Legal notice: Any translations of this document into other languages are provided in good faith, solely for convenience and informational purposes for users. In the event of any conflict, ambiguity, or discrepancy, the only legally valid and binding version for all purposes is the original written in Spanish.

1. Information about the Data Controller

In accordance with the General Data Protection Regulation (GDPR EU 2016/679) and Organic Law 3/2018 (LOPDGDD), users are informed about the data controller of the personal data collected through the platform:

• Owner: Antonio Rey Ruiz
• Project: BeerCoRank (Non-profit platform)
• Contact and Privacy Delegation: admin@beercorank.com

2. Purposes and Legal Basis for Processing

The personal data provided by the user during their registration and interaction on the platform will be processed for the following purposes based on their legal standing:

• User and Account Management: profile creation, authentication using secure credentials, and sending technical or transactional communications (such as password recovery or email validation). Legal basis: performance of a contract/terms of service (Art. 6.1.b GDPR).
• Participation in Rankings and Challenges: processing numerical volumes of collections to calculate global and national rankings. Legal basis: explicit consent of the user when configuring their public data (Art. 6.1.a GDPR).
• Internal Messaging: facilitating private communication between collectors through the platform's internal inbox. Legal basis: legitimate interest in community interactivity and service execution (Art. 6.1.f GDPR).
• Security and Maintenance: automatic recording of the date of the last login for control of inactive accounts and prevention of unauthorized access. Legal basis: legitimate interest of the controller (Art. 6.1.f GDPR).

3. Data Collected, Minimum Age, and Profile Distinction

BeerCoRank exclusively collects basic identification data: username/pseudonym, email, country, region, language, and passwords (stored using irreversible cryptographic hash functions). Registration is strictly reserved for individuals over 14 years of age; the owner does not knowingly collect data from minors.

The system strictly differentiates between private data (email and login credentials, which are never exposed to third parties) and public data voluntarily configured by the user in their profile and showcase.

4. Data Retention and Deletion

Personal data will be kept as long as the user maintains an active account. If the user exercises their right to deletion or decides to permanently delete their account, all their personal identifying data (email, name, showcase photographs, and personal links) will be irreversibly deleted or destroyed from active systems. However, in strict compliance with the historical integrity of collective rankings and statistics, the historical numerical records of their collections will be stored strictly anonymously, completely unlinked from their previous identity, under the technical figure of an anonymous profile.

5. Recipients and International Transfers

Personal data will not be transferred to third parties, except under legal obligation. As it is an open platform for collectors from all over the world, data expressly configured as public (such as the pseudonym, country of origin, or ranking statistics) will be globally visible through the internet platform.

6. Security and Spam Prevention (Cloudflare Turnstile)

To protect access integrity, prevent spam, and block automated attacks (bots), BeerCoRank uses the Cloudflare Turnstile security validation system, provided by Cloudflare, Inc.

This service operates invisibly in the background, analyzing technical signals and session telemetry (such as browser and device characteristics) on a strictly transient basis to distinguish legitimate human users from automated programs. This processing is carried out under the legal basis of our legitimate interest in ensuring platform security (Art. 6.1.f GDPR). Cloudflare Turnstile is a privacy-first alternative that does not use cookies to track user behavior outside this environment, nor does it retain personal data long-term.

7. User Rights

The user may exercise their rights of access, rectification, deletion, restriction of processing, portability, and objection at any time by sending a written communication to the contact email (identity accreditation may be required if there are reasonable doubts):

• Rights exercise email: admin@beercorank.com

Likewise, if the user considers that their rights have not been properly addressed, they have the legal right to file a claim with the competent supervisory authority, which in Spain is the Spanish Data Protection Agency (AEPD) through its official electronic headquarters (www.aepd.es).