PRIVACY POLICY
September 2025 version
Regulatory References
GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
LOPD-GDD: Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights.
LSSI: Law 34/2002, of July 11, on information society services and electronic commerce.
Data Controller
Corporate name: KIDOVO TECH S.L. (“MIINTA” or “us/we”)
Address: Pl. Pau Vila 1, P. 1, Sector Ad, Of. 1 Ad., 08039, Barcelona
NIF (Tax ID): B72803091
Telephone: +34 617 817 527
E-Mail: [email protected]
What categories of data we collect and process
We will process the data you provide us through the registration form on the Platform, as well as through other means related to the use of the Platform or the provision of Services, including data provided through telephone interviews or similar. This data generally includes your first and last name, contact details (email and/or telephone), role (User, parent/guardian in the case of minors).
In addition to this data, we may process other personal data that you voluntarily provide to us or that is generated during our communications or the provision of Services. In particular: data obtained from browsing and using our Platform (IPs, access and registration logs, referral link, technical specifications of the device, geographical area, etc.). Data relating to the use of the Platform and our emotional well-being services (not from sessions, therapies, or support chats with Psychologists, as these services are not provided by MIINTA, but rather the relationship is direct between the Psychologist and the user). Administrative data relating to sessions, therapies, or support chats with Psychologists such as number of sessions, date, time, etc. Data relating to purchases/subscriptions through the Platform, taking into account that payments are outsourced to a payment gateway of recognized prestige. Data relating to the user experience and customization of the Platform and the services offered. Academic and professional data of the Psychologists.
Once you have registered on the Platform and make use of it, we may process other personal data related to its operation and security to ensure its proper functioning and improve the experience of Users.
In exceptional situations in which a Psychologist detects a serious risk to your physical or mental integrity or that of a third party, they may notify us of this situation as explained below.
Furthermore, we also use cookies and similar technologies that collect data from visitors to the Platform as indicated in our Cookies Policy (www.hellomiinta.com/cookies)
Finally, by providing us with your data, you guarantee the veracity and accuracy of the same, releasing us from any liability for any false or inaccurate statements.
Purpose and legal basis for processing
PURPOSE
Provide the Services
Provide the Services and/or address your requests for information, including the recommendation of Psychologists from our collaborating team.
Marketing
Send you commercial communications and newsletters by electronic means. You may object at any time by sending us an email to [email protected] or by following the instructions contained in each communication, or by disabling the corresponding functions through your device.
Satisfaction surveys
Send you satisfaction surveys regarding the Platform and the services offered on it.
Ensure the functioning of the Platform
Process technical and usage data (logs, access, metrics, incidents, etc.) to maintain, optimize, and improve the Platform.
Analysis of Platform usage
Perform data analysis on the use of our Platform.
Situations of serious risk
Disclose personal data to competent authorities, health Psychologists, educational centers, or other organizations related to the users when there is a serious danger to the physical or mental integrity of the user or third parties.
LEGAL BASIS
Art. 6.1.(b) GDPR
Necessity to offer and provide you with the Services or information you request.
Art. 21.1 of the LSSI + Art. 6.1.(a) (non-clients) or Art. 21.2 LSSI (clients)
If you are a client, we will rely on the exception to consent provided in art. 21.2 of the LSSI to send you information about our products and services by electronic means. If you are not a client, we will only send you this information if you give us your consent.
Art. 6.1.(f) GDPR
Legitimate interest to conduct feedback surveys in order to improve our Platform and the services offered.
Art. 6.1.(f) GDPR
Legitimate interest to ensure security and continuous improvement of the Platform.
Art. 6.1.(a) GDPR and Art. 6.1.(f) GDPR
Consent for the installation of analytical cookies and legitimate interest for subsequent processing consisting of tracking the use of our Platform to implement improvements for the User experience. Likewise, legitimate interest to process usage data of the platform when such data has not been obtained from cookies. We will carry out these analyses anonymously, pseudonymized, or with similar guarantees to the extent that we are not interested in identifying Users, but rather general and aggregated usage data of the Platform.
