YOUR DATA. YOUR CHOICE.
Privacy notice
Draft for restricted testing. The controller must approve the final notice, processors and retention policy before launch.
Controller and contact
Pitiusa Media Group S.L.
Calle Pedro Francesc 9, Planta 4a, Puerta 406b, 07800 Ibiza, Spain
NIF: B57320178
Email
+34 711 59 16 26
Your membership
We use your name and email address to manage your membership, verify your email and provide your club card. Your membership becomes active only after you confirm your email address. A mobile number is required when you register. The intended legal basis for the requested membership service is Article 6(1)(b) GDPR.
News, invitations and offers
With your consent, Pitiusa Media Group S.L. uses your email address and, if provided, your mobile number to send news, event invitations and guest-list links, magazine releases and offers, including magazine purchase offers, by email and WhatsApp. Without a mobile number, your choice applies to email only. Consent is voluntary under Article 6(1)(a) GDPR and does not affect your membership. You can withdraw email or WhatsApp separately in your membership preferences or by contacting us, without losing your membership or the other channel. For WhatsApp messages, your mobile number is shared with Meta/WhatsApp. We record the choice, wording, linked privacy information, version, source and time. Earlier permissions are not extended to new purposes automatically.
Email marketing is intended for Direct Mail; personal event invitations are intended for WhatsApp. The current app provides filtered channel exports and does not send newsletters or WhatsApp invitations. SMS is not used.
Service providers and wallets
This restricted test uses Vercel for the application (Frankfurt function region), Supabase PostgreSQL in Frankfurt for data, and the existing DomainFactory mailbox for requested verification emails. Provider agreements and the final production privacy notice remain under review.
If you choose Apple Wallet or Google Wallet, your name, member number and a random card identifier are provided to that wallet provider. The QR code contains a random identifier. Wallet providers may process information outside the EU. Their applicable terms and transfer arrangements must be reviewed before enabling production cards.
We keep the last confirmed storage status and confirmation time for your club card. Apple update registrations and Google Wallet storage checks provide this information. These records do not establish your phone model or whether you have read a notification. Storage-status records are removed when your membership data is erased.
Retention
Unconfirmed registrations are removed after seven days; access links expire after 24 hours. Sessions last eight hours. Security audit records are kept for 90 days, completed delivery jobs for seven days. On an authorised erasure request, contact details and consent records are removed; a technical revocation record remains for 30 days, or until failed wallet updates succeed. Encrypted backups expire within 30 days. Erasures and consent withdrawals must be reapplied after restoring an older backup.
Only invited testers may register. Test records will be reviewed and removed before the public launch. No production backup service has been commissioned for this test.
Your rights
You may request access, correction, erasure, restriction, portability or object to processing where the GDPR provides those rights. Withdrawal does not affect the lawfulness of earlier consent-based processing. Contact us using the address above. You may also complain to a supervisory authority, including the Spanish Data Protection Agency (AEPD).
Cookies and security
We use essential session cookies, with an eight-hour lifetime. We do not use advertising trackers. Administrative access is restricted, and production requires an authenticator code as well as a password.
If you switch between light and dark appearance, a first-party preference cookie remembers your choice for up to one year. It contains only the selected appearance, with no member identifier.
Adobe Fonts
This website uses Adobe Fonts to display Helvetica Neue. Your browser connects to Adobe’s servers to load the stylesheet and font files, which gives Adobe your IP address for delivery. Adobe states that it does not store this IP address or set cookies to serve web fonts. Font and website information is used to deliver the service and measure licensed usage. See Adobe’s Fonts privacy notice.