Back

Privacy Policy

COLECTIN APP, S.L.
Last updated · 12 May 2026

1. Identity of the Data Controller

In compliance with Article 13 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter, “GDPR”), and Article 11 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (hereinafter, “LOPDGDD”), the User is informed that the personal data provided through this website will be processed under the responsibility of:

  • Data controller: COLECTIN APP, S.L.
  • NIF: B88720032
  • Registered office: Calle Muntaner 248, 2º 1ª, 08021 Barcelona.
  • Contact email: tech@colectin.com
  • Main activity: development and future operation of a digital marketplace for the purchase and sale of sports collectibles.

Personal data will be processed lawfully, fairly and transparently, in accordance with the principles and guarantees set out in the applicable data protection legislation.

2. Personal Data Processed

The personal data that COLECTIN APP, S.L. may collect through the website (hereinafter, the “Website”), as well as through the forms, tools or features made available, is limited to what is strictly necessary for the purposes described in this policy and may include the following categories:

a) Identification and contact data

Email address provided when joining the waiting list.

b) Data derived from participation in the validation form

In order to validate the service proposal and guide the development of the future marketplace, the User may voluntarily answer a short form of up to six (6) questions. The information collected may include, among others:

  • Habits, interests and preferences relating to sports collecting.
  • Types of items the User collects, buys or sells.
  • Comments, suggestions or opinions the User chooses to share.

c) Technical and browsing data

IP address, browser and device type, date and time of access, referring URLs and data collected through cookies or similar technologies (see our Cookie Policy).

d) Consent confirmation

Record of acceptance of this Privacy Policy and, where applicable, of the consent given for the sending of commercial communications.

The Website does not request or process special categories of personal data (health data, ideology, trade union membership, religion, sexual orientation or biometric data), nor financial data.

The User warrants that the data provided is truthful, accurate, complete and up to date, and undertakes to notify COLECTIN APP, S.L. of any relevant change in order to keep it updated.

3. Purposes of Processing

The personal data provided by the User may be processed by COLECTIN APP, S.L. for the following legitimate purposes:

a) Management of the waiting list

To register the User on the waiting list for Colectin's future marketplace, manage that list and inform the User of the service launch, as well as of beta phases, pilot programmes or early invitations.

b) Analysis of the validation form

To analyse form responses in aggregate in order to better understand collectors' needs, validate product hypotheses and guide the development of the future platform's features.

c) Informational and commercial communications

To keep the User informed about the project's development, news and relevant milestones and, where the corresponding consent has been given, to send commercial communications about the products and services of COLECTIN APP, S.L.

d) Statistical and technical analysis of the Website

To collect browsing data for statistical purposes and to improve the experience, usability and performance of the Website, using anonymisation or pseudonymisation techniques where applicable.

e) Compliance with legal obligations

To respond to the requirements of administrative, judicial or supervisory authorities that are enforceable under the applicable legislation.

COLECTIN APP, S.L. does not use the data collected to make automated individual decisions, including profiling, that produce legal effects on the User or significantly affect the User, within the meaning of Article 22 of the GDPR.

In any event, at each form or data collection point the User will be informed whether the data requested is mandatory or optional, as well as of the consequences of not providing it.

4. Legal Basis for Processing

The processing of the personal data collected through the Website is based on one or more of the following legal bases, in accordance with Article 6 of the GDPR:

a) Consent of the data subject (Art. 6.1.a GDPR)

It constitutes the legal basis for:

  • Including the User on the marketplace waiting list.
  • Voluntary participation in the validation form and the processing of the responses provided.
  • Sending commercial communications, where the User has expressly authorised this by ticking the box provided for that purpose.
  • The installation of cookies or similar technologies that are not strictly necessary.

This consent may be withdrawn at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

b) Legitimate interest (Art. 6.1.f GDPR)

COLECTIN APP, S.L. may process certain data on the basis of its legitimate interest, duly balanced against the rights and freedoms of the User, in order to:

  • Ensure the security and proper functioning of the Website.
  • Prevent fraud, unauthorised access or abusive use.
  • Carry out non-identifying statistical analysis of the form responses to guide product development.

The User may object at any time to processing based on legitimate interest, in accordance with Article 21 of the GDPR.

c) Compliance with legal obligations (Art. 6.1.c GDPR)

Where processing is necessary to respond to legal obligations or requirements of the competent authorities.

5. Data Retention Periods

COLECTIN APP, S.L. will retain personal data for as long as strictly necessary to fulfil the purposes for which it was collected, without prejudice to any applicable legal retention periods.

a) Waiting list data

The email address will be retained until the launch of the marketplace and, at most, for a period of twenty-four (24) months from collection, unless the User requests its deletion beforehand or a contractual relationship is established.

b) Validation form responses

The responses will be retained for a maximum period of twenty-four (24) months from collection, after which they will be deleted or irreversibly anonymised for use for statistical purposes.

c) Data for commercial communications

This data will be retained until the User revokes consent, unsubscribes or objects to the processing. Each communication will include a clear and free-of-charge mechanism for exercising this right.

d) Data relating to compliance with legal obligations

It will be retained for the periods provided for by the applicable legislation.

Once the relevant periods have elapsed, the data will be blocked and kept exclusively at the disposal of the competent authorities for the limitation periods of any potential liabilities. Once those periods have elapsed, the data will be securely deleted.

6. Recipients and Data Processors

COLECTIN APP, S.L. does not disclose the User's personal data to third parties, except where there is a legal obligation, a requirement from a competent authority or it is necessary to carry out the legitimate purposes described in this policy.

