Privacy policy

1. IDENTIFICATION

  • Data Controller: Club Atlético de Madrid S.A.D. (hereinafter, “Club”)
  • NIF: A-80373764
  • Registered office: Avenida de Luis Aragonés, 4, 28022 Madrid.
  • Data Protection Officer: datos@atleticodemadrid.com

2. INFORMATION

By accepting this Privacy Policy, the user (hereinafter, the “User” or, where applicable, the “Users”) is informed that the personal data provided through the website atletilab.com (hereinafter, the “Website”), as well as the data derived from browsing and any other data that the User may provide in the future, will be processed by the Club as the data controller for the purposes indicated in this policy.

The User must carefully read this Privacy Policy, which has been drafted in a clear and simple manner, in order to facilitate its understanding, and the User may freely and voluntarily determine if he/she wishes to provide his/her personal data to the Club.

3. OBLIGATION TO PROVIDE DATA

The data requested in the forms on the Website are, in general, mandatory (unless otherwise specified in the required field) in order to comply with the purposes for which they are being collected. Therefore, if the User does not provide them or does not provide them correctly, the User’s requests will not be able to be attended, without prejudice to the fact that he/she will be able to freely view certain contents of the Website.

4. SOURCE OF DATA

The data processed by the Club for the purposes listed in the following section come from the User through the different forms on the Website and from the User’s use of the Website and his or her browsing of the Website (through cookies or data storage and recovery devices), in accordance with the consents that, where applicable, the User grants to the Club.

5. FOR WHAT PURPOSES, ON WHAT LEGAL BASIS, WHAT TYPE OF DATA AND FOR HOW LONG WILL THE CLUB PROCESS THE USER’S DATA?

The Club will process the User’s data for the following specific purposes, identifying for each of them the legal basis used for the processing of data by the Club, as well as the User’s data that will be the object of the User in each of the actions described herein.

    a) To respond to questions raised by the User through the contact channels provided:

Purpose of processing:

To manage, process and provide support for requests, requests, incidents, claims or queries made by the User through the different communication channels made available by the Club: website contact form, email, telephone or post.

Legal Basis:

The processing of data derived from this purpose is the consent given by the User, who may withdraw this consent at any time. In the event that the User withdraws consent, it is possible that the Club will not be able to manage and process the query or issue raised. The revocation of consent will not affect the processing of data previously carried out by the Club.

Type of data processed:

  • Identification data: name, surname.
  • Contact details: email address, postal address, telephone number.
  • Employment details data: company for which you provide services, company website.
  • Other data: any data that the User may provide in relation to the query, claim or request raised.

Storage period:

The data will be kept for the period necessary to process and respond to your request and, once this has ended, for the period of limitation of the legal actions derived from the aforementioned request.

    b) To send commercial communications to the User:

Purpose of processing:

Manage the sending by any means including by email, or other equivalent information of electronic communication, commercial communications, advertising or promotions about the products or services of the Club, or other third parties or sponsors with which it collaborates, provided that it has given or requested its consent, and giving it the possibility of unsubscribing from each communication.

Legal basis:

The processing derived from this purpose will have as a legal basis the consent, which the User provides by checking the corresponding box and which may be withdrawn at any time. The revocation of consent will not affect the processing of data previously carried out by the Club.

Type of data processed:

  • Identification data: name, surname.
  • Contact details: email address, telephone number.
  • Employment details data: company for which you provide services, company website.
  • Other data: any data that the User may provide in relation to the query, claim or request raised.

Storage period:

The data will be kept for this purpose until the User revokes his/her consent. The revocation of consent will not affect the processing of data previously carried out by the Club.

    c) To create a commercial profile based on the information provided by the User to the Club:

Purpose of processing:

To create a commercial profile of the User based on the User’s preferences, using third-party sources: (information obtained from the User’s browsing on the Website, from social networks: Facebook, Twitter, YouTube, Instagram and TikTok) in order to offer the User products and services in accordance with their interests, if the User authorises it by checking the box provided for this purpose. If the User authorises it, this profiling will be carried out automatically and will result in the existence of automated decisions so that the commercial communications received by the User are in line with his/her interests, tastes and preferences. The User who has consented to the creation of profiles by the Club may revoke his/her consent at any time.

Legal basis:

The processing derived from this purpose will have as a legal basis the explicit consent, which the User provides by freely checking the corresponding box and which may be withdrawn at any time. The revocation of consent will not affect the processing of data previously carried out by the Club.

Type of data processed:

  • Identification data: name, surname.
  • Contact details: e-mail address, telephone number.
  • Employment details data:company for which you provide services, company website.
  • Other data: any data that the User may provide in relation to the query, claim or request raised.

Storage period:

The data will be processed in accordance with this purpose until the User revokes his/her consent and, in no case, will it refer to a period of more than one (1) year.

    d) To prepare internal reports, statistics and analyses to improve the services of the Website:

Purpose of processing:

To analyse, manage and prepare internal reports and statistics on the Users behaviour in order to implement improvements to the Website, in any case, using aggregate information.

Legal Basis:

All processing derived from this purpose will have as legal basis the legitimate interest, rrecognized to the data controller by data protection regulations.

This legitimate interest is based on being able to organise and optimise the Club’s business and commercial activity in the most efficient way possible, in order to be able to offer its Users the services with the highest possible quality and experience.

