Privacy Policy

Data Controller

Company name: Juan F. Balladares as responsible for miagendar.com
NIF/CIF: 55402808V
Email: juanballadares@miagendar.com

1. Purposes of Processing

We process the personal data you provide us for the following purposes:

Management of users and authentication (registration, login).
Management of appointments and provision of contracted services.
Communication with users (notifications, customer support).
Sending administrative and operational communications necessary for service provision.
Analysis and improvement of the service (statistics and usage metrics).

2. Legal Basis

The legal basis for processing is, depending on the case: contract execution (service provision), the consent of the interested party (when requested) or compliance with a legal obligation. For marketing activities, prior consent will be requested when required by current regulations.

3. Data Categories and Origin

Data categories include, depending on the service: identification data (name, surnames), contact data (email, phone), company/office data and data necessary for appointment management. Data comes primarily from the interested party themselves or from their authorized representation.

4. Conservation

Data will be retained for as long as necessary to fulfill the purpose for which they were collected and to comply with applicable legal obligations. Retention criteria are established by data type (e.g.: billing data 5 years; active user data while the account exists).

5. Communication to Third Parties and Processors

We may communicate data to providers acting as data processors (hosting, email sending, payment gateways, messaging services). In all cases, contracts are signed that guarantee the level of security and obligations required by the GDPR.

6. International Data Transfers

If international data transfers are made (for example, providers with servers outside the EU), appropriate safeguards will be adopted (standard contractual clauses, adequacy decisions or other measures required by regulations).

7. Rights of Data Subjects

You can exercise the rights recognized by data protection regulations:

Access: obtain confirmation about whether we process your data and a copy thereof.
Rectification: request correction of inaccurate data.
Erasure (right to be forgotten): request deletion of data when appropriate.
Processing Limitation: request restriction in certain circumstances.
Data Portability: receive data in a structured and reusable format.
Objection: object to processing for reasons related to your particular situation.

To exercise these rights, you can contact: juanballadares@miagendar.com. You also have the right to file a complaint with the Spanish Data Protection Authority (AEPD).

8. Security Measures

Appropriate technical and organizational measures have been adopted to ensure an adequate level of security (access control, encryption in transit where appropriate, backups, logs and internal policies). The details of the measures are kept up-to-date and are proportionate to the risk.

9. Cookies and Similar Technologies

We use cookies and similar technologies for functional, analytical and personalization purposes. For more information, consult our cookie policy and the consent banner.

10. Sub-processors

Indicative list of provider categories: hosting providers, email services, payment platforms, messaging/telephony services, analytics. If you would like the detailed list of sub-processors, request it from our contact email.

Use of Google Data (Google Calendar)

If a professional voluntarily connects their Google account from the Settings section, MiAgendar requests the following permissions:

Google account email address (userinfo.email): only to show which account is connected.
Google Calendar events (calendar.events): to create, update and delete, in the professional's calendar, the events corresponding to appointments managed in MiAgendar.

Data we process: the connected account email, the OAuth access tokens required to keep the connection, and the ID of each event created by MiAgendar. Events only contain information about the appointments themselves (client name, date and time, note, client phone and email).

What we do NOT do: MiAgendar does not read, analyze or store other events or calendars in your Google account; it only acts on events the application itself created.

We do not sell or share Google data: data obtained through Google APIs is not sold, not shared with third parties, not used for advertising or profiling, and not used to train artificial intelligence models. It is used solely to provide the appointment synchronization feature requested by the user.

MiAgendar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revocation and deletion: you can disconnect Google Calendar at any time from Settings; we then revoke access and delete the stored tokens. You can also revoke access at https://myaccount.google.com/permissions or request deletion of your data at juanballadares@miagendar.com.

11. Updates

This policy may be updated. The date of the last review appears at the end of the document.

Last updated: 2026-10-29