Privacy Policy — Chilli FM Alexa Skill

Last updated: 19 August 2026

This policy explains what happens to your information when you use the Chilli FM skill for Amazon Alexa.

1. Who we are

Chilli FM (“we”, “us”) is an English-language radio station broadcasting on the Costa del Sol, Spain.

2. What the skill does

The skill plays a single live radio stream. It has no user accounts, no login, no personalisation, and no additional features. We do not ask you for your name, email address, location, or any other personal detail.

3. Information processed when you use the skill

Voice commands. Amazon’s Alexa service recognises your speech and converts it into a structured request. We never receive audio recordings or transcripts of what you say. Amazon’s handling of your voice data is governed by the Amazon Privacy Notice and your Alexa settings, not by this policy.

Device and user identifiers. Each request Alexa sends to our skill contains pseudonymous identifiers generated by Amazon (a user ID and a device ID). These are specific to our skill and cannot be used by us to identify you personally. We use them only to route the request and we do not store them in any database. They may appear temporarily in diagnostic logs (see below).

Diagnostic logs. Our skill records basic technical events (playback start and stop, session end, and errors) to Amazon CloudWatch to help us detect faults such as a failed audio stream. These logs may contain the pseudonymous identifiers described above. They are retained for a limited period for troubleshooting only and are not used to profile listeners or combined with any other data.

Audio streaming. The radio stream itself is delivered by our streaming provider, not by Amazon. When your device connects to the stream, provider servers receive your device’s IP address, which is technically necessary to deliver the audio. IP addresses may be treated as personal data under GDPR.

Artwork requests. Station artwork displayed on screen-equipped devices is loaded from our own web server at chilli.fm. Our server logs record the requesting IP address as part of normal web server operation.

4. Why we process this data, and our legal basis

We process the above solely to deliver the radio stream you requested and to keep the skill working. Our legal basis is our legitimate interest (GDPR Article 6(1)(f)) in operating and maintaining a functioning service, and performance of the service you have requested.

We do not use any of this data for advertising, we do not sell or share it, and we do not build listener profiles.

5. Retention

We hold no listener database. Diagnostic logs are kept only as long as needed for technical troubleshooting and are deleted automatically thereafter. Streaming and web server logs are retained by our providers according to their own standard periods.

6. International transfers

Amazon Web Services and our streaming provider may process data outside the European Economic Area. Where this occurs, transfers are covered by the safeguards those providers put in place, such as the European Commission’s Standard Contractual Clauses.

7. Third parties

• Amazon — operates Alexa and hosts the skill. See the Amazon Privacy Notice and Alexa Terms of Use.
• Aiir — delivers the live audio stream.

We recommend reviewing these providers’ own privacy policies, as their processing is outside our control.

8. Your rights

If any of the data described above relates to you, you have the right to request access, rectification, erasure, restriction of processing, and to object to processing. Because we hold no account and no identifying records, we will usually be unable to link a request to a specific individual, in that case we may ask for information that allows us to locate the relevant records, or explain why we cannot act on the request.

To exercise these rights, contact [email protected].

Requests concerning your Alexa voice recordings should be directed to Amazon, since we do not hold them. You can review and delete these in the Alexa app under Settings › Alexa Privacy.

9. Security

We rely on the security measures provided by Amazon Web Services and our streaming provider, and we apply appropriate technical and organisational measures to the parts of the service we control. No system can be guaranteed completely secure.

10. Children

The skill is a general-audience radio service and is not directed at children. Under Spanish law, children aged 14 and over may consent to the processing of their own data; below that age, consent must be given by a parent or guardian. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. Changes take effect when posted on this page, and the revision date above will be updated. Please check back periodically.

12. Contact

Questions about this policy or the skill: [email protected]