EN ES

Privacy & Usage Policy

This page summarises how the Málaga Workers Council handles data on this website and on the Insights tool. For the tool's full 16-clause policy, accept it once inside the tool itself.

This website

  • No analytics. No Google Analytics, no Plausible, no fingerprinting. The only traffic information that exists is standard Apache access logs (IP, user-agent, URL, timestamp) kept on the hosting droplet for operational debugging. They are not used for profiling.
  • No tracking cookies. The public pages do not set cookies.
  • No third-party fonts or scripts. Everything is self-hosted on the same domain.
  • Contact form. If you use the contact form, the message you type (and any name/email you choose to add) is sent to the Council and stored so we can reply. It is read by an elected council member, treated under the deber de sigilo, and never shared without your consent. You can ask us to delete it at any time.
  • External links (BOE, INE, AEPD, Slack, Facebook, Oracle SharePoint) only fire when you click them, and use rel="noopener noreferrer" so no referrer is leaked.

The Insights tool

  • Runs entirely in your browser. Data is processed locally; nothing is sent to any server.
  • A strict Content-Security-Policy (connect-src 'none') blocks all outbound network calls — verifiable in your DevTools Network tab.
  • Encrypted local save uses AES-GCM-256 with PBKDF2-SHA-256 key derivation, all in your browser. The password is never stored or transmitted.
  • Session data is wiped after 10 minutes of inactivity for safety on shared computers.
  • Full 16-clause policy is shown the first time you open the tool and must be accepted to use it. Article references include GDPR Art. 4 / 5 / 6 / 22 / 77, LOPDGDD, Workers' Statute Art. 4.2.e / 64 / 65, and the AEPD.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. The Insights tool does not transmit any data; the website only processes what you voluntarily submit through the contact form.

You may always lodge a complaint with the Agencia Española de Protección de Datos (AEPD) under Article 77 GDPR if you believe your rights have been infringed.

Contact for privacy matters

Reach the Workers' Council via the channels listed on the Contact page.