AGP · EN
Privacy Policy – malagaairports.com
This policy explains what personal data is processed when you use malagaairports.com, an independent passenger guide to Málaga-Costa del Sol Airport, why it is processed, who receives it and how you can exercise your rights. It applies to visitors from the United Kingdom, Spain, the rest of the European Economic Area and elsewhere.
This site is not the airport
malagaairports.com is not operated by Aena, an airline or any public authority. Information you give to those organisations (for bookings, assistance, lost property or complaints) is governed by their own privacy notices, not by this one.
Domino Services Ltd., a UK company, is the data controller for malagaairports.com. The site has no accounts, forms, comments or newsletter; it processes technical data needed to deliver and protect the site, analytics data and advertising data only where you consent (or where the law allows without consent), and the content of any e-mail you send. You can change your cookie choices at any time and contact us at contact (at) malagaairports (dot) com to exercise your rights.
Practical information
Controller
Contact
Accounts or forms
Analytics
Advertising
Supervisory authorities
Who is responsible for your data
The controller of personal data processed through malagaairports.com is Domino Services Ltd., a private limited company registered in England and Wales under company number 13108907, with its registered office at Hova House, 1 Hova Villas, Brighton & Hove, East Sussex BN3 3DH, United Kingdom.
For any question about this policy or your personal data, write to contact (at) malagaairports (dot) com. Please put "Privacy" in the subject line so the message reaches the right person quickly. We do not offer a telephone line.
Because the controller is established in the United Kingdom, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply. Where we process data of people in the European Economic Area in connection with offering this guide to them or monitoring their behaviour on the site, the EU General Data Protection Regulation (GDPR) applies as well. Spanish visitors can find the information required by Spanish e-commerce law (Ley 34/2002, LSSI-CE) in our legal notice.
What personal data is processed
The site is a read-only information guide. You cannot create an account, register, post comments, subscribe to a newsletter or fill in a contact form. The personal data involved is therefore limited to the following categories.
- Technical and security data. When your browser requests a page, our hosting and security providers receive your IP address, the date and time, the page requested, the referring page, your browser and device type, and similar request information. Cloudflare may also evaluate the request to detect bots and attacks.
- Consent choices. The consent management platform records the choices you make about cookies and advertising so it can respect them on later visits.
- Analytics data (with consent). Pseudonymous identifiers stored in cookies, pages viewed, approximate location derived from the IP address (city or region level), device and browser information, how you arrived at the site and how you interact with pages.
- Advertising data (when advertising is enabled). Cookie or device identifiers, IP address, browser information and the pages you view, processed by Google and, where you allow it, its advertising partners to select, measure and protect ads.
- Correspondence. If you e-mail us, we receive your e-mail address, your name if you give it, the content of your message and any attachments.
- Affiliate referrals. If you follow a link to a travel partner, the partner may record that the visit came from this site. Any booking data you then enter is collected by the partner, not by us.
We do not ask for, and ask you not to send, special category data such as health information, or identity documents and booking references, unless that is strictly needed to answer your message.
Why the data is processed and on what legal basis
| Purpose | Data | Legal basis (UK GDPR / GDPR) |
|---|---|---|
| Delivering pages, keeping the site secure, preventing abuse and fixing faults | Technical and security data; strictly necessary cookies | Legitimate interests in operating a secure, working website (Article 6(1)(f)) |
| Recording and honouring your cookie and advertising choices | Consent choices | Legal obligation to demonstrate consent (Article 6(1)(c)) and legitimate interests |
| Measuring audience and improving content | Analytics data | Consent (Article 6(1)(a)); you can withdraw it at any time |
| Showing personalised advertising | Advertising data | Consent (Article 6(1)(a)) |
| Showing non-personalised advertising, limiting how often an ad is shown, aggregated reporting and fraud prevention | Advertising data | Legitimate interests in funding a free guide; where this involves storing or reading information on your device, consent where the law requires it |
| Answering your e-mail and keeping a record of the exchange | Correspondence | Legitimate interests in responding to enquiries and corrections (Article 6(1)(f)) |
| Complying with law, responding to lawful requests and defending legal claims | Any of the above, as necessary | Legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f)) |
Storing or reading information on your device is also governed by the Privacy and Electronic Communications Regulations 2003 in the UK and by Article 22(2) of Ley 34/2002 in Spain. We only set non-essential cookies after you have given consent through the consent banner.
Advertising, Google AdSense and affiliate links
When advertising is enabled on this site, ads are delivered through Google AdSense, a programmatic advertising service run by Google. We do not choose individual ads, and we do not receive personal data from Google that identifies you.
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.
- You may opt out of personalised advertising by visiting Google Ads Settings. You can opt out of some other vendors' use of cookies for personalised advertising at www.aboutads.info/choices and, in Europe, at www.youronlinechoices.eu.
Visitors in the EEA, the UK and Switzerland. Personalised ads and other non-essential cookies are used only if you give consent through a Google-certified consent management platform that implements the IAB Transparency and Consent Framework (TCF). The banner lists the advertising vendors and purposes; you can accept, refuse or choose purposes and vendors individually. You can change or withdraw consent at any time through the consent or privacy settings link shown on the site. If you refuse personalised advertising, Google may still show non-personalised ads, which are based on context such as the page content and your general location rather than your past behaviour. Non-personalised ads may still use cookies or similar technologies for frequency capping, aggregated ad reporting and to combat fraud and abuse, where your consent choices or the law allow it.
