Connector privacy policy

Data controller

The data controller is the person who decides why and how personal data is processed. For this connector, the data controller is:

Operator

Bohdan Liutko (individual), Vilafranca del Penedès (Barcelona), Spain.

Contact

contactlollevo@gmail.com

Support page

dondelollevo.com/contacto

Website

dondelollevo.com

Scope

This policy covers the MCP connector at https://mcp.dondelollevo.com/mcp and these documentation pages. MCP (Model Context Protocol) is a standard way for an AI assistant to call tools on an outside service.

The connector is read-only. It has no accounts and no sign-in. The website dondelollevo.com has its own privacy policy.

Data the service receives

• Tool arguments: the object name, guide slug, Madrid district, point id, city and optional area text that the assistant sends. They are used to answer the request.
• IP address of the caller: this is normally the address of the AI platform, not of your device. It is used to apply the usage limit and to protect the service.
• Technical request headers: the data needed to receive the request and send the answer.

The legal basis for processing the tool arguments and the IP address in the usage counter is legitimate interest (Article 6(1)(f) GDPR): answering the request that the assistant sends and protecting the service from abuse.

The service does not receive your conversation. Your AI client decides which arguments it sends.

Do not put personal data, such as your name, phone number or home address, in your questions. A Madrid district is enough to find points.

The connector and these pages use no cookies and no analytics. There is no profiling and no advertising. Your data is not sold.

Retention

Tool arguments

Not stored. They are used only to build the answer.

Usage counter

The counter keeps the IP address in memory for at most 24 hours, or until the service restarts.

Access log

The web proxy keeps an access log for 7 days. A web proxy is the server that receives requests before the connector. The log holds the time, IP address, method, path (without the query string), HTTP version, status, size of the request, size and duration of the answer, and user agent. It does not hold the request body or any other request header. Its purpose is security and abuse prevention. The legal basis is legitimate interest (Article 6(1)(f) GDPR).

Recipients

The service runs on a server that the operator administers. The server is rented from IONOS, which provides the machine and the network and does not manage the service.

AI platforms and links

The AI platform you use, for example OpenAI or Anthropic, is an independent controller. It processes your conversation under its own policy. See the OpenAI privacy policy or the Anthropic privacy policy.

A client may load the brand icon from https://dondelollevo.com/static/logo-512.png. That request goes to the website dondelollevo.com and is covered by its privacy policy. The same applies when you open a link from an answer.

Your rights

Under the GDPR (the EU General Data Protection Regulation), you can ask for access, rectification, erasure and restriction of your data and, where they apply, object to processing and ask for portability. Write to contactlollevo@gmail.com. You will get an answer within one month.

You can also file a complaint with the Spanish Data Protection Agency (AEPD).

If this policy changes, the date at the top of this page changes. See also the terms of use and the MCP guide.