Two distinct roles
Worth separating up front, because the obligations differ.
As a CONTROLLER we process our customers’ data: who signs up, their email, their billing and their use of the dashboard. That is what this policy covers.
As a PROCESSOR we handle the data our customers collect from their own websites’ visitors through METRICFLY. There the customer is the controller and we act on their documented instructions, under the Data Processing Annex.
Provider
Miranda Network, S.L. (“METRICFLY”, “we”), a Spanish limited liability company with tax ID B-75866194, registered office at Carretera TF-643, 21, piso 01, puerta 1 B, 38600 Granadilla de Abona, Santa Cruz de Tenerife, España, represented by its director.
Contact and notices: support@mirandanetwork.es.
Data we process as controller
Account data: name, email address and organisation. Lawful basis: performance of the contract (Art. 6(1)(b) GDPR).
Billing data: handled by Stripe as an independent controller; we retain the customer identifier, the plan and the subscription status. Lawful basis: performance of the contract and legal accounting obligations (Art. 6(1)(b) and 6(1)(c) GDPR).
Communications: service email and, if requested, the weekly report. The report can be switched off at any time; billing-critical email cannot.
Retention
Account data is kept while the relationship is active and afterwards for as long as needed to handle legal responsibilities. Invoices are kept for the applicable tax and commercial periods.
A customer’s analytics data is kept for 24 months by default and can be deleted earlier from the dashboard.
Recipients and transfers
We use providers acting as processors, listed by name and purpose on the sub-processors page.
Transfers outside the EEA rely on the European Commission’s Standard Contractual Clauses (Implementing Decision (EU) 2021/914).
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to support@mirandanetwork.es. We answer within one month. Access, portability and erasure need not wait: the billing screen lets you download everything we hold about your organisation as JSON, and permanently delete the account and its data — including while a subscription is lapsed
If you believe the processing does not comply, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).