Privacy policy
Last updated: 19 October 2026. This policy is published in English and Spanish, and both versions are equally valid.
1. Who is responsible
Javier Ciria Romero-Girón, Galapagar (Madrid), Spain, email info@butohworld.com (the “controller”). The site has no data protection officer: the law does not require one for a site of this size, and the controller answers requests in person. The site is hosted in Spain by Raiola Networks S.L., which processes data on our behalf.
2. The short version
- Reading the agenda needs no account and leaves no trace with us beyond the hosting’s server logs.
- We keep only what the agenda needs to work: the email you publish with, what you choose to follow, and the records that keep the site free of abuse.
- No tracking. No analytics, no advertising, no tracking pixels in emails, no third-party cookies. We do not know whether you open an email or what you click in it.
- We never sell or share your data for marketing. The services that receive any of it are listed below, and each gets only what its job needs.
- You can delete your data yourself (your events, your subscriptions, your account) or ask us to.
3. What we collect, and why
If you publish an event, we collect the email you publish with, the public name and contact you give for the organizer, and the content of the event. We use them to create your organizer entity, send you the link that publishes and edits the event, show your public details with the event, and send you the alerts about it. Legal basis: carrying out the service you asked for (GDPR art. 6.1.b).
If you create an account, we also keep a password (hashed, never readable) and, if you tick “I am also an artist”, the link between your account and your artist page. Same basis.
If you connect a calendar or a feed, we keep its address — sealed, so that even we cannot read it in full, because a private Google Calendar address is a secret and contains your email —, a label, the technical headers that let us read it efficiently, the results of each read, and for each event the identifier it has in your source. We read your source every six hours. Legal basis: the service you asked for (6.1.b).
If you tick “Email me a reminder when this event is over”, we record the date and time you ticked it, and we send you one email when your last event has passed, with a button to publish the next one. Unticking the box, or the one-click unsubscribe in the email, stops it. Legal basis: your consent (6.1.a).
If you follow an artist, a city or an event by email, we keep your email, what you follow, the language of the page you used and your browser’s time zone, so the digest arrives at a sensible hour. We send a confirmation first; unconfirmed subscriptions are deleted after 7 days. Every email has a one-click unsubscribe. Legal basis: your consent (6.1.a).
If you report a problem or suggest an idea, you may leave an email so we can answer; it is optional. If you report content as illegal, we keep your report and our answer while the matter is open. Legal basis: our legitimate interest in answering you and keeping the agenda accurate (6.1.f), and our duties as a hosting service under the EU Digital Services Act.
To keep the site free of abuse, new listings pass an automatic check that scores the content and may remember an email as “known”; forms and the reading of outside pages are rate-limited with counters that store a hash of your network range, or of your email or account, never the address itself; and a short register records which websites the site read for a calendar or a feed and with what result, without any address of who asked. Legal basis: our legitimate interest in running the site without spam, fraud or overload (6.1.f).
The hosting’s server logs record the usual technical data of every visit (IP address, time, page, browser). They belong to the hosting’s normal operation and rotate on its schedule.
Backups. Once a week an encrypted copy of the database is sent to the controller’s Google Mail account, so that the site can be rebuilt if the hosting account is lost. The copy is encrypted before it leaves the server; Google cannot read it. Legal basis: our legitimate interest in being able to recover the site (6.1.f).
We do not ask for, and do not want, any special category of data. The site is not directed to children; you must be 18 or older to publish.
4. Who receives data
Each of these receives only what its job needs:
- Raiola Networks S.L. (Spain): hosting, and the emails the site itself sends (publishing links, administration).
- Mailjet (Sinch Mailjet SAS, France; data in the EU): delivery of the digests and alerts you subscribe to. We send Mailjet the address and the content of each email; the list of subscribers stays in our database, not in Mailjet, and tracking is off.
- Meta Platforms Ireland Ltd.: only the public content of events that organizers with an account have chosen to share on butohworld’s Facebook and Instagram. Never personal data.
- Google LLC: receives the weekly encrypted backup, which it cannot read.
- OpenStreetMap Foundation (map images and address search) and CARTO (spare map images): see “Maps” below.
- Stripe: only if donations are on. Stripe handles the whole donation on its own pages; butohworld stores nothing about donors.
Some of these providers are outside the EU (Meta’s and Google’s parent companies are in the USA). They are bound by the EU standard contractual clauses or the EU–US Data Privacy Framework, as published in their own privacy terms.
Maps. The map on butohworld shows map images from OpenStreetMap (openstreetmap.org) and, if they are not available, from CARTO (carto.com). To show them, your browser connects to their servers, which receive your IP address, as any website you visit does. We send them nothing else.
When you press «Find on map» while publishing an event, the address you wrote is sent from your browser to OpenStreetMap’s address search (Nominatim).
When you press «Open in your maps app», your device opens Apple Maps, the maps app you use on Android, or OpenStreetMap, depending on your device. That service receives the address of the event and your IP address.
5. How long we keep things
| What | How long |
|---|---|
| The email you published with | 12 months after your last activity, with a warning email before deletion. An unconfirmed draft and its data: 14 days |
| Public name and contact of the organizer | As long as the event is on the site |
| Account | Until you delete it, or after 12 months of inactivity with a warning email, like the email you publish with |
| Connected calendars and feeds | While connected; deleted when you disconnect. Deleting your organizer deletes them too |
| The reminder consent and its marks | Until you untick the box or unsubscribe; the sending queue, 30 days after sending |
| Subscriptions to digests and alerts | Unconfirmed, 7 days; confirmed, until you unsubscribe |
| The optional email of a report or idea | Until we answer, or 90 days |
| Automatic-check signals of a listing | As long as the event lives; a blocked address stays blocked until we remove it |
| Rate-limit counters | 1 hour (5 minutes for the API). Anti-abuse network ranges (hashed): 24 hours |
| Register of reads of outside websites | 2 days, 200 rows at most |
| Weekly encrypted backup | 8 weeks; the hosting’s own backups follow its schedule (15 days today) |
| Server logs | The hosting’s rotation |
A daily task deletes what has passed its time. Deleting an event, a subscription or an organizer takes effect at once in the live site and leaves the backups on their own schedule above.
6. Cookies and local storage
The site uses only what it needs to work, and nothing that tracks you:
- a session cookie when you log in to an account;
- a cookie set by the link in your publishing email, so that you can edit your event for 90 days without an account;
- a cookie of 30 minutes after you press “Stop reminders” or “Undo”, so that one click can be undone;
- your browser’s local storage for your choices of light or dark mode and list or compact view, which never leaves your browser.
None of these is used to identify you across sites or to measure anything, so no cookie banner is needed. You can delete them from your browser at any time.
7. Your rights, wherever you are
The controller is in the European Union, so the GDPR applies to everyone who uses the site, from any country, and these rights are the same for all. You can see, correct, export and delete your data, object to a processing based on legitimate interest, and withdraw a consent at any time without affecting what was done before.
Most of it you can do yourself: edit or delete your events from their page or from “My events”; unsubscribe with one click in any email; untick the reminder box; disconnect a calendar; delete your account. For anything else, write to info@butohworld.com; we answer within a month, and we may ask you to prove it is your data before we hand it over. If you think we handle your data badly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
8. Security
Connections are encrypted (HTTPS). Passwords are hashed. Secrets and the addresses of connected calendars are sealed on the server. Access to the administration needs two factors. Backups are encrypted before they leave the server. If a breach ever affected your data, we would tell you and the authority as the law requires.
9. Changes
We may update this policy; the date at the top says when. If a change matters to you, we will say so on the site and, if you have an account or a subscription, by email.