Privacy Policy

1. Data Controller

The data controller for this website is Sesiva LLC, a limited liability company incorporated in Texas, USA. For all privacy-related enquiries, please contact:

We aim to respond to all privacy requests within 30 days.

2. Personal Data We Collect

We collect personal data only when you actively provide it or when you consent to analytics cookies.

Contact form

When you submit our contact form we collect your name, e-mail address, and the message you send us. We use this solely to respond to your enquiry. We do not add you to any mailing list without your explicit consent.

Analytics (with your consent)

If you accept analytics cookies, Google Analytics 4 (GA4) collects:

• Pages visited, time on page, referral source
• Browser type, device category, operating system
• Approximate geographic location (country and region — not precise GPS location)
• Anonymised IP address (IP anonymisation is enabled by default in GA4)
• Interaction events (e.g. button clicks, scroll depth)

No data that directly identifies you (such as your name or e-mail) is sent to Google Analytics. We do not enable Google Signals or cross-site tracking features.

3. Legal Basis for Processing

4. Cookies

We use a small number of cookies. For full details of every cookie we set — including name, purpose, and duration — please read our Cookie Policy. You can manage or withdraw your cookie consent at any time using the Cookie Preferences panel.

5. Retention Periods

• Contact form messages: retained for up to 2 years, then securely deleted.
• Google Analytics data: GA4's default data retention setting is 14 months for user and event data. You can request deletion at any time (see Section 8).
• Cookie consent record (ej_cookie_consent): stored in your browser for 12 months.

6. International Data Transfers

Google Analytics 4 may transfer personal data to the United States. Google LLC participates in the EU–US Data Privacy Framework (DPF), certified by the U.S. Department of Commerce. This framework provides adequate safeguards for transfers of personal data from the EU/EEA to the United States, consistent with GDPR requirements.

As Sesiva LLC is a US company, any data you send us via the contact form is also processed in the US. We rely on the same DPF certification and on standard contractual safeguards where applicable.

7. Third-Party Services

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

• Right of access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You may ask us to correct inaccurate or incomplete data.
• Right to erasure (Art. 17): You may ask us to delete your personal data where there is no compelling reason for us to continue processing it.
• Right to restriction (Art. 18): You may ask us to restrict how we process your data while a complaint is being investigated.
• Right to data portability (Art. 20): Where processing is based on consent or on a contract, you may request your data in a structured, machine-readable format.
• Right to object (Art. 21): You may object to processing based on legitimate interests at any time.
• Right to withdraw consent: Where processing is based on consent (e.g. analytics cookies), you may withdraw consent at any time — this does not affect the lawfulness of processing carried out before withdrawal. Use the Cookie Preferences panel.

To exercise any of these rights, e-mail privacy@explorejavea.com. We will respond within 30 days. We may need to verify your identity before processing the request.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data-protection supervisory authority. Because this site is primarily aimed at visitors in Spain, the lead supervisory authority is:

You may also contact the supervisory authority in your country of residence or place of work.

10. Children's Privacy

This site is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will display the revised date at the top of this page. Continued use of the site after an update constitutes acceptance of the updated policy. For material changes we will endeavour to provide more prominent notice.