Privacy policy

This policy explains how hitsfy Digital, a brand of Mantovani Europe S.L., processes personal data on the website, in the private area and while delivering campaigns.

1. Controller

The controller is Mantovani Europe S.L., VAT ESB93278109, Calle Parra S/N, Edificio A.C.E.B., Oficina 8, 29631 Arroyo de la Miel (Málaga), Spain. Use Support for privacy requests or to exercise your rights.

2. Data we process

We may process account and contact details; address and billing or tax data, including VAT and VIES verification; orders, credit, top-ups, payments and tax documents; public platform URLs and identifiers needed for campaigns; tickets, messages and attachments; and technical logs, IP, device, session, security and consent data.

We do not receive or store full card details. The payment provider shown at checkout processes the payment.

3. Purposes and lawful bases

We process data to create and secure accounts, provide campaigns and support, manage orders, top-ups, payments, refunds and legal obligations. Our bases are performance of a contract, legal obligations and legitimate interests in security, fraud prevention, continuity and improvement. Optional analytics or marketing activities that require it are based on consent, which can be withdrawn.

4. Recipients

Access is limited to authorised personnel and necessary hosting, email, security, payment, support, accounting, VIES and fulfilment providers. Only necessary data is shared. Public campaign URLs may be disclosed to the operational provider.

5. International transfers

Where a provider processes data outside the EEA, we use an adequacy decision or appropriate safeguards such as standard contractual clauses where required.

6. Retention

Data is kept only as long as needed. Accounts are retained during the relationship; orders, transactions and tax documents for statutory periods; tickets and logs as needed for support, security and legal claims. Data is then deleted or anonymised unless retention is required.

7. Your rights

You may request access, correction, deletion, restriction, portability or objection, and withdraw consent without affecting earlier processing. Contact us via Support. You may also complain to the Agencia Española de Protección de Datos (AEPD) at aepd.es.

8. Automation, children and security

We do not make solely automated decisions with significant legal effects. The service is not intended for children unable to enter the contract validly. We apply proportionate technical and organisational safeguards, although no system is completely secure.

9. Cookies and updates

See the Cookie policy and “Cookie preferences” in the footer. The date shown on this page identifies the current version.