PRIVACY AND DATA PROTECTION POLICY

ABOUT US

Official ticket sales website of the Spanish Football Association (http://tickets.rfef.es)

ABOUT THIS PRIVACY POLICY

The Spanish Football Association is committed to fully respecting the fundamental right to data protection, in accordance with the applicable data protection law.

The mere use of this website does not imply the processing of personal data, without prejudice to what is indicated in the “Cookies Policy”.

However, should you provide personal data, we would like to inform you of the following, in accordance with Article 13 of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and in accordance with Article 11 of the Law Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, approved on December 5, 2018 (LOPDyGDD)

DATA CONTROLLER

Spanish Football Association, c/ Ramón y Cajal, s/n, 28230 Las Rozas (Madrid)

DATA PROTECTION OFFICER CONTACT DETAILS

c/ Ramón y Cajal, s/n, 28230 Las Rozas (Madrid)

INFORMATION WE COLLECT

Because of your relationship with the Spanish Football Association, we may collect the following personal data:

  1. Identity details, such as name and surname, ID number/Passport/NIE.
  2. Contact details: home address, postal and email address, mobile number, etc.
  3. Personal details, such as civil status, gender, place and date of birth, age, nationality or profession.
  4. Other special information only when strictly necessary, such as health data.
  5. Browsing data on the RFEF website.

PURPOSES FOR DATA COLLECTION

The collection of personal data may be for the purpose of managing requests for press accreditations, tickets and courses, filling in and processing forms in general, as well as sending communications about events, products or services offered by the RFEF.

INTERNATIONAL DATA TRANSFERS

Personal data may be transferred to a third country or to an international organisation if necessary for the purpose pursued. In any case, compliance with the provisions of the General Data Protection Regulation and the Organic Law on Data Protection and Guarantee of Digital Rights shall be guaranteed.

LEGAL BASIS FOR PROCESSING OF PERSONAL DATA

Depending on the data being processed, the way in which we have obtained or collected them and the purpose of the processing, the legal basis for processing your data may be your consent, the fulfilment of a contract, the compliance with a legal obligation, the execution of a task carried out in the public interest, the exercise of public powers or the legitimate interest of the Spanish Football Association or third parties.

RIGHT TO WITHDRAW YOUR CONSENT

You may withdraw your consent at any time when the processing of personal data is based on your consent.

WHO WE SHARE YOUR DATA WITH?

The Spanish Football Association will not share your data with third parties, unless it is essential for the purpose of processing or following a court order or request from the Public Prosecutor’s Office or Public Administrations in the exercise of their powers.

HOW LONG WILL WE RETAIN YOUR DATA?

The data will be retained for as long as required for the purpose for which they were provided or collected, without prejudice, where appropriate, to your right of deletion.

With regard to the processing necessary for sending information, we will keep your data in the system as long as you do not request us to delete it.

DATA PROTECTION RIGHTS

You may exercise the following rights:

Access, rectification, deletion, opposition, data portability, the right not to be subject to a decision based on the automated processing of data, limitation of data processing.

To exercise these rights, you may write, with proof of identity, to c/ Ramón y Cajal s/n, 28230 Las Rozas (Madrid), Responsable de Seguridad, Área de Tecnología e Infraestructuras.

RIGHT TO COMPLAIN TO THE SPANISH DATA PROTECTION AUTHORITY

If you consider that the processing of personal data concerning you infringes the regulations in force on the protection of personal data, you may lodge a complaint with the Spanish Data Protection Authority, c/ Jorge Juan, 6, 28001 Madrid (www.aepd.es)