This is an English translation. In case of discrepancy, the Spanish version prevails.
This policy explains which personal data Litrigo processes, why, and what your rights are under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Checking prices requires no registration and no personal data.
1. Controller
, NIE Y9708662P, . Contact: [email protected].
2. What we process and why
"Seen a mistake?" form
- Data: type of mistake, your message, the page or station it refers to, the language and, only if you enter it, your email address. Your IP address and browser are not stored with the message.
- Purpose: to check and fix mistakes in the data or the translations and, if you leave your email, to reply to you.
- Legal basis: legitimate interest in keeping the information correct (Art. 6(1)(f) GDPR); for your email address, your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Retention: up to 12 months after the report is resolved, then deleted.
Protection against abuse
- Data: the IP address of whoever sends the form is used for at most 1 hour to limit the number of reports (5 per hour). It is not stored with the message.
- Legal basis: legitimate interest in preventing spam and abuse (Art. 6(1)(f)).
Your location ("Near me")
- Data: your device's coordinates, only if you click "Use my location" and your browser asks for and gets your permission.
- Purpose: to show the stations near you on that page. The coordinates are sent in the request body (not in the web address), used for one query and not saved, logged or shared.
- Legal basis: your consent (Art. 6(1)(a) GDPR), given in the browser prompt and withdrawable in your browser settings.
Server logs
- Data: IP address, requested page, date and time, browser. They are created automatically by the web server.
- Purpose: security, error diagnosis and attack prevention. Legal basis: legitimate interest (Art. 6(1)(f)).
- Retention: 30 days.
If you write to us, we use your address and message only to reply. We keep the conversation as long as needed to deal with your request.
3. What we do not do
We use no analytics or advertising cookies, build no profiles, make no automated decisions about you, and do not sell or share data with third parties. Fonts and charts are served from our own server; "Navigate" links open a map service only when you click them.
If you open the interactive map, your browser loads the map images from OpenFreeMap (tiles.openfreemap.org), which therefore receives your IP address, as with any website visit. No request is made to that service until you click "Open map".
4. Processors and transfers
- Hosting: Hetzner Online GmbH, with servers in Germany (European Union).
- Content delivery and protection against attacks: Cloudflare, Inc. (USA). Every request passes through its network, so it processes your IP address and the requested page. Transfers are covered by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
- Email: Google Ireland Limited (Gmail). Google may process data outside the European Economic Area under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to [email protected]. We reply within one month. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority of your country.
6. Children
The website is not aimed at children under 14 and we do not knowingly ask them for data.
7. Changes
Before we add new features (for example user accounts or price alerts) we will update this policy. The date of the last update is shown at the top of the page.