Privacy Policy
Scope: portal.shooterfy.com
Last updated: 17/08/2026
Version: 1.0
1. Data Controller
Section titled “1. Data Controller”| Field | Details |
|---|---|
| Controller | Shooterfy |
| Address | to be determined |
| Privacy contact | privacy@shooterfy.com |
2. Data Protection Officer
Section titled “2. Data Protection Officer”Shooterfy has not appointed a Data Protection Officer, as it is not required to do so under its current activity. For any privacy matter, you can write to privacy@shooterfy.com.
3. Data, Purposes, and Legal Basis
Section titled “3. Data, Purposes, and Legal Basis”| Data processed | Purpose | Legal Basis |
|---|---|---|
| Email address, displayed name, optional account identifier and avatar | Account authentication and management | Execution of relationship with manufacturer or pre-contractual measures |
| Role, permissions and assigned manufacturer | Authorize and limit Portal access | Execution of relationship and legitimate interest in security |
| Invitations, acceptance, access changes and account events | Manage access, provide support and maintain security audit trail | Execution of relationship and legitimate interest of Shooterfy in preventing unauthorized access, detecting abuse and defending claims |
| Technical and security data linked to the session | Protect sessions, prevent abuse, resolve incidents and defend claims | Legitimate interest of Shooterfy in ensuring the security, availability and integrity of the Portal |
| Product specifications, images, videos and documents | Operate the Portal and publish the catalog per the Portal Terms | Execution of relationship with manufacturer |
Authentication: The Portal allows login via Google through an external identity provider. Shooterfy does not request or store Google passwords.
Advertising: The Portal does not use marketing analytics, behavioral advertising or profiled advertising.
4. Data Origin
Section titled “4. Data Origin”Data is collected from the following sources:
- The user when logging in and using the Portal
- Google, when Google Social Login is used
- The external identity and authentication provider
- An authorized administrator when sending an invitation or assigning access
- Technical events generated by Portal usage
5. Data Recipients
Section titled “5. Data Recipients”Data may be processed by categories of providers necessary to operate the Portal:
- Identity and authentication provider
- Frontend hosting, CDN and perimeter security
- API and database infrastructure
- Image and document storage and delivery
- Transactional email for invitations and technical notifications
Providers process data solely to provide their services. Shooterfy does not publish server names, IPs, regions, account identifiers, firewall rules or internal configurations.
6. International Transfers
Section titled “6. International Transfers”If any provider processes data outside the European Economic Area, Shooterfy will apply a valid guarantee under the GDPR.
You may request information about categories of recipients, transfers and guarantees by writing to privacy@shooterfy.com.
7. Data Retention
Section titled “7. Data Retention”| Data Category | Retention Period |
|---|---|
| Account and permissions | While access is active and for as long as necessary to manage deletion, fulfill legal obligations, maintain backups and defend claims |
| Invitations and access logs | While the invitation or access is valid and for the strictly necessary period for audit, security and defense of claims; subsequently they will be deleted or anonymized, unless legally required |
| Technical and security data | For as long as necessary to detect, investigate and mitigate incidents, resolve errors or defend claims; subsequently they will be deleted or anonymized, unless legally required |
| Backups that may contain personal data | Up to 3 months maximum |
| Published product content | While remaining available in the catalog, except valid withdrawal, legal obligation or defense of claims |
8. User Rights and Deletion
Section titled “8. User Rights and Deletion”You may request the following rights by writing to privacy@shooterfy.com:
- Access to your personal data
- Rectification of inaccurate data
- Erasure of your data
- Objection to processing
- Restriction of processing
- Data portability
Account deletion revokes Portal access. It does not automatically delete published product content; its withdrawal is governed by the Portal Terms and applicable legal obligations.
Complaints: You may lodge a complaint with the competent supervisory authority; normally the AEPD if the main or sole establishment of Shooterfy is located in Spain.
Applicable Language
Section titled “Applicable Language”This document is offered in Spanish, English and Portuguese for ease of reading.
In case of discrepancy between translations, the Spanish version prevails, unless an applicable mandatory rule requires otherwise.