Who is responsible
The data controller is Danilo Vezzoni, who runs EN MENDOZA. For any question about your data, email us at [email protected] or use the contact page.
What data we process
If you write to us or to a business
We keep your name, your email, your phone number (if you give it), the message and the IP address you sent it from. If you write to a business, we forward the message by email so it can reply to you directly; from then on, the business also has your details. We use the IP only to stop abuse and delete it after 90 days. We delete the rest of the message after 24 months.
If you create an account
We keep your name, your email and your password (encrypted: nobody can read it, not even us). With the account we also keep your favorites, your reviews and the businesses you add or manage. Your name is published with your reviews, never your email. If you add a business, its details and photos are published in the guide once we approve them. We keep all this for as long as you have the account: you can delete it whenever you like from «My account», and with it your favorites, your reviews and anything pending review are deleted.
If you sign in with Google
On the website and in the app you can create your account or sign in with “Continue with Google”, without a password. In that case Google confirms your name, your email (already verified) and a number that identifies your Google account, so we can recognize you next time. We do not receive or store your profile photo, your contacts or anything else from your Google account. If you want, you can later create a password from “My account”. By continuing with Google you accept these terms and this policy, just as when you sign up with your email.
Your lists
The lists you make with your account (their name, description, places and your notes) are private unless you choose to share them “by link”: in that case anyone with the link can see them, even without an account. They don’t show your name or your email, they don’t appear on Google or in any listing on the guide, and you can make them private again, change the link or delete them whenever you want (the old link stops working). They are deleted with your account. If someone reports a list, we store the reason, what they wrote, their email if they left it and their IP (which we delete after 90 days) in order to review it; we may hide a list that doesn’t follow the terms.
When you browse
We don't ask you to sign up. To know which listings are viewed most and which buttons are used (call, WhatsApp, directions), we count visits and clicks anonymously: no cookies, without storing your IP and nothing that identifies you. To estimate how many different people visit each day, we use your IP and your browser details to build a one-way encrypted code with a random key that changes every day and is then discarded: that code can't reveal your IP or recognize you from one day to the next, and we delete it after two days (after that, only the number of people per day remains). We also log what's searched in the search box, with no data about who searched, to improve results. Detailed logs are deleted after 90 days; after that only daily totals remain.
Your location
We only ask for it when you tap «Near me», and your browser asks you first. We use it at that moment to show you what's nearby and we don't keep it in our statistics. Like any address you visit, it may stay for a while in the server's technical logs.
In the app
The EN MENDOZA app for Android and iOS processes the same data as the website and nothing more. Your phone asks for location, only when you tap «Near me» and only while you're using the app. If you sign in to your account, your session key is stored encrypted on your phone and we keep the phone model to identify that session; it's deleted when you sign out. Visits and clicks are counted the same way as on the website, anonymously. The app doesn't use personalized advertising or tracking tools.
Phone notifications
If you sign in to your account in the app and give permission, we send notifications to your phone: when your review or your business is published, when someone replies to you and news about your favorites; and, only if you turn them on, the weekend's events and EN MENDOZA news. To do that we store, linked to your account, the notification identifier your phone's system assigns (it doesn't include your number or any other personal data), whether it's Android or iPhone, and its language. You choose which notifications you want, or turn them off, under “Notifications” in the app or in your phone's settings. The identifier is deleted when you sign out on that phone, when you delete your account or when the phone stops accepting notifications (for example, if you uninstall the app).
Business data
Listings contain business information (name, address, phone numbers, opening hours, social media and photos), which comes from public sources or from the businesses themselves. If a listing shows your personal details (for example, if you work under your own name), you can ask us to correct or remove them.
Third-party services
- Cloudflare Turnstile, on the forms, to check that you're not a robot. Cloudflare processes technical data from your browser for this.
- Google Analytics, to count visits and understand how the website is used. It stores analytics cookies in your browser (not advertising ones) and Google receives technical data about the visit (page, browser, approximate location). We don't use it for advertising or to identify you.
- Google (sign-in), only if you choose “Continue with Google”: Google identifies you under its own policy and passes us your name and email.
- Expo, Google (Firebase Cloud Messaging) and Apple (push notifications), only if you turn on the app's notifications: they receive your phone's notification identifier and the text of each notification, in order to deliver it.
- OpenStreetMap, for the website's maps: the map server receives your IP to send you the images.
- Google Maps (Android) and Apple Maps (iPhone), for the app's maps, under their own policies.
- Google Maps and Waze, only if you tap «Directions»: you then go to their site or app, under their own policies.
- The businesses' social media and websites, when you click on them.
- DonWeb, the company that hosts the site and its data.
What we use it for
To reply to you, to pass your message on to the business, to improve the guide and to prevent abuse. We don't sell or share your data with anyone, and we don't do personalized advertising.
Your rights
You can ask, free of charge, to see what data we have about you, to correct it, update it or have it deleted. Email us at [email protected]. We answer access requests within 10 calendar days and correction or deletion requests within 5 business days, as the law requires.
The owner of the personal data has the right to access it free of charge at intervals of no less than six months, unless a legitimate interest is shown, as established in Article 14, paragraph 3 of Law No. 25,326. The Agency for Access to Public Information, as the Supervisory Authority under Law No. 25,326, has the power to handle complaints and claims filed by anyone whose rights are affected by non-compliance with the rules in force on personal data protection.
Security
The site runs over an encrypted connection (HTTPS), passwords are stored encrypted, the admin panel has restricted access with two-factor authentication, and only the EN MENDOZA team sees messages and account data.
Changes to this policy
If anything important changes, we'll update it here with the new date.