Skip to content
Back to alPartido Español

Privacy Policy

Last updated: May 24, 2026

At alPartido we take your privacy seriously. This policy explains, in plain language, what data we process, why we need it, who we share it with, and what rights you have over it. The Spanish version of this document at /privacy is the legally binding one; this English version is provided for convenience.

1. Data controller

2. What data we process

2.1. Data you provide

  • Email (required): used to identify you and send you passwordless sign-in links ("magic links").
  • Name or alias: you choose it the first time you sign in. It is what the rest of the players in your groups will see.

2.2. Data generated by your use of the service

  • Groups you belong to and matches you take part in.
  • Your attendance confirmation ("going", "not going", waitlist) for each match.
  • Ratings from 1 to 5 stars that other players give you after a match, and those you give.
  • Match stats attributed to you after a game.
  • Push notification subscriptions (an anonymous identifier of your browser or device).
  • A random calendar token so you can subscribe to your personal iCal feed.

2.3. Technical data collected automatically

  • IP address and user agent (browser / OS) when you sign in, for security and abuse-prevention purposes.
  • Date and time of your sessions.

2.4. Data we do NOT process

We do not ask for your phone number, date of birth, government ID, or postal address. We do not store photos or avatars. We do not collect GPS location: a match location is free text typed in by whoever organises it. We do not process payment data. We do not process special categories of data (health, ideology, sexual orientation, etc.).

3. Why we use your data and on which legal basis

  • To provide the service (create your account, manage groups, RSVPs, ratings): legal basis = performance of the contract (art. 6.1.b GDPR) you accept when registering.
  • To send push notifications and operational emails (match reminders, new match, cancellations): legal basis = performance of the contract and, for push, your explicit consent when you enable them (art. 6.1.a GDPR).
  • To secure the app (logging IP and user agent at sign-in, fraud prevention): legal basis = legitimate interest (art. 6.1.f GDPR).
  • To comply with legal obligations (responding to judicial or authority requests): legal basis = legal obligation (art. 6.1.c GDPR).

4. Who we share your data with

We do not sell your data, nor do we share it with third parties for commercial purposes. We rely on the following processors, strictly required to operate the service, all bound by a data processing agreement under art. 28 GDPR:

  • Hetzner Online GmbH (server and database hosting). Data stored in data centres in Germany, inside the European Union.
  • Resend, Inc. (transactional email delivery: magic links and email notifications). A US company adhered to the EU-US Data Privacy Framework. Only your email address and the message itself are shared.
  • Google Firebase Cloud Messaging (FCM) and Apple Push Notification Service (APNS): only if you enable push notifications. These are the Google and Apple services that deliver the alerts to your device. They do not have access to your account content beyond the message itself.
  • Google Play Store and Apple App Store: if you download the app from a store, the store will process install data and metrics under its own policy, outside the controller's reach.

4.1. International transfers

Transfers to Resend, Google, and Apple in the US are covered by their adherence to the EU-US Data Privacy Framework and, subsidiarily, by the standard contractual clauses approved by the European Commission. The rest of the processing takes place within the European Economic Area.

5. How long we keep your data

  • Account and profile data: until you request deletion, or after 24 months of continuous inactivity.
  • Magic link tokens: 15 minutes.
  • Security logs (IP, user agent): 12 months.
  • Past match data (attendance, ratings, stats): as long as your account is active, as it is part of the group's sporting history. When you delete your account, your personal data is removed and your contributions to past matches are anonymised.
  • Backups: purged within a maximum of 30 days after deletion from the live system.

6. Your rights

As a data subject you may exercise the following rights at any time:

  • Access: obtain a copy of the personal data we hold about you.
  • Rectification: correct inaccurate data.
  • Erasure ("right to be forgotten"): delete your account and the associated personal data. You can do it yourself from the Account section inside the app.
  • Objection: object to processing based on legitimate interest.
  • Restriction of processing: request that we freeze the use of your data in certain cases.
  • Portability: receive your data in a structured, machine-readable format.
  • Withdraw consent for push notifications at any time from the app or device settings, without affecting the lawfulness of prior processing.

To exercise any of these rights, write to info@eolicadigital.com from the address associated with your account. We will respond within one month at most.

If you believe the processing does not comply with applicable law, you may lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos, www.aepd.es) or with your local supervisory authority.

7. Minors

The service is intended for users aged 14 and over, as established by article 7 of the Spanish LOPDGDD. If you are under 14, you must not use the app. If we detect that an account has been created by a child under 14 without authorisation, we will delete it.

8. Security

We apply reasonable technical and organisational measures to protect your data (TLS in transit, access controls, backups, least-privilege database access). No system is 100% secure; if we detect a breach that may affect you, we will notify you under article 34 GDPR.

9. Changes to this policy

We may update this policy to reflect legal or operational changes. The "Last updated" date tells you when it was last revised. For material changes, we will notify you by email or with a prominent in-app notice before they take effect.

10. Contact

For any question relating to this policy or to the processing of your data, contact us at info@eolicadigital.com.