Art. 6.1.(d) GDPR
Necessity to protect vital interests resulting from legal obligations and applicable deontological regulations. In these cases, the Psychologist may communicate the risk situation to us for the sole purpose that we may transfer the situation to the corresponding third parties (competent authorities, educational centers, etc.).
Recording and analysis of calls
MIINTA may record and analyze certain phone calls using artificial intelligence in order to identify the reason for the inquiry, manage appointments and cancellations, and obtain evidence in the event of potential claims related to these services.
The processing may be based on our legitimate interest in managing and documenting the requests received and defending against potential claims, in accordance with Article 6(1)(f) of the GDPR, provided that the applicable legal requirements are met.
Recordings and transcripts used solely to classify inquiries will be deleted once processed, within a maximum period of 72 hours. When it is necessary to retain a recording as proof of a modification, cancellation, or charge, it will be kept exclusively for the necessary and legally applicable period.
Access will be restricted to authorized personnel and technology providers necessary for processing. Recordings will not be used to train artificial intelligence models.
You can object to the recording and exercise your data protection rights through the contact channels indicated in this policy.
Retention period of your data
We will retain your data for as long as you are a User of our Platform in order to manage the relationship properly and send you information. However, if we observe prolonged inactivity, we will delete your data to the extent that processing is no longer appropriate, relevant, and necessary for the purposes for which it was collected, unless you request that we delete it sooner. Furthermore, we will take all reasonable steps to ensure that your data is rectified or deleted when inaccurate.
Once your data is no longer necessary for the intended processing, we will keep it properly blocked and solely to address potential liabilities, as required by law. Subsequently, we will proceed to delete it permanently.
Your data is stored with top-tier, highly reputable technology providers that are widely used in the industry and comply with the most demanding data protection regulations. Among them is Amazon Web Services (AWS), one of the benchmark standards in cloud hosting security and reliability.
In addition to the standard measures implemented by these providers, at MIINTA we apply an additional layer of security at the application level that includes, among others: {password management and secure authentication via Auth0, endpoints protected with rotating tokens, encrypted and restricted database access via SSH tunneling}.
Finally, remember that you have the right at all times to contact us to rectify or delete your data from our systems.
Automated decisions
No, we will not make individual decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
Who we share your data with
As a general rule, we will only disclose your data to third parties when necessary to provide you with the best possible service and experience in the following cases:
Psychologists: In order to book the sessions or therapies of interest to our Users with our collaborating team of Psychologists.
Service providers: We collaborate with reputable providers that help us deliver and maintain the Services, such as managers, IT technicians or cloud/hosting providers, psychology advisors, CRM providers, partners, IT services, logistics companies, telecommunications providers, or payment gateways. These third parties, who will act as our (sub)processors, will be responsible for protecting your personal information. Don't worry, they will have security measures in place to guarantee the privacy of your personal information, including the corresponding data processing agreement pursuant to Art. 28 GDPR.
Collaborating organizations: If MIINTA has a collaboration agreement with an organization, such as an educational center or a sports federation, we will send said organizations aggregated (and therefore non-personal) data regarding the use of the Platform to monitor the development of the collaboration. Under no circumstances will we send information relating to the sessions or therapies between User and Psychologist, as these remain restricted to the patient-professional scope. Exceptionally, if a Psychologist considers, according to their professional judgment, that a person's mental or physical integrity is in danger, they may report this to us so that we can transfer it to the corresponding organization with which we have a collaboration agreement, which is based on (i) the need to protect vital interests when someone's life is at risk; (ii) the need to comply with our legal obligations to provide assistance and report events in cases that may constitute a criminal offense.
Third parties and competent authorities: We will share your personal data with third parties if required to do so by law, by an administrative or judicial authority, or for the proper fulfillment of public interest or public order for the reasons set forth in the previous section.
Finally, in the event of a corporate restructuring, we may transfer all your personal information to the third party resulting from such transaction.
Third-party communication tools
The services may include the use of third-party communication tools such as WhatsApp, Zoom, Google Meet, Teams, or similar, which means that these applications process your personal data in the same way they do when you are a user of the tool.
We provide you with some recommendations when using them:
Use communication channels under adult supervision. Configure the privacy settings of your device and these tools to limit the visibility of your personal information. Share content and information responsibly. Use passwords. Chat from a safe and private location. Consider deleting chat history after each conversation to prevent unauthorized access. If your personal data has been compromised, the Spanish Data Protection Agency provides a specific channel to help you: [email protected].