To learn more, read How Google uses information from sites or apps that use our services and the Google Privacy Policy. Google acts as an independent controller for some of this processing and is responsible for it under its own policies.
Affiliate links. Some links on the guide may lead to travel services such as flight search, parking, transfers or car hire. If you make a qualifying booking after following such a link, we may earn a commission, at no extra cost to you. The partner may use a cookie or a tracking parameter in the link to attribute the booking to this site.
Once you are on a partner's website, that partner decides what data it collects and how it uses it. Read its privacy notice before you book. We do not receive your payment details or travel documents.
Google Analytics
With your consent we use Google Analytics 4 to understand how the guide is used: which pages are read, how visitors arrive (for example from a search engine), which device types and languages are used, roughly where visitors are (country, region or city), how long pages are viewed and where people leave. We use the results in aggregate to decide which pages to improve or update.
According to Google, Google Analytics 4 does not log or store IP addresses; for visitors in the EU, IP addresses are used only to derive approximate location and are then discarded. Analytics cookies such as _ga and _ga_<ID> are set only after you consent through the banner. If you refuse or later withdraw consent, analytics cookies are not set or are no longer used.
Google Analytics data is not combined with information that would identify you by name, and we do not use it to make decisions about individual people. Besides changing your consent, you can block Google Analytics in most browsers with the Google Analytics opt-out browser add-on.
Who receives the data and international transfers
We do not sell personal data. We share it only with service providers who help us run the site, and only as far as they need it:
- DigitalOcean – web hosting; servers in Amsterdam, the Netherlands.
- Cloudflare – content delivery, DNS and protection against attacks and abusive bots.
- Google – Google Analytics 4 (with consent) and Google AdSense (when advertising is enabled), together with the advertising partners you permit through the consent platform.
- The consent management platform – a Google-certified provider that displays the banner and stores your choices.
- Our e-mail service provider – to receive and store messages you send us.
- Professional advisers and authorities – where needed to obtain legal advice, comply with the law or respond to a valid legal request.
Data of EEA visitors is transferred to the United Kingdom, where the controller is established; the European Commission has recognised the UK as providing an adequate level of protection. Some providers, including Google and Cloudflare, may process data in the United States or other countries. Where that happens, the transfer relies on a recognised safeguard such as an adequacy decision or UK adequacy regulations (including the EU-US Data Privacy Framework and its UK Extension, where the recipient participates), or standard contractual clauses approved by the European Commission together with the UK International Data Transfer Addendum. You can ask us for more information about the safeguard used.
How long data is kept
- Server and security logs are kept for a short period, only as long as needed to run and protect the site and to investigate specific incidents, and are then deleted or overwritten in line with the providers' log rotation.
- Consent choices are stored in a cookie on your device for a limited period, after which the banner asks you again. You can clear them sooner by deleting cookies.
- Analytics data is kept no longer than the data-retention period set in Google Analytics, which for standard properties is at most 14 months for user-level and event-level data; aggregated reports may be kept longer because they no longer relate to identifiable individuals.
- Advertising data is retained by Google and its partners under their own policies; cookie lifetimes are described in our cookie policy.
- E-mails are kept as long as needed to deal with your message and any follow-up, and then deleted unless we need to keep them to comply with a legal obligation or to establish, exercise or defend legal claims.
Your rights and how to complain
Under the UK GDPR and the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have data erased in the circumstances set out in the law;
- restrict processing, for example while a complaint is checked;
- object at any time to processing based on legitimate interests, and to direct marketing;
- data portability, where processing is based on consent or a contract and carried out by automated means;
- withdraw consent at any time, without affecting processing carried out before withdrawal – the simplest way is the consent or privacy settings link on the site.
Send requests to contact (at) malagaairports (dot) com. We answer within one month, which may be extended by two further months for complex requests; we will tell you if that happens. We may ask for information needed to confirm your identity. Because we hold very little data that is linked to a name, we may need details such as the e-mail address you wrote from, or the cookie identifier shown in your browser, to find your data. Requests are free unless they are manifestly unfounded or excessive.
If you are unhappy with how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to a supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in Spain, the Agencia Española de Protección de Datos (aepd.es); or the authority in the EU country where you live or work, or where the alleged infringement took place.
Profiling, automated decisions and children
We do not take decisions about you based solely on automated processing that produce legal or similarly significant effects. Personalised advertising, where you consent to it, involves profiling by Google and its partners to choose ads that may interest you; refusing or withdrawing consent stops this for this site.
The guide is written for travellers and is not directed at children. We do not knowingly process personal data of children under 13 in the UK, or under 14 in Spain, and we do not knowingly allow personalised advertising to be served to them. If you believe a child has sent us personal data, contact us and we will delete it.
Security and changes to this policy
We use encrypted connections (HTTPS), access controls, managed hosting and Cloudflare protection to reduce the risk of loss, misuse or unauthorised access. No internet service is completely secure, so please do not send sensitive information by e-mail.
We may update this policy when our services, providers or the law change. The date at the top of the page shows the latest revision. Where a change materially affects how your data is used, we will make it clearly visible on the site and, where required, ask for your consent again.