Who is the data controller for your personal data?
Your personal data will be processed by LALIGA, with NIF (tax identification no.): B-05421805 and address at Calle Torrelaguna 60, 28043, Madrid, a private sports association, in accordance with the provisions of Articles 12 and 41 of the Sports Act 10/1990 of 15 October, which is exclusively and compulsorily made up of all the public limited sports companies and clubs that participate in official professional football competitions at the state level. LALIGA is registered under number 1 in the Professional Leagues section of the Register of Sports Associations of the High Council for Sport.
LALIGA Data Protection Officer contact: email@example.com
Where do we obtain your personal data from?
LALIGA will process the data which you have provided on the registration form about the minor and the personal data of the parents/legal guardians of the minor (name, surname, date of birth, residence country, nationality, contact email, contact telephone number).
Why do we process your personal data?
Request for information relating to the activities organised by LALIGA within LALIGA Academy : On completing the information request form, we inform you that we will process the personal data of the minor and that of the parents/legal guardians of the minor in order to send you relevant information and informational leaflets about the activities organised by LALIGA offered on the platform. Likewise, LALIGA will organize groups of interested parties to manage requests for information more efficiently (eg, verify that everyone has been contacted in time, follow up on requests and responses from interested parties, etc.).
In this regard, LALIGA uses the services of a third party provider (RP Solutions, Inc.) to verify the validity of the email address provided to LALIGA to sign up to the Platform; this also involves an international transfer, in this case of the email address provided, to the United States. This is a country in which an equivalent level of protection to that of the European Economic Area is not guaranteed. Consequently, LALIGA has signed standard contractual terms adopted by the European Commission with said service providers pursuant to the provisions of Art. 46.2 c) of the General Data Protection Regulation, including additional guarantees and obligations addressed to these providers for as much security and transparency as possible. The content of the standard contractual terms is available on request through firstname.lastname@example.org.
The legal basis for the aforementioned purposes is that the processing is necessary in order to take steps at the request of the data subject prior to entering into a contract by virtue of the provisions of art. 6.1 b) of the General Data Protection Regulation.
The legal basis for the aforementioned purposes is that the processing is necessary for the execution of a contract in which the interested party is a party by virtue of the provisions of art. 6.1 b) of the General Data Protection Regulation.
Internal reports: Likewise, LALIGA will process in aggregated form the personal data that you provided when signing up (in this case, residence country, nationality, and birthdate of the minor) for the preparation of relevant metrics and statistics that let LALIGA analyse the number of requests and/or registrations in the offered activities, by different user segments that are generated based on the analysed data for the purposes of evaluating the interest of the activities by region, country or age range. In particular, LALIGA will carry out aggregated segmentation based on the aforementioned data, which includes: Segmentation according to nationality, residence country and age range. (e.g., 20 users are from Spain and they are between 10 and 15 years old).
The legal basis for the aforementioned purpose is that the processing is necessary to satisfy the legitimate interest of LALIGA by virtue of the provisions of art. 6.1 f) of the General Data Protection Regulation, consisting in extracting lessons learned from the information provided and obtained from users that let it improve the Platform and optimise the campaigns run based on the interest they generate among the different user groups. Before that, we would like to inform you that LALIGA has analysed the proportionality between its legitimate interest and its users’ rights and freedoms. You can request the conclusions of this analysis through email@example.com.
You have the right to object to the aforementioned purpose at any time in accordance with the procedure described in the section "What are your rights when you provide us your personal data?"
Commercial communications about the activities organized by LALIGA within LALIGA Academy: We inform you that LALIGA will process the personal data of the father / mother / legal guardians to send them commercial communications about other activities, programs, campuses or academies of LALIGA within LALIGA Academy.
For this purpose, LALIGA will only process your email address.
The legal basis for processing your data for the aforementioned purposes is the consent you have granted for processing your data for the selected purposes under the provisions of art. 6.1 a) of the General Data Protection Regulation. Your personal data will be held for these purposes until you revoke the consent granted.
You have the right to withdraw your consent at any time following the procedure described in the “ What are the user’s rights when providing us their personal data? ” section, this does not affect the legality of the processing based on consent prior to its withdrawal.
How long will we keep your personal data for?
The personal data which we process will be stored for such time that the purposes which motivated their collection persist and/or you do not revoke the consent which you have given, or you do not exercise your rights of erasure, objection or restriction of processing.
Likewise, LALIGA will keep your personal data, duly blocked, for the following period of time for the sole purpose of addressing any kinds of responsibilities that could arise:
Request for information relating to the activities organised by LALIGA within LALIGA Academy: The data provided for request for information relating to the activities organised by LALIGA within LALIGA Academy will be kept as long as you do not request the deletion of your data, this purpose persists and, once it has ended, during the limitation period of legal actions that may arise from it.
Registration and inscription on LALIGA Academy’ activities: The data provided for registration and inscription on LALIGA Academy’ activities will be kept as long as you do not request the deletion of your data, this purpose persists and, once it has ended, during the limitation period of legal actions that may arise from it.
Internal reports: The data provided for internal reports will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object their processing and, once this purpose it has ended, during the limitation period of the legal actions provisions that may arise from it.
Commercial communications about the activities organized by LALIGA within LALIGA Academy: The data provided for LALIGA commercial communications will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object to the given consent and, once this purpose it has ended, during the limitation period of the legal actions provisions that may arise from it.
Said personal data will be deleted when such period of time expires.
To which recipients will your personal data be communicated?
Your personal data will not be communicated to third parties. Nevertheless, LALIGA may reveal the personal data and any other information about the user when required to do so by public authorities exercising the duties legitimately attributed to them and in accordance with the applicable provisions.
Likewise, some entities subcontracted by LALIGA may access the personal data and information as processors or sub-processors to provide LALIGA with a necessary service. These service providers sign a contract requiring them to use your personal information only for the provision of the services stated in this policy.
What are your rights when you provide us your personal data?
We hereby inform you that you can exercise your rights of access, rectification, objection, erasure, right to not be subject to an automated decision, portability and restriction of processing with LALIGA at any time.
What do your rights as a user consist of?
- Right of access: you have the right to obtain confirmation as to whether LALIGA processes your personal data, as well as to access such data.
- Right of rectification: you can request inaccurate personal data be modified or rectified.
- Right of erasure: you can request your personal data be deleted.
- Right of restriction of processing: In certain circumstances, you can request the processing of your data be restricted, in which case, it will only be kept for the exercise or defence of claims.
- Right of objection: you can object to the processing of your data for the purpose you specify. LALIGA will cease to process the data, except for compelling legitimate grounds, or for the exercise or defence of possible claims.
- Right not to be subject to a decision based solely on automated processing, including profiling, which may cause you legal effects or similarly significantly affects you.
- Right of portability: if the Platform allows for it, you can exercise the right of portability of your data, in a structured, commonly used and machine-readable manner, and to transfer the data to another data controller.
How do I exercise my rights?
By sending an email to firstname.lastname@example.org. Exercising your rights is completely free of charge.
Likewise, you can revoke the consent given or object to the data processing based on legitimate interest at any time by following the procedure set out in the different communications you receive from LALIGA, or by sending an email to: email@example.com.
The objection to a particular purpose or the revocation of consent given will not affect your use of the app or the legality of the processing prior to the objection or revocation of consent.
Likewise, if you believe that you have failed to exercise your rights satisfactorily or that the processing of your data has not been performed in accordance with the applicable regulations, you may contact LALIGA's Data Protection Officer at firstname.lastname@example.org or file a complaint with the Spanish Data Protection Agency (AEPD) through its website www.agpd.es.