FestivosAPI is operated by a Spain-based sole trader. This page covers the disclosures required under Spanish law (LSSI-CE, RGPD/LOPDGDD) for a digital service sold from Spain.
Responsable del tratamiento: Dominic Simon Ward, NIF Y2423461B, con domicilio en Calle Armiño, Edif. Monacyo, Cho, 38632 Arona, Tenerife, España. Contacto: legal@dsl4.com.
This paragraph is published in Spanish because it is the legally required identification of the responsible party under the LSSI-CE (Ley 34/2002, de Servicios de la Sociedad de la Información y de Comercio Electrónico).
POST /v1/signup): no personal data at all. The key is a random token with nothing tying it to an identity./v1/* call increments a per-key, per-UTC-day request counter so we can enforce your tier's daily cap (see src/ratelimit.js). The unauthenticated POST /v1/signup endpoint keeps the same kind of counter keyed by IP address, to cap free-key abuse. Neither counter stores request paths, query params, or response bodies -- just a number per key or IP per day. Cloudflare, our hosting provider, separately retains its own standard HTTP access logs per its own policy (Cloudflare Privacy Policy).This site sets no cookies and runs no client-side analytics or tracking scripts -- every page is static server-rendered HTML with inline CSS and no external requests. There is nothing to consent to.
Legal basis: performance of a contract (art. 6.1.b RGPD) -- storing your checkout email and counting requests is necessary to run the paid tier and rate-limited free tier you signed up for.
Retention: a paid key's email is kept while the key is active, plus the period Spanish tax/invoicing rules require after cancellation. Rate-limit counters are scoped to a single UTC day and carry no personal data beyond the key or IP address used to bucket that day's count.
Recipients: Stripe (payment processing) and Cloudflare (hosting/infrastructure) act as data processors on our behalf. We do not sell or share your data with anyone else.
Your rights: access, rectification, erasure, objection, restriction, and portability. Exercise them at legal@dsl4.com. You can also file a complaint with the Agencia Española de Protección de Datos (aepd.es).
Subscriptions are processed by Stripe; we never see or store your card details. If you need an invoice with your NIF/CIF, add it during Stripe checkout -- tax-ID collection is enabled on both Payment Links.