Privacy Policy

1. Data controller

The data controller is GTM LABS TECNOLOGIA E NEGOCIOS LTDA (trading as GTM Labs), with CNPJ (Brazilian tax registration) no. 69.588.616/0001-21 and registered address at Av. Cristóvão Colombo, 2144, sala 408, Floresta, Porto Alegre (RS), CEP 90560-002, Brazil. For any privacy matter, the user may write to gtmlabs@gtmlabs.com.br.

2. Data processed

During a visit, the hosting provider automatically logs the following technical data about each request:

• IP address;
• date and time of the request;
• requested page;
• browser and operating system type;
• referring page, when the browser sends it.

3. Location

The “Near me” button asks the user's browser for permission to access their location. If the user grants it, the location is used solely on their device to sort beaches by distance: it is not sent to La Playa Hoy or stored.

4. Clicks on partner links

La Playa Hoy currently includes no links to commercial partners, as the Legal Notice also states. If it ever includes one (for example, for accommodation near the beach, such as Booking.com), when the user clicks it La Playa Hoy will record the page the link was clicked on, the link and the date and time, solely to count how many clicks each partner receives. The record will contain no IP address, browser type or identifier of any kind, will use no cookies and will not reveal who clicked.

5. Contact form

If the user writes through the contact form, the name, email address, subject and message they send are processed. The message reaches the owner's mailbox by email and is not stored in any database of the project.

6. Purpose and legal basis

Technical logs are used solely to serve the requested pages, keep the project secure, prevent abuse and diagnose faults.

The legal basis is the legitimate interest in the operation and security of the project (Article 6(1)(f) GDPR). The data is not used for advertising, profiling or automated decisions about the user.

Data from the contact form is used solely to handle and reply to the enquiry. The legal basis is the consent the user gives by sending it (Article 6(1)(a) GDPR), which may be withdrawn at any time by writing to the same address.

7. Retention period

Technical logs are kept for at most one day and then deleted. La Playa Hoy does not copy them to other systems.

Messages from the contact form are kept in the owner's mailbox for as long as needed to handle the enquiry and then deleted.

8. Recipients and international transfers

The project is hosted by Vercel Inc. (United States), which processes the technical logs on behalf of La Playa Hoy as a processor. The international transfer relies on Vercel Inc.'s participation in the EU-U.S. Data Privacy Framework, which the European Commission recognises as an adequate safeguard.

Messages from the contact form are sent through Resend (Plus Five Five, Inc., United States), which also acts as a processor and participates in the same EU-U.S. Data Privacy Framework.

La Playa Hoy does not sell or share personal data with third parties.

9. Cookies and browser storage

La Playa Hoy uses no cookies and stores nothing in the user's browser (no local storage and no tracking technologies), so no consent is requested. Details are set out in the Cookie Policy.

10. User rights

The user may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability by writing to gtmlabs@gtmlabs.com.br, stating the right being exercised and giving details that help locate the records (for example, the date, time and IP address of the visit). If there is reasonable doubt about the user's identity, proof of identity may be requested.

If the user considers that their rights have not been respected, they may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

11. Changes

Any change to this policy will be published on this page, with the date of the latest update.