Data controller
Neus Espinach Jubanteny, a self-employed professional trading as Playduca. Spanish tax ID: 52591594R. Business address: Avinguda Estació 3, 08198 Sant Cugat del Vallès (Barcelona), Spain.
Data we process
We collect the information you provide by form or email: contact name, email address, school, town, activity, grades, pupil numbers and comments. Phone numbers, dates and needs mentioned in comments are optional. Fields marked with an asterisk are required to handle your request. We do not ask for children’s identifying details or sensitive data; please do not include them.
The server may process IP addresses, timestamps, requests and browser information to provide and secure the service. Games use room codes, session or reconnection identifiers, team names, language and progress. Use fictional names. We do not use these data to track browsing across websites or create advertising profiles.
Purposes and legal bases
We handle enquiries, prepare proposals and maintain school relationships on the basis of our legitimate interest in professional relationships, limited to professional contact details and roles (GDPR Article 6(1)(f) and Article 19 of Spain’s LOPDGDD). Article 6(1)(b) applies where the individual is a contracting party or requests pre-contractual steps for themselves. Legal obligations are handled under Article 6(1)(c).
Website and game security and continuity rely on our legitimate interest in preventing abuse and providing the requested service. Marketing news relies on separate, optional consent (GDPR Article 6(1)(a)). We do not make decisions with legal effects based solely on automated processing.
News and unsubscribing
The news checkbox is optional and unticked by default. Reading the policy or making an enquiry does not subscribe you to marketing. We record your choice, wording shown, language, date and source as evidence. At this stage, we do not transfer the list to Mailchimp or activate subscriptions there.
You can withdraw consent at any time, free of charge, by emailing info@playduca.com or using the unsubscribe option in marketing emails. Unsubscribing does not affect enquiries or necessary service communications. Withdrawal does not affect the lawfulness of earlier processing.
Data retention
Closed enquiries that do not result in a booking are reviewed and deleted 12 months after closure, unless a legal obligation or claim requires retention. Customer data is kept during the relationship and for mandatory legal periods, with access restricted where required. Marketing preferences are kept until consent is withdrawn, alongside the minimum records needed to evidence consent and prevent further messages after unsubscribing.
Operation Burrow rooms and progress are retained so games can be resumed and printed kits remain valid. Team names are replaced with generic names after 24 hours of inactivity; this does not remove codes or other technical data. You can request deletion by providing the room code and the details needed to verify your request.
Technical records are kept for the time needed to detect and resolve incidents and address possible claims. Backups have restricted access and are replaced according to the operational cycle; relevant deletions must be reapplied if a backup is restored.
Providers and recipients
Dinahosting hosts the website, games and internal management system, and provides the email service. Authorised technical personnel access only the data needed to maintain the service, subject to confidentiality. We do not sell data or share it for third-party marketing. Disclosures to authorities, advisers or other recipients are limited to what is necessary for legal obligations or service delivery.
Dinahosting’s hosting and email terms include the conditions for processing data on behalf of the customer. You can consult them at the following link and request information about providers and applicable safeguards at info@playduca.com.
Your rights
You may request access, rectification, erasure, restriction, objection and portability where applicable, and withdraw consent, by emailing info@playduca.com. Explain your request and provide identification details; we will ask for more information only if we have reasonable doubts about identity. You may object to legitimate-interest processing because of your particular situation, and to marketing at any time.
We will respond within the statutory one-month period. If complexity or the number of requests requires an extension, we will inform you within that period. You may complain to the Spanish Data Protection Agency (AEPD).
Cookies and local storage
The website does not activate Google Analytics or advertising tracking. It uses first-party session and form-security cookies necessary for the service. The private dashboard uses cookies to authenticate authorised users. They are not used for analytics or advertising.
Platform and game session cookies, and XSRF-TOKEN when issued, have a configured lifetime of 120 minutes, renewed during use. Games may save the language and a reconnection key in browser localStorage; it has no automatic expiry and remains until you clear the site’s data.
You can inspect, block or delete cookies and site data through your browser. This may prevent forms, private access or game reconnection from working. YouTube and other external links open only when selected and have their own policies. If we introduce non-essential analytics, we will explain it and request consent before activation.
Changes to this policy
We will update this information if services or processing change. Any new purpose requiring consent will be subject to a new choice. The version and date appear on this page.