However, certain processing operations may require access to the data by external providers acting as data processors, in accordance with Article 28 of the GDPR. Those third parties provide technical support, infrastructure, analytics, communication or development services, and operate under the following conditions:

  • The processing is carried out on behalf of COLECTIN APP, S.L. and under its documented instructions.
  • There is a data processing agreement in accordance with the applicable legislation.
  • Appropriate technical and organisational security and confidentiality measures are guaranteed.

The categories of processors that may have access to the data include, among others:

  • Hosting and cloud storage providers.
  • Mailing list management, email marketing and CRM platforms.
  • Form and survey management and analysis tools.
  • Web analytics tools (anonymised or pseudonymised).
  • Legal, technical or regulatory advisers engaged by COLECTIN APP, S.L.

Should the disclosure of data to other entities be envisaged in the future, COLECTIN APP, S.L. will expressly notify the User and, where applicable, obtain the corresponding consent.

7. International Data Transfers

As a general rule, COLECTIN APP, S.L. does not carry out international transfers of personal data to third countries or international organisations located outside the European Economic Area (EEA).

However, certain services provided by technology providers may involve the processing of data from locations outside the EEA. In such cases, COLECTIN APP, S.L. ensures the adoption of the appropriate safeguards required by the GDPR to protect the rights and freedoms of data subjects, through one of the following mechanisms:

  • An adequacy decision by the European Commission regarding the destination country (Art. 45 GDPR).
  • Standard contractual clauses approved by the European Commission (Art. 46.2.c GDPR).
  • Duly approved binding corporate rules (Art. 47 GDPR).
  • Explicit consent of the data subject in specific cases (Art. 49.1.a GDPR).

The User may request additional information about the international transfer mechanisms applied, as well as a copy of the corresponding safeguards, by contacting tech@colectin.com.

8. User Rights

The User, as the owner of the personal data processed by COLECTIN APP, S.L., may exercise at any time the rights recognised under the applicable data protection legislation and, in particular, the following:

a) Right of access

To know which personal data is being processed, for what purposes, its origin, the recipients to whom it is disclosed and the intended retention period.

b) Right to rectification

To request the correction of inaccurate or incomplete personal data.

c) Right to erasure (“right to be forgotten”)

To request the deletion of personal data when it is no longer necessary for the purposes for which it was collected, when consent has been withdrawn or when the right to object has been exercised.

d) Right to restriction of processing

To obtain restriction of processing in the cases provided for by the legislation, for example while the accuracy of the data or the lawfulness of the processing is being verified.

e) Right to object

To object to the processing of the data on grounds relating to the User's particular situation, where the legal basis is legitimate interest.

f) Right to data portability

To receive personal data in a structured, commonly used and machine-readable format, and to transmit it to another controller, where the processing is based on consent or on a contract and is carried out by automated means.

g) Right not to be subject to automated individual decisions

Including profiling, where such decisions produce legal effects on the User or significantly affect the User.

Exercising your rights

The User may exercise these rights free of charge by submitting a request to tech@colectin.com or by postal mail to the registered office indicated in section 1, stating the right they wish to exercise and enclosing a copy of an official identity document (DNI, NIE or passport) that allows their identity to be verified.

Likewise, if the User considers that the processing of their personal data does not comply with the legislation, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), through its electronic office: www.aepd.es.

9. Security Measures

COLECTIN APP, S.L. has adopted the appropriate technical and organisational measures to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services, in accordance with Article 32 of the GDPR.

Among others, the following measures have been implemented:

  • Encryption of communications via the HTTPS/TLS protocol.
  • Access controls and reinforced authentication on the systems containing personal information.
  • Regular backups with restricted access.
  • Periodic review of the effectiveness of the technical and organisational measures implemented.
  • Confidentiality commitments and training for staff with access to personal data.

In the event of a security breach affecting personal data that may pose a risk to the rights and freedoms of data subjects, COLECTIN APP, S.L. will notify the Spanish Data Protection Agency within the terms and time limits set out in the applicable legislation and, where required, will communicate the incident to the affected data subjects.

10. Minors

The services offered through the Website are aimed exclusively at persons over fourteen (14) years of age, in accordance with Article 7 of the LOPDGDD. By providing their data, the User declares that they meet this age requirement.

COLECTIN APP, S.L. does not knowingly collect or process personal data of minors under fourteen (14) years of age. Should it detect that a minor's data has been provided without the consent of their legal guardians, such data will be deleted immediately.

Parents, guardians and legal representatives are advised to supervise minors' use of the Internet.

11. Use of Cookies and Similar Technologies

The Website may use cookies and similar technologies (tags, pixels or local storage) in order to facilitate browsing, improve the User's experience and obtain analytical information about the use of the Website.

The installation of cookies that are not strictly necessary will be carried out only with the User's express consent, which can be managed through the settings panel available on the Website. For detailed information about the cookies used, their purpose, ownership, duration and deactivation mechanisms, the User may consult the Cookie Policy.

12. Changes to the Privacy Policy

COLECTIN APP, S.L. reserves the right to modify, update or revise this Privacy Policy at any time, in order to adapt it to legislative or case-law changes, to changes in the criteria of the supervisory authorities, and to the evolution of the services offered.

When significant changes are introduced that affect the rights or freedoms of Users, they will be communicated clearly and prominently through the Website or, where applicable, by a message to the email address provided, obtaining new consent where legally required.

The User is advised to review this policy periodically.

13. Contact

For any query relating to this Privacy Policy or to the processing of personal data, the User may contact COLECTIN APP, S.L. through the following channels:

  • Email: tech@colectin.com
  • Postal address: Calle Muntaner 248, 2º 1ª, 08021 Barcelona.