Privacy policy
Who is responsible
The data controller is Lemur Ventures SL (NIF B56433345), Catalonia, Spain. Contact for data protection: [email protected].
What we collect
If you create an account: your name, email address and profile picture, provided by our sign-in service (Auth0), and the profile details you choose to add. If you contribute: your comments, exploration logs, ratings and photos, and when you made them. When you browse: Google Analytics measures the pages viewed, device and browser type, referring site and an approximate location (country or region) that Google derives from your IP address; the text you type in the search box is sent to our search provider, Algolia; and our hosting provider and Cloudflare record technical request data (IP address, browser, page requested, time) to deliver the site and protect it from abuse. Signed-in users can also save favourite caves. Your profile is public unless you make it private in your profile settings: it shows your name, surname, picture, caving experience and your published comments and explorations.
Why
To run your account and show your contributions (the terms you accept when you sign up), and to operate, secure, measure and improve a free information service, including with Google Analytics (our legitimate interest, GDPR Art. 6(1)(f)), and to answer you when you write to us.
Who else processes it
Auth0 (sign-in), Google (analytics), Algolia (search), Cloudflare (delivery and security) and our hosting provider Hetzner process data on our behalf. The map services whose tiles your browser loads directly (ICGC, the Spanish IGN, the French IGN/Géoplateforme and OpenStreetMap) receive your IP address and the map area viewed. Profile pictures come from the account you sign in with (for example Google or Gravatar) and are loaded from that provider's servers, which receive the IP address of whoever views them. Providers that may process data outside the European Economic Area do so under the European Commission's standard contractual clauses or the EU–US Data Privacy Framework. We do not sell personal data and build no advertising profiles.
How long we keep it
Account data is kept while your account exists, and contributions while they are published. Analytics data is kept for 14 months. Server and network logs are kept for a limited period and are not used for profiling.
Your rights
You can access, correct or delete your data, object to or restrict its use, and take it with you, by writing to us. You can also complain to the Spanish data protection authority (www.aepd.es).
Cookies
The site uses a session cookie when you sign in, and Google Analytics cookies (_ga) to measure visits. You can block or delete them in your browser settings at any time.
Contact: [email protected]