Skip to main content

Privacy Policy App

PRIVACY POLICY

The mobile application is a service of GETAFE C.F., S.A.D. (hereinafter, the “Club”). The personal data you provide to access and, where appropriate, register in the mobile application (hereinafter, “APP”) will be processed by the Club in its capacity as Data Controller.

 

Who is responsible for the processing of your personal data?

Your personal data will be processed by Getafe C.F. S.A.D. with NIF: A78388667 and address at Avenida Teresa de Calcuta S/N, 28903, Getafe (Madrid) which is a Sociedad Anónima Deportiva, registered in the Mercantile Registry of Madrid, Volume 11.297, Page 177.534, 1st Inscription. Registered in the Registry Book of Sports Corporations of Sports Associations of the Superior Council of Sports, nº 66, since 1996.

You can contact the Club's Data Protection Delegate at the e-mail [email protected] in case you have any questions regarding the content of this privacy policy.

Users of the APP may contact the Data Protection Delegate of LaLiga and/or the Club to know the essential content of the co-responsibility agreement between both parties in relation to the Platform.

Where do we get your personal data?

The Club will process the data you provide through the registration form (email as mandatory and name, surname, country and favorite players as optional data) and other data inferred as a result of the use and activity that you develop in the APP, identifiers to provide the services offered through the APP or, where appropriate, through the registered user ID, device ID and advertising ID, operating system, device model and telemetry, for example, will also be recorded when you click on a particular content or the time you stay in the asset) or your interactions with the communications we send you via push notification, in-app or mail, if any (for example, clicking on the content of a communication).

Finally, we inform you that, in the iOS version of the APP, Apple will ask your permission for the use of your device's advertising identifier (“IDFA”) by the Club for any of the purposes that require it, in accordance with the section “For what purposes do we process your personal data?” of this privacy policy.

Importing data from LALIGA

We inform you that, if you are a LALIGA user, you can use your account to register:

Data shared through LALIGA:

  • Email address (Required to register)
  • Name (optional)
  • Last name (Optional)
  • Telephone number (Optional)
  • Birthday (Optional)
  • Gender (Optional)
  • City (Optional)
  • Status (Optional)
  • Country (Optional)

For what purpose do we process your personal data?

Registration and access to the APP: We inform you that the personal data you provide in the registration will be processed by the Club for the purpose of facilitating your registration and access to the APP.

Push notifications about the APP services: You may receive push notifications about the APP services through the usual notification system of your Smartphone or Tablet (for example, about the start of matches, results, goals, cards or any other event occurring in the match, etc.). You may oppose the sending of such communications, at any time, through the “notification center” of the APP or through the settings of your own Smartphone or Tablet. These notifications may be displayed on your device when you are outside or inside the mobile application and we will use your user ID to send you the notification.

The legal basis for the aforementioned purposes is that the processing is necessary for the performance of a contract to which the data subject is a party under the provisions of Art. 6.1 b) of the General Data Protection Regulation. The data necessary and essential for the provision of these services within the APP are email and user identifiers. If you do not provide these data you will not be able to access the APP to register and enjoy the servicesCommercial communications from the Club: So that the Club can send you commercial communications via email, push notifications, in-app or SMS or other instant messaging channels about its activities (the competitions it organizes, campaigns, public viewings, shows or live events), products, services, contests, offers, sweepstakes and/or promotions of the Club, (hereinafter, “products and services of the Club”).

For this purpose, the Club will only process your e-mail address and your user ID.

We also inform you that, in order to send you commercial communications via email or SMS and commercial push notifications, the Club uses a service of a third party provider subcontracted by LALIGA (salesforce.com EMEA Limited) which involves the international transfer of data to the United States, a country where an equivalent level of protection to that of the European Economic Area is guaranteed (The European Commission has adopted its decision of adequacy regarding the EU-US Data Privacy Framework).

The legal basis for the processing of your data for the above-mentioned purpose is the consent you have given us to process your data for the specific purposes selected under the provisions of art. 6.1 a) of the General Data Protection Regulation. Your personal data will be kept for this purpose until you revoke your consent.

You have the right to withdraw your consent at any time in accordance with the procedure described in the section “What are your rights when you provide us with your personal data”, without affecting the lawfulness of the consent-based processing prior to its withdrawal.

 

Development of simple segmentations: So that the Club can send you segmented commercial communications via email, SMS or other instant messaging channels about the Club’s products and services. These communications will be made based on the information you have provided through the registration (for example, we will send you communications about products that may be of interest to you based on your age or your province of residence).

The information used for the development of segments will be only that declared by the data subject in the registration of any of the Club’s assets, with a low level of detail on the user profile without using information inferred from the data subject or from third-party sources, with the segmentations in any case not being in depth. In this way, commercial communications may be sent according to the simple segments created with the aforementioned information, avoiding sending content that has no connection to you. 

