DATA CONTROLLER
PURPOSES AND LEGAL BASIS FOR PROCESSING
Personal data will be processed for the following purposes and on the following legal bases:
| Purpose of Processing | Data Processed | Legal Basis (GDPR) |
|---|---|---|
| User registration and service provision: Create the user profile and allow the use of the App. | Full name, email address, telephone number, age range, gender, postal code, city, country. | Performance of a contract (Art. 6.1.b). |
| Communications and Newsletter: Inform users about Spot4Dis news and services. | Name and email address. | Consent given (Art. 6.1.a). |
RETENTION PERIOD
DATA RECIPIENTS AND DATA TRANSFERS
The user's personal data will NOT be transferred, sold or shared with third parties unrelated to AsoPMR for their own commercial purposes. However, in order to properly provide the service and manage the mobile application, the data may be communicated or made accessible to the following recipients:
1. Data Processors (Service Providers)
We work with technology providers that supply technical support and infrastructure services and process data strictly in accordance with our confidential instructions.
2. Legal Obligation
Personal data may be disclosed to the competent authorities, Courts and Tribunals, or the State Security Forces and Corps, only where there is a legal obligation to provide such information.
International Data Transfers:
As the platform uses the infrastructure services of Google Cloud Platform (GCP), data is preferably stored on servers located within the European Union.
However, should Google perform technical maintenance or manage backup copies involving an International Data Transfer outside the European Economic Area (EEA) to countries such as the United States, such transfer will be safeguarded under the EU-US Data Privacy Framework or through the prior execution of Standard Contractual Clauses (SCCs) approved by the European Commission, thus ensuring a level of protection equivalent to that required by the GDPR.
EXERCISE OF THE DATA SUBJECT'S RIGHTS
Once you, as a user of the App, have provided us with your personal data, the applicable legislation grants you the following rights as a data subject:
To exercise any of the rights described above, the data subject must provide sufficient identification or, where applicable, that of their legal representative before AsoPMR. To do so, the request should be sent to the following email address: asopmr@asopmr.org.
Data subjects may also lodge a complaint with the Spanish Data Protection Agency.
CHANGES TO THE PRIVACY POLICY
The platform reserves the right to modify this Privacy Policy in order to adapt it to legislative or case law developments. In such cases, the Provider will announce the changes introduced on this page with reasonable notice before they come into effect.
Last updated: May 2026.