1. Who We Are
Task Force MAKO (“MAKO”, “we”, “us”) is a tactical milsim unit based in Portugal. We are the controller of the personal data described in this policy. It covers everything this website does with your data: the application form, member registration, partnership inquiries, cookies and analytics.
For any question about your data, write to geral@mako.pt.
2. What We Collect and Why
You can read the whole website without giving us any personal data. We only receive data when you send one of the three forms below.
Application to join (Apply page)
- Required: name, age, email address, your motivation for applying.
- Optional: phone number, milsim experience, equipment you own.
We use it to evaluate your application, reply to you and, if you are accepted, organise your onboarding. Legal basis: steps taken at your request before joining the unit (GDPR Art. 6(1)(b)).
Member registration (Login page)
- Required: full name, email address, password, APD number, a photo of your APD card.
- Optional: callsign, team.
We use it to create your account and to confirm that you hold a valid APD membership before the account is approved. The APD card is checked by MAKO command staff and is used for nothing else. Depending on the issuing association, the card may show your photo or an identification number; we do not copy those details anywhere else. Legal basis: providing the account you asked for (Art. 6(1)(b)) and our legitimate interest in admitting only verified players (Art. 6(1)(f)).
Partnership inquiry (Suggest a Partnership page)
- Required: company or brand name, contact name, email address, your message.
- Optional: website.
We use it to assess the proposal and reply to you. Legal basis: steps taken at your request before a possible agreement (Art. 6(1)(b)).
Technical data
To stop spam and password guessing, the website counts form submissions and failed logins per IP address. The counter is stored in scrambled form, not as a readable IP address, and expires within one hour. Our hosting provider also keeps standard server logs (IP address, date, page requested). Legal basis: our legitimate interest in keeping the website secure (Art. 6(1)(f)).
We do not collect payment information. We do not use your data for marketing, and we do not sell or rent it to anyone.
3. Where Your Data Is Kept
- Applications and partnership inquiries are sent by email to MAKO’s mailbox. They are not saved in the website’s database. You receive an automatic confirmation email.
- Member accounts are saved in the website’s database: name, email, callsign, team, APD number and approval status. Your password is stored only in hashed form; nobody at MAKO can read it.
- APD card photos are saved in a private folder on the server with a random file name. They have no public address and can only be opened by a logged-in MAKO administrator.
Access is limited to MAKO command staff.
4. Who Else Processes Your Data
- Dominios, S.A. (Dominios.pt), Portugal — hosts the website, its database and our email on servers located in Portugal.
- Google Ireland Limited — Google Analytics, only if you accept analytics cookies (see Section 5). Google may transfer data to the United States under the EU–US Data Privacy Framework.
We share your data with no one else, unless the law requires it.
5. Cookies and Analytics
- Your cookie choice — saved in your browser’s local storage (
mako_consent) for 6 months, so we do not ask on every visit. It is never sent to us. - Login cookies — set by WordPress only when you log in to a member account, to keep you signed in. They are required for the account to work.
- Google Analytics cookies (
_ga,_ga_*, up to 2 years) — set only after you click Accept on the cookie banner. They tell us which pages are visited and from what kind of device. If you click Reject, Google Analytics is never loaded and no data is sent to Google.
You can change your choice at any time with the Cookie Settings link at the bottom of every page. If you withdraw consent, the analytics cookies are deleted from your browser. Legal basis for analytics: your consent (Art. 6(1)(a)).
The fonts on this website are served from our own server. No advertising or social media trackers are used.
6. How Long We Keep It
- Applications: 12 months after a decision, then the email is deleted. If you are accepted, your contact details are kept while you are a member.
- Member accounts and APD cards: while your account exists. When an account is deleted, the APD card photo is deleted with it. Registrations that are not approved are deleted within 30 days.
- Partnership inquiries: 12 months after the last contact, or for the duration of the partnership.
- Security counters: up to one hour.
- Analytics data: Google keeps visit data linked to cookies for 2 months. After that, only totals that cannot be traced back to a visitor remain.
7. Your Rights
Under the General Data Protection Regulation (GDPR) you can ask us to:
- Access — send you a copy of the data we hold about you;
- Rectify — correct data that is wrong or out of date;
- Erase — delete your application, your account and your APD card;
- Restrict — limit how we use your data;
- Object — stop processing based on our legitimate interest;
- Port — give you your data in a portable format.
Write to geral@mako.pt from the email address you used on the form. We reply within one month. Where processing is based on consent, you can withdraw it at any time; this does not affect what was done before.
You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD — Comissão Nacional de Proteção de Dados (www.cnpd.pt).
8. Age Limit
This website’s forms are for adults. Applicants must be at least 18 years old. If we learn that we have received data from someone under 18, we delete it.
9. Changes to This Policy
When we change how the website handles personal data, we update this page and the date at the top.
10. Contact
Task Force MAKO — Portugal
geral@mako.pt