Privacy policy
Roads Unleashed · 28 September 2026
1. Controller
The controller is Enrique Franco Guillén, a self-employed professional (trabajador autónomo), tax identification number 52724973A, with professional address at Av. Campanar 31, 9.ª, 46009 Valencia, Spain.
Privacy contact: info@roadsunleashed.com. Roads Unleashed is a commercial name of this controller. The controller also provides other services under other commercial names; your data is used for the purposes described here and is not mixed into activities other than those described without a legal basis for doing so.
2. What we process
| Purpose | Usual data | Legal basis |
|---|---|---|
| Showing the site, protecting it and diagnosing incidents. | IP address, date, browser, technical and security events. | Legitimate interest in the security and provision of the service. |
| Answering questions, support requests and rights requests. | Identity, email address and the content of the message. | Your request and legal obligations. |
| Measuring your own traffic in aggregate, without cookies. | Date, page, referring domain, UTM campaign and a daily pseudonymous fingerprint calculated in memory from IP address and browser. The IP address, the browser, the full referring URL and advertising identifiers are not stored. | Legitimate interest in a limited measurement of the service, which you may object to. |
| Measuring optional analytics, only if you allow it. | Random identifiers stored as hashes, page, campaign, referrer, date and navigation events. The analytics table holds no name, no email address and no IP address. | Your consent, which you may withdraw. |
3. Buying access
When you buy access to a route we process the name, the email address and the telephone number of the buyer, the start date chosen, the amount and the currency, the status of the order and the technical references of the payment. The legal basis is the performance of the contract and the legal, accounting and tax obligations that come with it. Card details never reach us: they stay with the payment provider.
The checkout asks for a telephone number so the buyer can be reached about the order. It is a required field: without it the purchase cannot be completed and the access cannot be delivered.
Access is delivered as a personal link by email. It is not tied to a customer account and there is no password to manage.
4. Recipients and providers
Data may be processed by providers that serve the controller under their own terms and safeguards:
- Contabo: hosting of this site.
- DreamHost: electronic mail for this domain.
- Technical maintenance, backup, security or internal management services that need access to do their job.
Data may also be disclosed to public administrations, authorities, courts or professional advisers where there is a legal obligation or where it is necessary to bring, exercise or defend claims. Personal data is not sold.
5. International transfers
DreamHost provides the mail service from the United States and uses a data processing agreement that includes standard contractual clauses. You can ask for information about the safeguards that apply by writing to info@roadsunleashed.com.
6. Retention
- Technical logs are kept for the minimum period needed for security, diagnosis and incident investigation.
- Our own traffic observations with a daily fingerprint are kept for a maximum of 180 days.
- Optional navigation and product events based on consent are kept for a maximum of thirteen months. Aggregates without identifiers may be kept in order to compare periods.
- Data based on consent is processed until you withdraw it, without affecting the lawfulness of the processing that came before.
7. Your rights
You may request access, rectification, erasure, objection, restriction or portability, and withdraw a consent when that is the basis we rely on. Write to info@roadsunleashed.com. We may ask for additional information only when it is necessary to verify your identity.
You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
8. Security and changes
We apply technical and organisational measures proportionate to the risk. No system is infallible: if you find a problem, report it without including unnecessary information. This policy will be updated when the processing or the providers change, and the date of the current version will be shown.