Privacy Policy

Introduction

Interduels S.L. (hereinafter, the "Controller" or "Interduels"), with registered office at [Full Address, City, Spain], CIF [CIF Number], email: info@interduels.com, is the Data Controller for personal data collected through the Platform (mobile app and web "Interduels").

This Policy informs about the processing of your Personal Data as a User (athlete, academy, or gym). If you do not accept this Policy or future modifications, stop using the Platform and request the deletion of your data.

Categories of Personal Data Processed

We process the following categories:

  • Identification and contact data: Name, surname, email, phone, address, date of birth, gender.
  • Specific sports data: Belt, weight, modality (gi/no-gi), duel history, ELO ranking.
  • Health data (special category): Information on injuries, concussions, or physical fitness (only with explicit consent).
  • Image data: Photos/videos of duels (for verification, streaming, or promotion).
  • Technical and usage data: IP, device type, browser, approximate geolocation (for duel matching), pages visited, clicks, session duration.
  • Payment data: Information processed by third parties (Stripe/PayPal; we do not store full banking data).
  • Minors' data: If <18 years, guardian data (parental consent).

Failure to provide mandatory data prevents registration or use of certain services. You are responsible for the truthfulness and for third-party data you share.

Cookies and Similar Technologies

We use technical session cookies (essential for secure navigation and basic functionality, such as authentication).

Legal Basis and Purposes of Processing

We process data for:

• Contract execution (art. 6.1.b GDPR):

  1. Registration, authentication, and account management.
  2. Facilitation of duels (Interduel/Fastduel), matching, tatami reservations.
  3. Calculation and publication of ELO ranking.
  4. Management of B2B/B2C payments/subscriptions.
  5. Support and complaint handling.

• Compliance with legal obligations (art. 6.1.c GDPR):

  1. Tax regulations, consumer protection, public spectacles (CCAA), anti-doping (CELAD if federated).
  2. Child protection (LOPIVI for minors).

• Legitimate interest (art. 6.1.f GDPR):

  1. Technical improvement of the Platform (monitoring, anonymous statistics).
  2. Fraud prevention and security.
  3. Direct marketing of similar products (email about ELO updates).

• Explicit consent (art. 6.1.a and 9.2.a GDPR for special categories):

  1. Processing of health/image data (duel videos, medical certificates).
  2. Commercial marketing (newsletters, offers).
  3. Sharing image for non-essential promotion.

Revoke consent at any time without affecting prior lawfulness.

Processing Methods and Recipients

We process data with digital/electronic tools, appropriate security measures (encryption, controlled access, logs, DPIA for high risks like health data).

Recipients (with DPA or joint responsibility):

  • Authorized Interduels personnel (confidentiality).
  • Data processors: Gyms/academies (for duels/verifications), providers (hosting, Stripe payments, streaming, messaging).
  • Authorities (AEPD, CELAD, judicial).

Minimum necessary access; we do not disseminate data publicly without basis.

Place of Processing and International Transfers

Data processed mainly in the EU. Transfers outside the EU (e.g., US sub-processors) only with guarantees (European Commission standard clauses or Privacy Shield).

Retention Period

  • Contract: During the relationship and 10 years after (tax/legal obligations).
  • Consent: Until revocation.
  • Legitimate interest/legal obligations: Necessary time (e.g., duel evidence: X months; images: revocable). Upon completion, data is deleted or anonymized.

Data Subject Rights

Exercise rights (ARSOPL + portability, limitation, opposition):

  • Access, rectification, or deletion ("right to be forgotten").
  • Withdraw consent.
  • Object (e.g., marketing).
  • Data portability.
  • Claim before AEPD (www.aepd.es).

Requests: info@interduels.com (response in 1 month, extendable). Free unless abusive.

Additional Disclosure

  • Minors: Processing only with verifiable parental consent (LOPIVI). We require negative sexual offenses certificate for collaborating staff.
  • Google/Apple APIs: We comply with user data policies of Google/Apple App Store API services.
  • Security breaches: We notify AEPD and affected parties within 72h if high risk.

For questions or exercising rights: info@interduels.com.