Type of data processed:

  • Aggregate User Information.
  • Website browsing data: IP, advertising ID, behaviour on the Website.

Storage period:

The information will be used for the preparation of reports, statistics and analysis, during the period necessary to process and prepare the aforementioned reports, statistics and/or analysis, Subsequently, the data will be anonymized.

6. PROCESSING OF THIRD-PARTY DATA BY THE CLUB

In the event that the User provides data from third parties, the User declares that he/she has their consent and/or sufficient legitimacy and undertakes to transfer the information contained in the Privacy Policy to them, exempting the Club from any liability in this regard.

However, the Club may carry out the appropriate verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.

7. WITH WHOM WILL THE USER’S DATA BE SHARED?

All personal data provided by the User through the Website may be communicated to:

  • Public Administrations, in the cases provided for by law, based on compliance with a legal obligation.
  • Courts and Tribunals, in the cases provided for by law, based on compliance with a legal obligation.
  • Third-party service providers who may have access to your personal data, which will process the User’s data in the name and on behalf of the Club, for the purpose of providing services. The Club follows rigorous supplier selection procedures in order to comply with its data protection obligations, including entering into the relevant data processing contract in accordance with Art. 28 GDPR.

Specifically, the Club will have the provision of services by third-party providers who carry out their activity, including but not limited to, in the sectors of activity: legal advice and technological and computer services.

The Club will carry out international transfers of the Users’ data, some of the aforementioned data processors, specifically the technological service providers are located in the USA, a country that does not belong to the European Economic Area, with which the Club has signed standard contractual clauses approved by the European Commission.

8. RESPONSIBILITY OF THE USER

The User guarantees that he/she is over fourteen (14) years of age and that the data he/she provides to the Club is true, accurate, complete and up-to-date. To this end, the User is responsible for the veracity of all the data provided and will keep the information provided suitably updated, so that it corresponds to their real situation. If the User is under 14 (fourteen) years old it is necessary for his/her parents or legal tutors to consent for the processing of personal data.

In the same way, it guarantees that it has informed the third parties of which it provides its data, if it does so, of the aspects contained in this document. Likewise, you guarantee that you have obtained your authorisation to provide your data to the Club for the purposes indicated.

In any case, the User will be responsible for any false or inaccurate information provided through the Website and for any damages, direct or indirect, that this causes to the Club or to third parties.

9. EXERCISE OF RIGHTS

As the owner of the data, the User may send a letter to the Club, at the address indicated in the heading of this Privacy Policy, or by email to the address: datos@atleticodemadrid.com, at any time and free of charge, to exercise the following rights:

  • Right of access.

You have the right to be informed by the Club as to whether or not it is processing your personal data and, if so, to be able to access such data and receive information on the purposes for which they are processed, the categories of data affected by the processing, the recipients to whom your personal data were communicated and the intended period of data retention, among other information.

  • Right to rectification.

You will have the right to request the rectification of your personal data in order to ensure their accuracy and updating.

  • Right to erasure.

You have the right to request the deletion of personal data provided that the legal requirements are met, and the rectification of inaccurate data concerning you when, among other reasons, these are no longer necessary for the purposes for which they were collected.

  • Limitation of processing.

In certain circumstances (for example, in the event that the applicant contests the accuracy of their data, while their accuracy is verified), they may request that the processing of their personal data be restricted, which will only be processed for the exercise or defence of claims.

  • Revocation of consent.

The User may revoke the consent granted to the Club at any time. The consents obtained for the aforementioned purposes are independent, so the User may revoke only one of them, not affecting the others.

  • Opposition to processing.

The User may object to the processing of their personal data in certain circumstances and for reasons related to their particular situation (in particular, processing under the legitimate interest of the Club). The Club will cease processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.

  • Portability of your data.

You will have the right to receive the personal data you have provided to the Club in a structured, common and machine-readable format, and to be able to transmit them to another data controller without being prevented from doing so by the person responsible to whom you have provided them, in the cases legally provided for this purpose.

  • Automated individual decisions.

Likewise, in addition to the above-mentioned rights, in the event that automated decisions are taken, including profiling, you have the right to obtain human intervention from the Club and to express your views and to challenge the decision.

  • Other.

Similarly, where personal data is transferred to a third country or to an international organisation, you have the right to be informed about how appropriate safeguards relating to the transfer can be accessed or obtained.

Likewise, you may file a complaint regarding the protection of your personal data with the Spanish Data Protection Agency at the address C/ Jorge Juan, 6, 28001 – Madrid, when the interested party considers that the Club has violated the rights that are recognized by the applicable regulations on data protection.

Without prejudice to the foregoing, the interested party may contact the Club’s data protection officer at datos@atleticodemadrid.com.

10. SECURITY MEASURES

The Club will treat the User’s data at all times in an absolutely confidential manner and will maintain the mandatory duty of secrecy with respect to them, in accordance with the provisions of the applicable regulations, adopting for this purpose the necessary technical and organisational measures to guarantee the security of their data and prevent their alteration. loss, processing or unauthorised access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.

11. CHANGES

The Club reserves the right to revise its Privacy Policy at any time it deems appropriate, in which case it will be communicated to Users. For this reason, the User is kindly requested to regularly check this privacy statement for the most recent version of the Club’s Privacy Policy.

12. ACCEPTANCE AND CONSENT

The User declares to have been informed of the conditions on the protection of personal data, accepting the content of this Privacy Policy.

Last updated: July 2024