diagnose errors, prevent abuse and verify technical operation.
Data: IP address, date and time, requested URL, response code, user-agent and technical connection data generated by the web server, Nginx/Plesk or the proxy.
Legal basis: The controller's legitimate interest (Article 6(1)(f) GDPR) in keeping the site secure, available and properly operated.
Retention: Up to 30 days, unless a specific incident requires keeping essential traces for the time needed to resolve it or address liabilities.
Recipients: Hosting provider Arsys Internet S.L.U., as technical provider and possible processor, plus subprocessors needed for infrastructure, backups, security or support.
Transfers: No international transfers are expected for this ordinary processing activity.
Rights: To exercise rights over technical logs, additional information such as approximate date, time or IP address may be needed because the site has no user accounts.

Technical site preferences

Purpose: Remember functional choices: language, global island scope, cookie notice, PWA preference, map/layers and chart data summary state.
Data: Values stored in first-party cookies, localStorage or sessionStorage, limited to the chosen preference or the component's technical state.
Legal basis: Legitimate interest and the service requested by the user. These are technical or personalisation preferences needed to provide the chosen functionality, without tracking purposes.
Retention: Until you change or delete the preference, the browser removes site data or the technical storage expires. The exact names and durations are listed in the cookie policy.
Recipients: Local preferences remain in your browser. Necessary first-party cookies may be sent to Aire Canarias to render the initial language or scope.
Transfers: No international transfers are expected from these first-party preferences.
Rights: You can delete them from your browser settings or by using website controls where available.

PWA and offline mode

Purpose: Allow installation, more stable loading and prudent offline use of pages and data already visited.
Data: Cache Storage containing application files, pages and same-origin responses already visited, plus the service worker's technical state.
Legal basis: Legitimate interest in improving availability and performance, and the service requested when you install or use the PWA.
Retention: Until the app updates its caches, you uninstall the PWA, delete site data or the browser clears storage.
Recipients: Local browser storage. Aire Canarias does not share it with third parties.
Transfers: No international transfers are expected from the local cache.
Rights: You can clear the cache from browser settings, uninstall the PWA or clear site data.

Browser geolocation

Purpose: Choose a nearby island, centre the map or show approximate distance to a station when the browser already has permission.
Data: Approximate or precise location provided by the browser, depending on the permission and device.
Legal basis: Consent managed by the browser or operating system when location is requested.
Retention: Aire Canarias does not receive or store the location. The browser or operating system may remember the permission until you withdraw it.
Recipients: The location is processed in your browser. It is not sent to the Aire Canarias server.
Transfers: No transfers are expected by Aire Canarias.
Rights: You can withdraw or change location permission in the browser or device settings.

Email contact via mailto

Purpose: Reply to questions, incidents or requests voluntarily sent to the privacy or legal contact.
Data: Email address, name if you include it, message content and ordinary technical email metadata.
Legal basis: Legitimate interest in handling received communications and, where applicable, steps requested by the data subject (Articles 6(1)(f) and 6(1)(b) GDPR).
Retention: For the time needed to handle the request and, where applicable, for the time needed to address liabilities, complaints or legal requirements.
Recipients: Proton Mail / Proton AG, as technical provider of the contact account, plus the sender's providers involved in delivery.
Transfers: Proton AG is based in Switzerland and states that Proton Mail infrastructure is in Switzerland, Germany or Norway. Email may also travel through the technical infrastructure of the sender and providers involved. Aire Canarias does not share it for commercial purposes.
Rights: You can exercise your rights by writing to the same contact. If you request deletion of an email, it will be assessed together with any retention obligations.

External map and satellite sources

Purpose: Load maps, styles, tiles and satellite imagery when the page or the user enables those views.
Data: IP address, requested URL, referrer or origin, user-agent and technical data needed to deliver maps or imagery when the browser contacts the provider directly. For proxied sources, the provider receives the technical request from the Aire Canarias server.
Legal basis: Legitimate interest in showing the public map and the service requested by the user when optional layers or views are enabled.
Retention: Aire Canarias does not keep those external logs. Each provider applies its own retention policies.
Recipients: OpenFreeMap/OpenStreetMap for the base map; Esri/ArcGIS if the optional satellite basemap is enabled; NASA EOSDIS/GIBS if the daily satellite layer is enabled; EUMETSAT for the MTG/Meteosat-12 chain served through Aire Canarias' same-origin proxy.
Transfers: Some requests may involve providers or infrastructure outside the European Economic Area depending on the service used.
Rights: You can exercise rights with those providers regarding their own logs. With Aire Canarias you can request information about which services are loaded by the website.

Web Push, only if publicly enabled

Purpose: Send voluntary environmental alerts about dust episodes, unfavourable AQI or strong respiratory advisories.
Data: Browser push endpoint, browser public keys, language, chosen island, alert topics, chosen timing for environmental respiratory advisories and technical delivery records.
Legal basis: The user's express consent and voluntary request when subscribing to notifications. Legitimate interest is limited to security, technical diagnostics, preventing abuse or duplicates and resolving errors.
Retention: Active subscriptions are kept until unsubscribe, expiry or revocation. Revoked subscriptions are deleted after 30 days and expired subscriptions after 7 days. Delivery records, errors and expired episodes are kept for up to 30 days.
Recipients: Hosting provider and the browser or operating system push service, for example Mozilla, Google, Apple or Microsoft push services depending on the device.
Transfers: The push service chosen by the browser or operating system may involve transfers outside the European Economic Area under its own terms.
Rights: You can disable the subscription from the website or from browser permissions. When disabled from the website, Aire Canarias attempts to revoke it on the server and in the browser and clears the local preference. Without the endpoint or equivalent technical information it may not be possible to locate a specific subscription.

Analytics, inactive

Purpose: There is no active analytics. If usage measurement is enabled in the future, it must be cookieless, without personal identifiers, and the legal information must be updated first.
Data: No personal data is currently processed for analytics.
Legal basis: Not applicable while analytics is disabled.
Retention: Not applicable while analytics is disabled.
Recipients: There are no analytics recipients while it remains disabled.
Transfers: There are no analytics transfers while it remains disabled.
Rights: If analytics is enabled in the future, the legal basis, retention and applicable mechanism will be provided beforehand.

Respiratory advisories

Respiratory advisories are environmental information calculated from air quality, dust and forecast data. No diagnoses, symptoms, treatments, clinical profiles or other personal health data are collected.

Prepared but inactive features

Web Push is not publicly available unless explicitly enabled. Analytics is disabled. Any future activation must review this policy and the cookie policy before being exposed publicly.

Rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to contacto@moisescabello.com. If you believe the processing infringes GDPR, you can complain to the Spanish Data Protection Agency (www.aepd.es).