Citizen observatory of aircraft overflights
Privacy
What we keep about you, what for, and how to take it away or delete it.
This page still has details to fill in.
Short version: we keep your email so we can alert you, and your name and surname only if you ever decide to complain. If you never complain, you never give them to us.
You file the complaint. We prepare the letter and send it when you ask us to, with your email as the reply address: AENA answers you, not us.
Everything we keep can be downloaded and deleted from your account, with two buttons. There is no advertising, no analytics, and we sell none of this to anyone.
Who is responsible
- Controller: [PENDIENTE: nombre o razón social]
- Tax ID: [PENDIENTE: NIF o CIF]
- Address: [PENDIENTE: dirección postal]
- Contact for anything on this page: [PENDIENTE: correo de contacto]
Write to that address about anything explained here. A person answers, not a form.
What we keep, what for, and on what grounds
None of this is collected "just in case". Every row in the table is there because without it something in the service stops working.
| What | What for | Legal basis | How long |
|---|---|---|---|
| Your email | Signing in — there is no password — and sending you the alerts | Your consent | Until you unsubscribe or delete your account |
| The area you pick | Knowing which overflights to alert you about | Your consent | Same |
| The neighbourhood you pick when you sign up | Knowing where people are signing up from, so we can decide which areas this reaches next. It never appears in any letter and is never cross-referenced with your email in any statistic | Your consent | Same |
| Name and surname | Signing the complaint letter you decide to send, which is filed in your name | Providing the service you asked us for | While you have an account. They are deleted with you |
| What you consented to, when, and against which version of this text | Being able to show what we showed you and what you agreed to | Legal obligation: whoever asks for consent must be able to prove it | While you have an account |
| A record of what we do with your data: sign-up, area change, unsubscribe, saving, export and deletion | Being able to answer you if you ever ask what happened with your data | Legitimate interest in being accountable | Kept with nothing of yours inside it: only the account identifier, the date, and what was done |
| Irreversible fingerprints of your email and your IP address | So nobody can use the sign-up form to bombard a neighbour’s inbox, or brute-force codes | Legitimate interest in the security of the service | One day. And neither the email nor the IP is stored, but a hashed digest there is no way back from |
Complaint data lives somewhere different from account data, and not for tidiness: someone who only wants alerts never gets a record with room for their name.
And there is no other record: home address, postcode and ID number are never asked for, not even optionally. The letter goes by email, and by email nobody requires them.
You file the complaint
Worth saying plainly, because it is the most misunderstood part: we do not complain on your behalf, and we do not want to be able to.
What we do is prepare the letter from what you have already given us, show it to you first, and send it only when you ask, one at a time. The letter goes out with your email address as the reply address, so AENA answers you and not us. We do not read those replies.
We are the vehicle. The complaint is yours, you sign it, and the case is yours.
If you never complain, you never give us your name: an alerts account only needs an email.
Who else sees it
Nobody buys any of this. There is no advertising, no analytics and no trackers.
Three companies work on our behalf, under contract, and only for what is described here:
- Vercel — serves this site. The functions that serve it run in Europa (París y Fráncfort).
- Supabase — holds the database. Region: [PENDIENTE: confirmar la región del proyecto en la consola de Supabase].
- Resend — sends the email: both the alerts and the letter you send.
All three are US companies with a European presence, and the processing is covered by the European Commission’s standard contractual clauses.
AENA is not on that list, and the difference matters: it does not work on our behalf. It is the recipient of a letter you send.
What is yours is yours
Two of your rights are a button rather than an email to support, because a right you have to request in writing gets exercised half as often:
- Download everything we keep about you — access and portability — from your account, as a file.
- Delete it — erasure — from your account, without asking permission or explaining why.
The rest — correcting anything wrong, restricting or objecting to a processing — are requested by writing to [PENDIENTE: correo de contacto]. We answer within one month at the latest.
If you think we are getting this wrong, you can complain to the Spanish data protection authority (aepd.es) or, if you live in Catalonia, to the Catalan one (apdcat.gencat.cat). You do not have to tell us first, though we appreciate the chance to fix it.
Unsubscribing and deleting are not the same
Unsubscribing stops us sending you things. It deletes nothing, keeps the proof of what you consented to, and recognises you if you come back. It is reversible in one click.
Deleting is final. When you delete:
- Your subscription, your complaint details and your consents disappear.
- The marks saying "I already complained about this overflight" are left with no owner: that a complaint was made is still true, and it no longer points at anyone.
- Your sign-in account is removed, unless you are using it in another product from the same house. In that case it stays alive for that other product, and nothing of yours remains here.
- One line stays in the activity record saying it was deleted, with the date and nothing of yours inside. That line is what proves we did as you asked.
Cookies
There is no analytics or advertising cookie, so there is no banner to accept either. This site’s security policy even stops your browser from talking to any server that is not ours.
The only ones set are technical and are needed for the site to work:
- The session one, so you do not have to sign in again on every page.
- One that holds the half-verified email while you type the code. It lasts fifteen minutes and the browser cannot read it. It is there so that email does not travel in the page address, where it would end up in your history and in the logs of everything along the way.
- One that remembers which area you were looking at, so we do not ask every time.
Minors
This is not meant for anyone under fourteen. We do not ask for age, because asking would mean collecting one more piece of data from everybody in order to filter out a few. If we learn an account belongs to someone under that age, we delete it.
When this text changes
Every version is numbered, and your consent is recorded against the version you saw, not today’s. That means it is always possible to know what you agreed to.
If something substantive changes, we tell you and ask again. A wording fix that changes nothing does not invalidate what you already said, and we are not going to pretend it does just to make you click a button again.