WhatsApp: We do not share your data with WhatsApp; rather, we use this tool as a communication channel.
Where applicable, WhatsApp will process your data in the same way it has been doing for as long as you are a user of the service.
In other words, Services that include the use of WhatsApp imply that this application processes your personal data in the same way it does when you are a user of it (therefore, you must register if you do not have a WhatsApp account).
You can consult WhatsApp's privacy policy at this link: https://www.whatsapp.com/legal/privacy-policy.
For our part, these are our recommendations when using WhatsApp:
Use WhatsApp under adult supervision. Configure the privacy settings of your device and WhatsApp to limit the visibility of your personal information. Share content and information responsibly. Use passwords. Chat from a safe and private location. You can delete the history after each chat to prevent unauthorized access. If your personal data has been compromised, the Spanish Data Protection Agency has established a specific channel to help you: [email protected].
International transfers
In general, we do not carry out international data transfers. However, as is common today, some of our providers may have their servers located outside the European Economic Area (EEA). In these cases, we only transfer your personal data when it is strictly necessary to operate on the Platform. For example, when using Google cookies, your data will be transferred to the US.
We assure you that, with all these providers, we have executed or will execute all necessary documents to ensure that your data is protected in compliance with applicable privacy regulations.
If you have any further questions regarding the international transfer of your data, please contact us and we will be delighted to provide more information on this matter.
Your rights
What rights do you have?
As provided by the GDPR and the LOPDgdd, your rights as a User are as follows:
Access: You have the right to access your data to know what personal data concerning you we are processing.
Rectification or erasure: Under certain circumstances, you have the right to rectify inaccurate personal data concerning you that is processed by us or even to request its erasure.
Restriction: Under certain circumstances, you will have the right to request the restriction of the processing of your data, in which case we inform you that we will only retain it for the exercise or defense of legal claims.
Portability: Under certain circumstances, you will have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.
Objection: Under certain circumstances and for reasons related to your particular situation, you will have the right to object to the processing of your data, in which case we will stop processing it unless compelling legitimate grounds exist, or for the exercise or defense of potential claims. You may at any time object to receiving commercial communications.
How can you exercise your rights?
You can exercise your rights at any time by contacting us as indicated in Section 2, indicating "Privacy" in the subject line. In case of doubt regarding your identity and for the purpose of verifying it, we may request that you send us certain additional information or documentation.
Exercising these rights is free of charge, unless the requests are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee.
Do you have the right to withdraw your consent?
Of course! If at any time you wish to withdraw your consent for the processing of your data for one, several, or all of the purposes indicated above that rely on said consent, you have the right to do so. Please note that, where appropriate, this could affect the way we provide the Services to you.
Do you have the right to lodge a complaint?
Sure, you can lodge a complaint at any time with the competent supervisory authority based on your place of residence. You can consult the various supervisory authorities by contacting us. For example, in Spain, the competent supervisory authority is the Spanish Data Protection Agency (AEPD).
In any case, before initiating any complaint, we kindly ask that you contact us via email at [email protected] to try to resolve any misunderstandings amicably.
Within what timeframe will we reply?
As soon as we receive your requests, we will get straight to work to respond as quickly as possible. If for any reason we are unable to do so within one month, please contact us again and accept our apologies for any possible inconvenience. This will allow us to assist you and rectify any potential error that may have prevented us from answering you on time.
Changes to the Privacy Policy
At MIINTA, we reserve the right to modify this Privacy Policy to reflect how we process your data.
How to contact us
We are always interested in hearing our Users' feedback. If you have any questions or comments regarding our Privacy Policy, wish for us to stop using your information, want to exercise any of the rights mentioned above, or have any complaints, please do not hesitate to contact us; we will be delighted to answer all your questions.
You can contact us by sending an email to [email protected] or by writing to Plaça Pau Vila 1, Planta 1, Sector Ad, Oficina 1 Ad. 08039, Barcelona.
Miinta Cookies Policy
To review the details of our cookie policy, you can consult them at this link.