1. The data controller
Responsible for personal data on dataportales.com: Barona Band of Mission Indians, office on file at 1932 Wildcat Canyon Road, Lakeside, CA 92040, United States. Questions about this notice go to privacy@dataportales.com; contact@dataportales.com reaches us too.
2. Information involved
- Technical request details — the IP address your device connects from, its user agent string (browser, version, operating system), the address you asked for and a timestamp. Our web host logs these automatically.
- Rough geography — the country, and at most the city, that an IP address points to. Street-level or GPS location is never gathered.
- What you choose to tell us — the name, email, topic and text you enter in the contact form, once you actually send the draft it produces.
- Your storage decision — a small record in your own browser saying which cookie categories you allowed.
3. Purposes and legal grounds
- Keeping the pages online and safe — serving content, spotting abuse. Ground: our legitimate interest in a working, secure site.
- Analytics — learning which parts of the comparison are useful, solely where you have switched analytics on. Ground: your consent.
- Marketing and affiliate tracking — allowing a partner network to see that a booking began with one of our buttons, solely where you have switched advertising/affiliate on. Ground: your consent.
- Correspondence — answering what you sent. Ground: legitimate interest, or pre-contract steps if that applies.
4. Recipients and transfers
Data goes to the suppliers we depend on (web hosting, mailbox) and, if you consent, to analytics vendors and to affiliate or partner networks. A supplier may handle data in a different country from yours, including beyond the EEA and the UK; for those transfers we use recognised safeguards, for example the European Commission's standard contractual clauses. Once you click through to a hotel or to Booking.com, that company's privacy notice governs what happens next.
5. Storage periods
Hosting logs are deleted after no more than 30 days, unless a security incident means we must hold them longer. Correspondence is kept for up to two years from our last exchange. Your cookie decision lives in your browser until you wipe or change it; after twelve months the banner asks again.
6. Rights in the EEA and UK (GDPR / UK GDPR)
You are entitled to see the personal data we hold about you, have it corrected or erased, limit how it is used, receive it in a portable format, and object where we rely on legitimate interests. Consent can be taken back whenever you like — the "Manage cookies" control in each footer does exactly that. A complaint can also be lodged with the supervisory authority where you live.
7. Rights for California residents (CCPA / CPRA)
Californians may ask us to disclose the categories and purposes of personal information collected, to delete or correct it, and to stop any "sale" or "sharing" of it for cross-context behavioural advertising. Declining advertising/affiliate cookies on dataportales is how you exercise that opt-out here. Using any of these rights will not lead to worse treatment.
8. Minors
dataportales is written for adults. It is not aimed at anyone under 16, and if we learn we have received such a person's data we delete it.
9. Updates and requests
Revisions to this notice are signalled by a new date at the bottom. Send rights requests to privacy@dataportales.com; expect an answer inside one month.
Last updated: 13 October 2026