Privacy Policy

The data controller for this website is Carlos Zapata Ramírez, NIF 28631074F, C/ Rita Hayworth 12, 41950 Castilleja de la Cuesta, Seville, Spain. Email: hootaracontact@gmail.com.

This Privacy Policy explains what personal data we process when you use NYC Building Check, for what purposes, and the rights you have under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

NYC Building Check is a public-data information tool. You do not need an account to use it, and we do not ask for or store personal information such as your name, address, email, or payment details.

We do not carry out advertising, profiling, or tracking that identifies you.

Your browser does not talk to third-party data APIs directly. Every data request goes through our own server endpoints — a backend-for-frontend (BFF) pattern — and each response is validated against a strict schema before it reaches your screen.

This means the building queries you make are proxied by our infrastructure; we do not attach your identity to them.

Like most websites, we receive standard technical data when you visit — such as your IP address, browser type, and the pages requested — through our hosting provider, Cloudflare. This data is used to operate, secure, and keep the service available.

We do not use this data to build personal profiles.

We do not rely on your consent to process data, because we do not use advertising, tracking cookies, or analytics. The only processing we carry out for visitors is the standard technical handling of requests described in this policy.

That technical processing is based on our legitimate interest under Article 6(1)(f) of the GDPR in operating, securing, and keeping the service available. If you email us, we process your address and message to answer you, based on your consent under Article 6(1)(a) of the GDPR or our legitimate interest in responding, as applicable.

NYC Building Check does not set advertising or tracking cookies and does not use third-party analytics. Only the strictly necessary technical processing required to serve the site takes place.

The records displayed are retrieved from public sources such as NYC Open Data (HPD, DOB, and NYC311). Links to those sources are provided for your convenience; their own privacy policies apply when you visit them.

Our web infrastructure is provided by Cloudflare, which may process technical data in countries outside the European Economic Area. Where that happens, the transfers are covered by appropriate safeguards under the GDPR, such as standard contractual clauses and Cloudflare's data processing terms. No personal profile data is transferred.

Technical logs emitted by our Worker are retained by our hosting provider, Cloudflare, for a limited period — currently no more than 7 days — and are then deleted. We do not retain personal data because we do not collect it. If you contact us by email, we keep your message only for as long as needed to handle your request.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Request rectification of inaccurate data, or erasure of data we no longer need.
• Request restriction of, or object to, processing.
• Request data portability.
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at hootaracontact@gmail.com. You also have the right to complain to the Spanish data protection authority (AEPD) at www.aepd.es.

We do not make decisions based on automated processing that produce legal effects or similarly significantly affect you.

The site is not directed at children, and we do not knowingly process children's personal data.

We may update this Privacy Policy from time to time. The version published here, with its "Last updated" date, is always the one in force.

For privacy questions, or to exercise your rights, email hootaracontact@gmail.com.