PRIVACY POLICY
1. DATA CONTROLLER
The data controller is MUSSA. Full identification details are available in the Legal Notice.
2. DATA COLLECTED AND PURPOSE
Through the subscription forms on THE WEBSITE, only the user's email address is collected, for the following purposes:
• Sending MUSSA's newsletter and editorial communications.
• Sending information about products, resources and offers related to bikini fitness and competitive bodybuilding.
The legal basis for processing is the user's explicit consent, given at the time of subscription.
3. EMAIL MARKETING PLATFORM
Subscriber management and email sending are handled through SendFox (a platform by SureCart Inc., USA). SendFox acts as a data processor under confidentiality agreements compliant with the GDPR. For more information https://sendfox.com/privacy
4. DATA PROCESSORS
• Webempresa Europa, S.L. (CIF: B-65739856), proveedor de hosting. C/ Almagro 11, 6º 7ª, CP 28010, Madrid.
• SSureCart Inc. / SendFox, email marketing platform. USA. GDPR-compliant via standard contractual clauses.
• Google LLC, web analytics provider (Google Analytics 4). More information at https://policies.google.com/privacy
• Google LLC, reCAPTCHA provider (anti-spam protection in forms). Privacy Policy: https://policies.google.com/privacy — Terms of Service: https://policies.google.com/terms
5. INTERNATIONAL DATA TRANSFERS
Both SendFox and Google Analytics may involve transfers of data to the USA. Such transfers are carried out with adequate safeguards under the GDPR (standard contractual clauses approved by the European Commission).
6. RETENTION PERIOD
Data will be retained for as long as the user maintains an active subscription. Once unsubscribed, data will be deleted within a maximum of 30 days, unless a legal retention obligation applies.
7. USER RIGHTS
Users may exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by contacting info@mussa.es with the subject line "Data Protection". Users may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. WITHDRAWAL OF CONSENT
Users may cancel their subscription at any time by clicking the unsubscribe link in any email received, or by sending an email to info@mussa.es. The unsubscription will take effect within a maximum of 48 hours.
9. APPLICABLE REGULATIONS
Data processing is governed by Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and other applicable data protection legislation.
10. AMENDMENTS
MUSSA reserves the right to update this policy. Changes will be published on THE WEBSITE at least 10 days before taking effect.