Aviso — Reventa en mercado secundario:MundialGo es un revendedor independiente, no el vendedor principal. Los boletos se obtienen de socios de reventa y viaje externos. Los precios pueden ser superiores al valor nominal. No afiliada a la FIFA, a ningún equipo, sede, comité de ciudad anfitriona ni organizador del torneo.
MMundialGo2026 · Boletería premium
Reservar
Home/Privacy Policy

Privacy Policy

GDPR-compliant · last updated 2026-06-24.

Resumen en español. El texto completo a continuación está en inglés. En resumen: tratamos tus datos para procesar tu pedido, enviarte las entradas y mejorar el sitio. Google Analytics 4 y Google Ads se usan únicamente con tu consentimiento explícito (Consent Mode v2). No compartimos datos personales (correo, teléfono, dirección) con redes publicitarias. Puedes acceder, rectificar o eliminar tus datos en cualquier momento.

1. Data controller

INA TRADE SRL (Belgium) is the data controller for personal data collected via mundialgo.com. Contact: info@mundialgo.com.

2. Data we collect

  • Account & order data: full name, email, phone, nationality (optional), purchase history, payment status (without card numbers, we never store these).
  • Technical data: IP address, user agent, language, device type, used for security, analytics and fraud prevention.
  • Cookies & local storage: session token for the cart, language preference. See our Cookies Policy.

3. How we use your data

  • Order fulfilment: contractual basis (Art. 6(1)(b) GDPR).
  • Payments: Stripe processes card data on PCI-DSS Level 1 infrastructure, we never see or store card numbers.
  • Email confirmations & e-tickets: sent via Resend (resend.com), our transactional email partner.
  • Customer support: emails are stored for 24 months for service quality.
  • Analytics: Google Analytics 4 with IP anonymization, only if you opt in via the consent banner. Used to measure site usage and improve the checkout flow. Legal basis: consent (Art. 6(1)(a) GDPR).
  • Advertising measurement: Google Ads conversion tracking, only if you opt in. Used to measure which advertising campaigns lead to bookings. We never share customer email, phone, or address with Google. Legal basis: consent (Art. 6(1)(a) GDPR).

4. Consent & tracking

Analytics and advertising tracking operate under Google's Consent Mode v2. Before you make a choice, all categories are denied by default, no analytics or ad-related identifiers are sent. The banner lets you accept all, reject all, or customize per category (analytics / marketing). You can change your choice at any time from the Cookies Policy.

5. Sub-processors

We rely on the following GDPR-DPA-bound sub-processors:

  • Vercel Inc. (hosting & CDN)
  • Supabase Inc. (database & auth)
  • Stripe Payments Europe, Ltd. / Stripe, Inc. (payment processing)
  • Resend, Inc. (transactional email)
  • Upstash Inc. (rate-limiting state)
  • Google LLC (Analytics & Ads, only with your consent)

6. Your rights

Under GDPR (and CCPA where applicable), you have the right to access, rectify, erase, restrict or port your data, and to object to processing. Email info@mundialgo.com to exercise any of these rights. We respond within 30 days.

7. Data retention

Order records are kept 7 years for tax compliance (Belgian Code of Economic Law). Customer support emails: 24 months. Cart cookies: 7 days. Analytics and advertising identifiers: see Google's retention policies (default 2 months to 14 months depending on signal).

8. International transfers

Some sub-processors are based in the United States. We use Standard Contractual Clauses (SCCs) for any transfer outside the EEA.

9. Complaints

You can lodge a complaint with the data protection authority of your country of residence. In Belgium: APD/GBA (autoriteprotectiondonnees.be).