Privacy policy.

AltaGama FC — Fixture Club is operated by Medina Digital LLC, Paseo de la Castellana 77, Madrid, M 28046, Spain. We are the controller of the personal information described here. You can reach us at contact@altagamafc.com.

This policy explains what personal information we collect when you use the AltaGama FC website and calendar feeds, why we collect it, who we share it with, and the choices you have. It does not cover sites we link to, which have policies of their own.

We collect information you give us directly and information created as you use the service. From your account: the email address and name you sign in with, whether by email and password or with Google. From the newsletter: the address you subscribe with. In your browser, and only there: your language, timezone, clock format, the clubs you follow and your cookie choice. In aggregate and without identifying you: which pages are viewed, where visits arrive from and on what kind of device. If you accept advertising cookies, Meta receives measurement data about our campaigns. And as on any server, technical logs briefly record the IP address and client of each request, including calendar feed requests.

We use your information to provide the service — your account and your calendars —, to keep it secure and working, to send the newsletter if you subscribe, with an unsubscribe link in every message, to understand in aggregate how the site is used so we can improve it and, only if you accept, to measure our advertising with Meta. That measurement is optional: you can decline it in the cookie notice, or withdraw it at any time from the cookie settings in the footer. We do not sell your personal information.

Where European, UK or Swiss law applies, we rely on one of these: performing our contract with you, our legitimate interests in running and improving the service, your consent where we ask for it, and compliance with legal obligations. Our contract with you covers your account and calendars; legitimate interest covers security, keeping the site running and our cookieless analytics; consent covers the newsletter and Meta advertising measurement; and legal obligations cover what the law requires us to keep or disclose. Where we rely on consent, you can withdraw it at any time.

We share information with service providers who work on our behalf and are bound to use it only for us; with authorities where the law requires it; and with a buyer or successor if the business is sold. Today they are: hosting and delivery of the site (Netlify), the fixtures API and editorial content system (Hygraph), account authentication (Supabase), newsletter delivery (Mailchimp), and cookieless analytics (Umami). Advertising measurement (Meta) is different: it only runs with your consent, and Meta also processes that data under its own responsibility.

Some of our providers process information outside your country. Where that happens we rely on an approved transfer mechanism — an adequacy decision, or standard contractual clauses with additional safeguards. Our providers process information mainly in the United States; we rely on the EU–US Data Privacy Framework where a provider is certified under it, and on standard contractual clauses otherwise. Ask us and we will tell you which applies to you.

We keep personal information only as long as we need it for the purposes above, then delete it or make it permanently anonymous. Your account details are kept until you delete the account; your calendars until you delete them; your newsletter address until you unsubscribe; what is stored in your browser until you clear it. Aggregate analytics contains no identifiers, Meta's cookie expires after about 90 days, and server logs rotate on short schedules. Some information is kept longer where the law requires it.

We use cookies and similar technologies to keep the site working, remember your preferences, and measure how the site is used. Today that is: a cookie that remembers your language for a year; your preferences, your calendars and your cookie choice, which live in the browser's local storage until you clear them; and the session cookies that keep you signed in. Our analytics sets no cookies and stores no identifiers. If you accept advertising, Meta sets _fbp — and _fbc when you arrive from one of its ads — for about 90 days; they are set only after you accept and are removed if you decline. You can control non-essential ones through the cookie settings and your browser.

You can update or delete your account details at any time from your account settings, and change what we send you from the same place. Marketing email carries an unsubscribe link in every message, and unsubscribing takes effect straight away.

You have the right to access your information, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. You can also complain to your local supervisory authority — in Spain, the Agencia Española de Protección de Datos. We answer requests within one month.

You can ask what personal information we collected about you in the last 12 months, where it came from, why we collected it and who received it; ask us to delete or correct it; and opt out of any sale or sharing for cross-context behavioural advertising. Meta measurement may count as “sharing” as California defines it; it only happens if you accept cookies, and declining them — in the notice or from the cookie settings in the footer — is how you opt out. We do not sell personal information for money. We will not treat you differently for exercising these rights.

Under the Swiss Federal Act on Data Protection you can ask for access to your information, have it corrected or deleted, and object to how we use it. You can also complain to the Federal Data Protection and Information Commissioner.

Write to contact@altagamafc.com and tell us what you want to do. We may need to confirm who you are before we act, and we will only ask for what we need to do that. An authorised agent can make a request for you with written proof.

The service is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has given us information, write to contact@altagamafc.com and we will delete it.

We use technical and organisational measures appropriate to the risk — encryption in transit, access controls, and regular review of who can reach what. In practice: all traffic runs over HTTPS, authentication is delegated to our identity provider — we store no passwords — and access to our systems is limited to the people who run the service. No service can promise perfect security.

If we make a material change we will post the new version here and update the date at the top. Where the change affects how we use information you have already given us, we will tell you directly before it takes effect.

Questions, requests and complaints all go to contact@altagamafc.com, or by post to Medina Digital LLC, Paseo de la Castellana 77, Madrid, M 28046, Spain.