1. Who is responsible for your data
The Juernes de Mesa association is responsible for the personal data processed on this website. You can write to us at [email protected] about anything regarding your data.
2. What data we process and why
When you sign up for a meetup
- Your name (or what you'd like to be called at the table) and, if you bring someone, their name if you give it to us.
- Your game preferences for that meetup (1st, 2nd or 3rd choice, or "I don't want to play it").
- Your email, only if you tell us you're not in the WhatsApp group. By giving it to us you agree that we write to you about that meetup: to let you know about changes and to tell you which table you're at. We don't use it for anything else (no advertising and no news about other meetups).
We use this data to organise the meetup: to allocate tables according to everyone's preferences and to share the allocation.
If you log in with your account
When you log in with Google or Microsoft we receive your name, email and profile picture. We use them to identify you, to let you manage your sign-ups and, if you help organise, to give you access to the admin panel. We also store your preferred language and theme.
To protect the forms
When you sign up without an account, we check you're not an automated program with Cloudflare Turnstile, which analyses technical data from your browser and connection (such as your IP address). We also limit the number of sign-ups from the same connection; to do so we store a value derived from your IP address, not the address itself.
Statistics
We use sign-ups for the association's internal statistics (for example, how many people come or which games are most requested). We don't publish data that identifies you.
We also count, anonymously, which pages are visited (Arcade included) and which city is chosen in the menu. To know how many different people visit us each day we compute a code from your IP address and your browser mixed with a random value that changes every day and isn't stored. That code can't tell who you are or recognise you on another day, and neither the IP nor any of this is stored in your browser. We record it in Microsoft Azure (Application Insights) together with the page, the language, whether it's a phone or a computer and, if you come from another website, its name.
3. Legal basis
- Managing your participation in the meetups you sign up for and, if you have one, your account. Emails about a meetup you've signed up for (changes and table allocation) are part of that: if you don't want them, don't give us your email or ask us to delete it.
- Our legitimate interest in protecting the website against abuse and in understanding the association's activity through statistics that don't identify you.
4. Who sees your data
- Your name doesn't appear on the public website. Each table only shows how many people are at it.
- The people who organise each meetup see the sign-ups to prepare the table allocation. When they publish it, they share a message with each participant's name and table in the meetup's WhatsApp group.
- We don't sell or give your data to third parties. It's only processed, on behalf of the association, by the providers we need for the website to work: Microsoft Azure (hosting and storage), Cloudflare (spam protection) and, if you log in with them, Google or Microsoft.
- Some of these providers may process data outside the European Economic Area. In that case they do so with the safeguards required by law, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
5. How long we keep it
- Sign-ups are kept while they're useful for the association's history and statistics.
- The email given in a sign-up is only used for that meetup.
- Your account data, for as long as you keep it.
- Backups are only made by administrators, are encrypted (AES-256, with a key that needs a personal password and a secret only the server has) and are deleted after 30 days at most. If you ask us to delete your data and we later have to restore an earlier backup, we delete it again.
You can ask us to delete your data at any time (see the next section).
6. Your rights
You can access your data, correct it, ask us to delete it, object to its processing or ask us to restrict it, and request its portability. If you signed up with your account, you can manage your sign-ups yourself; if you signed up without one, write to us at [email protected] with your name and the meetup.
If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
7. Minors
If you're under 14, you need the consent of your parent or guardian to sign up or create an account.
8. Cookies and storage in your browser
We don't use advertising or analytics cookies, and we don't store anything in your browser to count visits (see «Statistics»). We only store in your browser what the website needs to work:
- The language you choose.
- The city you choose, to show you its meetups first.
- If you sign up without an account, a key for each sign-up you make from that browser, so you can change it or cancel from there. It is deleted by itself once the meetup has passed.
- The theme (light or dark) and whether you've closed a notice (the one at the top or the one inviting you to choose your city).
- Your session, if you log in.
- In the admin panel, the list filters.
Cloudflare Turnstile may use its own technical data to check that you're a person; we don't use it for anything else.
9. Changes to this policy
If we change this policy, we'll publish the new version here with its update date.