Last updated: August 30, 2026. This English version is a courtesy translation; the Spanish version is the one that governs.
Short version: this site uses no cookies and does not identify you. It counts visits with a tool of our own, hosted by us, which stores nothing on your device and cannot recognize you from one day to the next. Beyond that it collects nothing except what you write yourself: in the notices form on the home page, or in the contact form.
Data controller: Rastro Lab.
How to reach us: the contact form, or in the market itself on Sundays.
You can come to us that way about anything to do with your data, including exercising the rights set out below. We do not publish an email address on the site because it gets scraped and ends up collecting more junk than messages; the form reaches the same mailbox. If you are on the notices list, replying to any of our emails works just as well.
We only collect something if you write it to us yourself, in one of the two forms.
If you fill in the notices form on the home page:
If you write through the contact form:
Nothing else. We do not ask for a name, a phone number or an address. We do not collect your IP for profiling, and we build no profile of you. To slow down automated messages, the contact form keeps for two hours a code computed from your IP, which cannot be turned back into it, and which only serves to count how many messages arrive in a row from the same place.
For one thing only: to email you when the site is ready, and to know whether we should tell you first what interests a visitor or what interests a business in the neighborhood. We do not use your address for anything else and we neither share nor sell it to anyone.
What arrives through the contact form is used to read it, correct whatever needs correcting and, if you left an address, reply to you. That address does not go into the notices list and is not used to write to you for any other reason.
With your consent, article 6.1.a of the GDPR. We also use double opt-in: after leaving your address you get a message asking you to confirm. If you do not confirm, your address never becomes part of the list. You can withdraw consent whenever you like, and withdrawing it is as easy as giving it.
On the contact form the basis is the same, your consent: you give it by ticking the box and sending the message, and you can ask us to delete it whenever you like.
MailerLite runs the mailing list and the sending. It acts as a data processor and its servers are in the European Union.
Hetzner hosts this site, in Germany, and also the mail server the contact form's messages arrive at. The site itself is static and stores no personal data: it only serves files. The form delivers the message to that mail server, which is ours, without passing through any intermediate service.
OpenStreetMap serves the background of the maps of Madrid: on the markets, street markets and district pages and on the map of Madrid, your browser asks the OpenStreetMap Foundation's servers for the map tiles, and it receives your IP address and which part of the map you are looking at, as in any web request. It installs no cookies and does not identify you. The foundation is based in the United Kingdom, a country with a European Commission adequacy decision. The plan of El Rastro itself never leaves this domain.
Beyond that, there are no international transfers outside the European Economic Area.
Until you unsubscribe, or until the list stops making sense because the project is abandoned. In either case it is deleted. If you unsubscribe, we keep only the minimum record that you asked to be removed, so as not to write to you again by mistake.
Messages from the contact form are kept for as long as they serve what you sent them for: dealing with what you tell us and, if it is a report of a wrong figure, being able to explain where the correction came from. After that they are deleted.
This site installs no cookies, neither its own nor third-party ones. There is no Google Analytics, no pixels, no social buttons following you. Which is why you will not see the usual cookie notice either: there is nothing to consent to.
The plan of El Rastro and the rest of the pages load from this same domain. There are two external connections: the background of the maps of Madrid, which comes from OpenStreetMap when you open a page carrying one, and the moment you press "Notify me", which is when your address travels to MailerLite. Sending the contact form sends nothing to a third party: the message goes to a server of ours.
We use Umami, an analytics tool we host ourselves on the same German server that serves this site. It is not Google or any advertising company, and the data does not leave there.
It stores nothing on your device: no cookies, no identifiers. It records the page viewed, which link you arrived from, the kind of device and the country, and to know whether two visits on the same day are the same person it computes a code from your IP that is discarded every day and cannot be turned back into your IP. Which is why we cannot recognize you tomorrow, or cross your visit with any other site.
Because no information is stored on your device, the law does not require asking your permission, and that is why we show you no notice. The legal basis is our legitimate interest, article 6.1.f of the GDPR, in knowing which pages are read so as to improve them. If you would still rather not appear in that count, any blocker prevents it, and so does your browser's Do Not Track setting.
You may exercise, free of charge, the rights of access, rectification, erasure (the right to be forgotten), restriction, portability and objection, and withdraw your consent at any time. Every email we send you also carries a direct unsubscribe link.
To exercise them, write to us through the contact form saying which right you want to exercise. If you are on the notices list, replying to any of our emails is quicker still, because the message itself already tells us which address it is about. We will answer within the legal period of one month.
If you believe we have not handled your request properly, you may complain to the Spanish Data Protection Agency.
This site publishes information about the flea market from the open data of Madrid City Council, under the CC BY 4.0 license: the authorized stalls and the premises census, including their trading names and addresses.
It is economic-activity data published by the authorities, not personal data we have collected. Even so, we understand that in a small business the shopfront may be the same as a person's name. If that is your case and you want us to look at how your business appears, tell us through the form and we will look into it.
If what we do with the data changes, we will update this page and change the date above. If the change is important and you are on the list, we will tell you by email.