At Pong City, we respect your privacy. This Policy explains what personal data we process through the website. pongcitytm.com<\/strong> and the mobile application PongPlay<\/strong>, for what purpose, on what legal basis and what rights you have, in accordance with Regulation (EU) 2016\/679 (GDPR) and Organic Law 3\/2018 (LOPDGDD).<\/p>\n We apply the principle of data minimization<\/strong> (art. 5.1.c GDPR): we only collect what is necessary for each purpose.<\/p>\n Name, email address, password (encrypted) and birthdate<\/strong>.<\/p>\n Legal basis:<\/strong> consent (Art. 6.1.a) and performance of the contract (Art. 6.1.b). The date of birth is also considered for the fulfillment of a legal obligation<\/strong> protection of minors (art. 6.1.c GDPR, in relation to art. 8 GDPR and art. 7 LOPDGDD).<\/p>\n Phone number, profile picture, gender, height, and weight. We only process them. if you decide to provide them<\/strong> (for example, height and weight for sports functions such as matchmaking by physical division).<\/p>\n Legal basis:<\/strong> consent (art. 6.1.a).<\/p>\n Address, postal code, city, province, country and NIF\/DNI<\/strong>. We collect the NIF\/DNI (Spanish tax identification number\/national identity document). only when you request an invoice<\/strong> for the contracted services; it is not used for any other purpose.<\/p>\n Legal basis:<\/strong> legal obligation (art. 6.1.c GDPR and Royal Decree 1619\/2012, billing regulations).<\/p>\n Table reservations, registration and participation in tournaments, matches, ranking (ELO) and attendance at events.<\/p>\n Legal basis:<\/strong> execution of the contract (art. 6.1.b).<\/p>\n Posts, comments and messages you send, and moderation reports.<\/p>\n Legal basis:<\/strong> execution of the contract (art. 6.1.b) and legitimate interest in the safety of the community (art. 6.1.f).<\/p>\n IP address, browser\/device type (user agent), passkeys and recovery codes, and access logs.<\/p>\n Legal basis:<\/strong> legitimate interest in security (art. 6.1.f) and legal obligation (art. 6.1.c).<\/p>\n Device identifier (token), platform (Android\/iOS) and device name.<\/p>\n Legal basis:<\/strong> consent (art. 6.1.a) and execution of the contract (art. 6.1.b).<\/p>\n Name, email, city\/headquarters and message to address your requests; and your email to send you updates if you authorize it.<\/p>\n Legal basis:<\/strong> consent (art. 6.1.a). We do not send commercial communications to minors.<\/p>\n Identification and payment data, managed by CrossHero and Stripe. Card details are processed directly by Stripe<\/strong> and they are not stored on our servers.<\/p>\n Legal basis:<\/strong> execution of the contract (art. 6.1.b).<\/p>\n The minimum age to register is 14 years old<\/strong> (Art. 8 GDPR and Art. 7 LOPDGDD). To protect minors, the app actively restricts social functions<\/strong> To individuals under 18 years of age: you may not use the chat, post in communities, or receive challenges from other players. We also do not direct commercial communications to minors. If we detect false age information, we may verify the age and, if necessary, close the account (see Terms and Conditions<\/a>).<\/p>\n When you register, we collect your consent in a explicit and separate<\/strong> through unchecked boxes (one for the Terms and one for this Privacy Policy). We retain the date and time of acceptance<\/strong> as proof of consent (Art. 7 GDPR). You can withdraw your consent at any time, without affecting the lawfulness of the processing prior to withdrawal.<\/p>\n We do not share your data with third parties except where legally required. They may access it, such as those responsible for the treatment<\/strong> under contract (Art. 28 GDPR): Hostinger<\/strong> (hosting of the website pongcitytm.com), Google Cloud Platform<\/strong> (cloud infrastructure where the PongPlay app is hosted), Google Firebase<\/strong> (push notifications), Stripe<\/strong> (payments), CrossHero<\/strong> (club subscriptions), Resend<\/strong> or another email provider (sending emails), Sentry<\/strong> (error monitoring) and, where applicable, Amazon S3<\/strong> (storage). To generate default avatars, the following is used ui-avatars.com<\/strong>, to which your name is sent.<\/p>\n If any provider processes data outside the European Economic Area, it will be done with appropriate safeguards (standard contractual clauses or other valid mechanisms).<\/p>\n1. Data Controller<\/h2>\n
\n
2. What data do we collect and on what legal basis?<\/h2>\n
a) Required information when registering on PongPlay<\/h3>\n
b) Optional profile data<\/h3>\n
c) Billing details<\/h3>\n
d) App usage data<\/h3>\n
e) Community and chat<\/h3>\n
f) Security and access<\/h3>\n
g) Push notifications<\/h3>\n
h) Website contact form and commercial communications<\/h3>\n
i) Club membership<\/h3>\n
3. Minors<\/h2>\n
4. Consent and proof<\/h2>\n
5. Storage periods<\/h2>\n
\n
6. Recipients and processors of the data<\/h2>\n
7. International Transfers<\/h2>\n
8. Your rights<\/h2>\n