Notice: this document is a template with an indicative GDPR/LOPDGDD structure, pending review by a legal professional before its definitive validation. It does not replace legal advice.
At Tipsterland we take the protection of your personal data seriously. This policy explains what data we collect, for what purpose, on what basis we process it and what rights you can exercise, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Tipsterland — company name, tax ID and registered office pending completion with the definitive corporate details. Contact address for privacy matters: privacidad@tipsterland.com.
2. Data we collect
Depending on how you use the Service, we may process:
- Account data: name, alias, email address, profile picture, language, time zone and, if you invoice your premium channels, tax details (name or company name, tax ID, address).
- Usage data: published picks, follows, messages, likes, saved items, channel subscriptions, results history and interactions within the Platform.
- Technical and cookie data: IP address, device/session identifiers, browser type and the cookies described in our Cookie Policy.
- Payment data: handled directly by our payment provider (Stripe); Tipsterland does not store your full card details.
The Service is intended for people aged 18 or over; we do not knowingly collect data from minors.
3. Purposes of processing
- To create and manage your account, and to provide you with the Service's features.
- To process payments and manage premium channel subscriptions.
- To display a tipster's public history and statistics for transparency purposes (ranking, verification of results).
- To send you operational communications (verification, security notices, support).
- To prevent fraud, abuse and misuse of the Platform.
- To comply with legal obligations (e.g. tax or accounting).
4. Legal basis
We process your data, depending on the case, on the basis of:
- Performance of a contract (Art. 6(1)(b) GDPR): to provide you with the Service, your account and any subscriptions you take out.
- Consent (Art. 6(1)(a) GDPR): for non-essential cookies and marketing communications, where applicable.
- Legitimate interest (Art. 6(1)(f) GDPR): Platform security, fraud prevention and improvement of the Service.
- Legal obligation (Art. 6(1)(c) GDPR): invoicing and retention of tax/accounting records.
5. Recipients and processors
We do not sell your data. We share strictly necessary data with providers who supply services to us under a data processing agreement, in particular:
- Firebase / Google: authentication (sign-in, including social sign-in with Google) and application infrastructure.
- Stripe: secure processing of premium channel payments.
- Hosting providers: operation of the servers and databases that run the Platform.
- Other ancillary technology providers, only to the extent necessary to operate the Service.
6. International transfers
Some of our providers (e.g. Firebase/Google, Stripe) may process data outside the European Economic Area. In those cases we rely on the safeguards provided for by law (such as the European Commission's standard contractual clauses or recognised adequacy frameworks) to guarantee an equivalent level of protection.
7. Retention period
We keep your data for as long as your account remains active. If you delete it, we erase or anonymise your data, except for data we must retain due to a legal obligation (e.g. invoicing records, for the applicable tax and commercial periods) or for the establishment, exercise or defence of legal claims.
8. Your rights
You may exercise, under the terms provided by the GDPR, your rights of access, rectification, erasure, objection, restriction of processing and portability of your data.
- Closing active sessions and deleting your account: from Settings → Privacy and security.
- Rectifying your profile data (name, alias, time zone): from Settings → Account.
- For all other rights (including full portability of your data) or any questions, write to us at privacidad@tipsterland.com.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).
9. Security
We apply reasonable technical and organisational measures (encryption in transit, access control, secure authentication) to protect your data against unauthorised access, loss or alteration.
10. Minors
The Service is not intended for people under 18 and we do not knowingly collect their data. If you become aware that a minor has provided us with personal data, please contact us so we can delete it.
11. Changes to this policy
We may update this policy to reflect legal, technical or Service-related changes. We will publish the current version on this page together with its update date.
Contact / Data Protection Officer
To exercise your rights or for any privacy enquiry, write to us at privacidad@tipsterland.com. The appointment of a Data Protection Officer (DPO) will be assessed in accordance with the cases set out in Art. 37 GDPR; should one be appointed, their contact details will be published in this section.