← Back to home

Privacy Policy

Last updated: June 20, 2026

Privacy Policy

Last updated: June 20, 2026

1. Data controller

In compliance with applicable regulations, the owner's full identifying details are available to any interested party who requests them on a justified basis through info@honexa.es.

This Policy explains how Honexa processes the personal data of the platform's users (landing site at https://honexa.es and application at https://app.honexa.es), in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. Data we process

We process the data the user provides to us and the data generated through the use of the Platform:

  • Identification and profile data: first name, last name, public name (alias) and, optionally, a profile picture.
  • Account data: email address and authentication data (access via magic link).
  • Approximate location data: the province and municipality indicated by the user. We do not process precise geolocation (GPS).
  • Activity data: recorded matches, results, groups the user belongs to, ranking and associated statistics.
  • Purchase and payment data: product purchased, amount and date. Card or payment-method details are processed directly by the payment gateway (Stripe); Honexa does not store or have access to full card numbers.

3. Purposes and legal bases

Purpose Legal basis (art. 6 GDPR)
Create and manage the account and enable authentication Performance of the contract
Provide the service: recording matches, groups, rankings and statistics Performance of the contract
Display the user's public name, photo and results to the other members of their groups and in the relevant rankings Performance of the contract
Use the province and municipality to display nearby rankings and clubs Performance of the contract / legitimate interest
Manage the purchase of paid services and issue invoices Performance of the contract and legal obligation (tax and commercial regulations)
Send operational communications necessary for the service (verification, expiry notices, confirmations) Performance of the contract
Handle requests and the exercise of rights Compliance with a legal obligation

We do not carry out profiling with legal effects or significant automated decisions about the user.

4. Visibility of data between users

Honexa is a social and competitive platform. Certain data is visible to other users by the very nature of the service:

  • The public name and profile picture are visible to other members of the user's groups and in the rankings in which they participate.
  • The results of recorded matches are visible to the other participants in that match and to the members of the corresponding group.

The user's real first and last name are not shown publicly unless the user uses them as their public name.

5. Retention periods

  • Account and profile data: for as long as the account remains active.
  • A group's data: when a group expires, a period of inactivity is kept; 3 months after expiry, the group's data is deleted.
  • Billing data: kept for the periods required by tax and commercial regulations (generally up to 6 years under the Commercial Code).
  • After the account is closed, data is deleted or anonymised, except for data that must be kept due to a legal obligation.

6. Recipients and data processors

We do not sell or transfer data to third parties for commercial purposes. To provide the service we rely on the following providers, which act as data processors under the corresponding contract:

  • Microsoft Azure — hosting and infrastructure. The servers are located in the European Union (database in Spain and services in the EU).
  • Stripe — payment processing.
  • Brevo (Sendinblue) — sending transactional emails.

7. International transfers

Data is hosted in the European Union. Payment processing through Stripe may involve the processing of data by entities located in the USA; such transfers are covered by the safeguards provided for in the GDPR (standard contractual clauses and/or applicable adequacy framework). Emails sent through Brevo are processed within the European Union.

8. User rights

The user may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability by contacting info@honexa.es, indicating the right they wish to exercise. Their identity may be verified where necessary.

The user also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es — if they consider that their data is not being processed in accordance with the regulations.

9. Minors

The Platform is intended for people aged 14 or over, the age from which Spanish law allows the minor's own consent for the processing of their data. The registration of children under 14 is not permitted. If we detect an account belonging to a child under 14, we will delete it.

10. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration, taking into account the state of the art and the nature of the data processed.

11. Changes to this Policy

We may update this Policy to reflect legal or service changes. The version in force will always be the one published on the Platform, indicating its update date.

12. Public website analytics (landing)

On our presentation page (landing site at https://honexa.es) we use Cloudflare Web Analytics to measure website traffic on an anonymous and aggregated basis (for example, the number of visits or the most-viewed pages), in order to understand the general use of the site and improve it. This measurement is carried out by Cloudflare, an external provider acting as a data processor. Cloudflare Web Analytics does not use cookies and does not collect personal data that could identify visitors.