Privacy policy

Who processes your data

Controller: MintMarket.

Contact: info@mintmarket.eu.

What we collect

Your email address, which is required. Your first name, which is optional. And an age bracket (18+, 14–17) rather than your date of birth: it is the least precise piece of information that still tells us what we may lawfully do.

For the digital card we store a random code, stamp balance and movement history. The QR contains no email address and cannot add stamps on its own.

We also store, as proof of your consent: date and time, your IP address, the exact text shown to you and where you signed up from. This is not for profiling — the law requires us to be able to prove that you consented and what you read when you did (art. 7.1 GDPR).

We do not ask for a postal address, a phone number or anything else. If you win the prize draw, we will then ask for a delivery address, and only to send you the prize.

Why, and on what legal basis

To manage your prize draw entry, if you ticked that box. Basis: your consent (art. 6.1.a GDPR).

To send you offers and news by email, if you ticked the other box. Basis: your consent.

To create and maintain your digital stamp card when you complete registration. Basis: performing the service you request (art. 6(1)(b) GDPR). The card does not authorise marketing.

These are two separate purposes with two separate boxes. You can accept one without the other, and entering the draw never obliges you to receive marketing.

Who else sees your data

Supabase, which hosts the database, on a server in Frankfurt (Germany). The data does not leave the European Union.

Vercel, which hosts the website.

Resend, which sends the emails. It is a US company, so sending email involves an international transfer covered by the safeguards in arts. 44 ff. GDPR.

We do not sell or share your data with anyone else.

How long we keep it

For as long as you want our emails. The moment you unsubscribe, we stop writing to you.

The card and its history are kept while it remains active or until you request erasure, subject to applicable legal retention periods.

When you ask us to delete your data, we block it: it stops being used for anything and stays restricted for the legal limitation period, after which it is permanently destroyed. This is what art. 32 of the Spanish LOPDGDD requires, which is why it is not an instant deletion.

We always keep an irreversible code derived from your email on an exclusion list. It is the only way to guarantee we never write to you again by mistake.

What you can do

You have the rights of access (see what we hold), rectification (correct it), erasure (have it deleted), objection (stop us using it), restriction (freeze it) and portability (take it elsewhere in a machine-readable format).

Write to info@mintmarket.eu and we will reply within one month.

Unsubscribing is faster still: every email has a one-click link that needs no account and no message to anyone.

If you think we have got it wrong, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Cookies

We use no advertising or tracking cookies and share no data with ad networks. We only use local storage and, when you sign in, strictly necessary cookies to keep the session secure; these do not require advertising consent.

Automated decisions

We make no automated decisions about you and build no profiles.

Minors

The prize draw is for people aged 18 and over only.

We do not register anyone under 14. If we find that someone under 14 has signed up, we delete their data.

People aged 14–17 may have a digital card, but cannot enter the adults-only prize draw.