Skip to content
Legal

Privacy policy

This is a courtesy translation. The binding version of this policy is the Spanish one, at mixines.com/privacidad/. In the event of any discrepancy, the Spanish text prevails.
Two separate processing activities. This text covers the website (contact form, billing, analytics and search visibility). The processing of players' data inside the application is governed by the data processing agreement we sign with each club, and is summarised in section 3.

1. Data controller

  • Controller: Argentina Pura S.L. · Tax ID (NIF) B67787275
  • Registered address: Calle Tucán 14, Bloque 2, piso 1-7 · 29640 Fuengirola (Málaga), Spain

2. What data we process and why

Website data processing activities
ActivityDataLegal basisRetention
Demo request or enquiryName, club, email, phone and the message you write to usConsent and pre-contractual measures (art. 6.1.a and 6.1.b GDPR)2 years from the last contact
Managing the contractual relationshipThe club's billing detailsPerformance of the contract and legal obligation (art. 6.1.b and 6.1.c)6 years (tax and commercial obligations)
Site analytics (Google Analytics 4), only if you accept itA random browser identifier, pages viewed, actions on the site (button clicks, form submission without its content, use of the generator, video) and, on the sign-up and subscription pages of app.mixines.com, the sign-up and payment steps with the plan and its price, device and browser type, and approximate country or city. Never your name, email, phone or what you typeConsent (art. 6.1.a), which you can withdraw in “Cookie settings”14 months
Search visibility (Google Search Console)None of yours: Google shows us aggregated data on searches, clicks and position in its search engine. We do not track your browsing on the site or use analytics cookiesLegitimate interest (art. 6.1.f)As retained by Google Search Console (16 months)

3. The club's players' data

When a club subscribes to Mixines, its players' data (first name, contact phone number and member status) belongs to the club. The club is the data controller and we act solely as data processor, under article 28 GDPR and the agreement signed with each client. Specifically:

  • We do not use players' data for our own purposes and we do not pass it to third parties.
  • We do not contact any club's players for commercial purposes.
  • We do not cross or combine data between clubs: there is no shared player profile.
  • Contact phone numbers are deleted automatically after twelve months.
  • The club can export its data at any time and request its deletion when the contract ends.

4. Recipients

No data is passed to third parties except where legally required. The following processors are used, under signed agreements and with servers in the European Union: Hostinger International Ltd. (hosting and email, Lithuania) and Stripe Payments Europe Ltd. (subscription billing, Ireland). Payments from players do not pass through us: they go to the club's own card terminal via Redsys, which processes that data as an independent controller. The site's typefaces are served from our own server: loading them shares no data with third parties. If you accept analytics, Google Ireland Limited processes the Google Analytics data as a processor; Google may transfer it to the United States, relying on the EU-US Data Privacy Framework and standard contractual clauses.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@mixines.com, proving your identity. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you believe the processing does not comply with the regulations.

If you are a player at a club and want to exercise your rights over the data held in the application, contact the club, which is the controller. If you write to us, we will pass your request on to the club without delay.

6. Security

We apply reasonable technical and organisational measures: encryption in transit, role-based access control, regular backups and minimisation of the data collected. No system is infallible; should a breach occur that poses a risk to the rights of those affected, we will notify it in accordance with articles 33 and 34 GDPR.