Privacy policy

1. Data controller

The PTA (hereinafter, “the PTA”) is responsible for processing the personal data collected through this application. For any query about your data you can write to us at hola@biblioampa.hackingtime.net.

2. What data we collect

• The family's name or surname (you choose it when you register)
• Email
• PTA membership number (optional)
• Preferred language
• Family members and pupils you register (name and year), for sign-ups and the membership card
• Your participation in PTA activities: event and activity sign-ups, volunteering, poll votes and access records
• Fee and activity payments (amount, status and receipt; card details are processed by the payment provider and never pass through us)
• Your canteen diet preference, if you save it — stored only in your browser (local cookie), not on our servers
• Information about the books you add (title, author, condition, etc.)
• History of the loans you take part in
• Messages you send to other families within a loan
• Book ratings and reviews

3. What we use them for

• Running PTA life: members and fees, events, activities, polls, announcements and activity access control.
• Managing book lending between PTA families.
• Notifying you by email or notification about what affects you (requests, sign-ups, messages, reminders).
• Maintaining a shared book catalogue.

4. Legal basis

We process your data based on your express consent when registering and on the PTA's legitimate interest in organising its activities and services for member families (including book lending).

5. Who else accesses your data

To run the app we use the following technology providers, which act as data processors under GDPR-compliant clauses:

• Supabase — database and authentication, data hosted in the EU.
• Resend — sending transactional emails.
• Vercel — hosting the web application.

We don't share your data with any other third party, nor do we sell it.

6. How long we keep them

We keep your data while your account is active. If you ask to delete your account, we anonymise your name and email and keep only the loan history in anonymised form, since the other families also have a right to their own data.

7. Your rights

• Access: see what data we hold about you (in your profile).
• Rectification: correct wrong data (also from your profile).
• Erasure: delete your account from your profile → “Delete my account”.
• Portability: ask us for an export of your data by email.
• Objection and restriction: contact us to stop receiving emails or to restrict processing.

If you consider that we are not properly handling your rights, you can file a complaint with the Spanish Data Protection Agency (AEPD).

8. Cookies

We use two types of cookies, both technical and without tracking purposes:

• Session — essential to keep you signed in.
• Canteen diet preference — saves the menu you choose to see by default (e.g. “Coeliac”). It is stored only in your browser; we don't send or store this data on any server of ours. You can remove it by clearing your browser cookies.

We don't use analytics or advertising cookies, nor tracking tools.

9. Changes to this policy

We may update this policy. If there are substantial changes, we'll notify you by email and within the app.