The legal basis for the aforementioned purpose is that the processing is necessary to satisfy the legitimate interest of the Club under the provisions of Art. 6(1)(f) of the General Data Protection Regulation, consisting of making effective use of the personal data provided by the user to achieve greater interest and return from the communications sent. Before doing so, we would like to inform you that the Club has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users, the conclusions of which you can request at [email protected].

You have the right to object to the above-mentioned purpose at any time in accordance with the procedure described in the section "What are your rights when you provide us with your personal data?".

Under no circumstances will the compilation of simple segments by the Club have any legal effect or significantly affect you in any similar way. 

Comprehensive profiling: If you give us your permission, the Club will create a comprehensive profile of you so that it can offer you personalised experiences, information and products by sending you personalised commercial communications via email, SMS or other instant messaging channels, send you personalised push or in-app notifications (provided you have given your consent for the purpose "Commercial communications from the Club") or show you banners with personalised advertising on websites, apps or social networks about the Club’s products and services.

In this way, the aforementioned information will be directed to the segments (groupings of users that are made according to the information obtained from them or the use you make of the APP or other Club’s assets) that we can develop based on the following data sources:

  • The information you provide during registration;
  • Social login (in this case, first and last name(s), phone number, email address and city);
  • Interactions with communications or notifications you receive (e.g. clicking on the content of a communication);
  • Data inferred as a result of usage and activity on the Platform (device ID, registered user ID, device model, operating system and telemetry, e.g. clicking on particular content or time spent on the asset).

In addition, the Club will generate these segments taking into account the following profiling techniques:

  • Measurement of individual campaign performance: the Club will use information relating to opening rates, average click-through rates, email bounces and unsubscription rates to measure the performance of the campaign at an individual level, and as a result, make segmentations based on the information inferred about you and the other information declared, in order to impact you again with certain campaigns that are more connected to you or include you only in those in which you have shown more interest (for example, if you are a very active user in certain communications we may send you communications of the same type more frequently). For these purposes, we hereby inform you that through the data management tools provided by the social networks in which the Club has an account, user audiences will be created that can be shared, within each social network and in encrypted form, with third parties outside the Club, in order to create their advertising campaigns within the social network itself.                                             
  • Optimisation of campaigns: we will exclude you from advertising campaigns about prize draws in which you have participated, about applications in which you have registered or downloaded, about products you have purchased or about services you have previously purchased (for example, we will avoid offering you a Club’s app if we know that you have previously downloaded it). To do so, we will cross-reference your information with information obtained from other Club’s assets of which you are a user.
  • Users with similar tastes and preferences: using the profile that the Club creates about you, we can send you personalised content taking into account other profiles similar to yours (for example, if we identify that other users similar to you like eSports, we will show you advertising related to eSports).
  • Retargeting: in the event that you have interacted with the Club without having registered or without having used or downloaded the corresponding Club’s asset, the Club may use the identifying data of your device and/or your email address to impact you with advertising in other environments outside the Club in order to achieve the interaction desired by the Club.

Under no circumstances will profiling carried out by the Club have any legal effect or significantly affect you in any similar way.

The legal basis for processing your data for the above-mentioned purposes is the consent you have given us to process your data for the specific purposes selected under the provisions of art. 6.1 a) of the General Data Protection Regulation. Your personal data will be kept for these purposes until you revoke your consent.         

You have the right to withdraw your consent at any time in accordance with the procedure described in the section “What are your rights when you provide us with your personal data”, without affecting the lawfulness of the consent-based processing prior to its withdrawal.

Subscribers:

The data will be processed for the purpose of maintaining and encouraging the relationship of the club with its subscribers, management of subscriber registrations and cancellations, management of access to advantages of the program for subscribers, sending newsletter, magazines and communications about the club and its services. The legal basis is the execution of the subscription contract.

The data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of the data.          

Clients:

The data will be processed for the following purposes:

a). Manage the purchase or contracting requested and follow up on the same by means of communications about them,

b). Information by electronic means on requests made to the club,

c). Manage administrative, communications and logistics services provided by the Club,

d). Invoicing and declaration of the appropriate taxes,

e). To carry out the corresponding transactions,

f). Control procedures.

The data requested for the sending of the confirmation of the ticket purchase or any other product, as well as for the purchase process are managed through a link to the specific ticket purchase site or club store, having to consult and accept the privacy policy or specific terms and conditions of the site and the purchase to be made by the customer.  

Your data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of the data.

The processing is based on the execution of the contract.                            

Club Contact:

The data provided will be processed to respond to your suggestions, contact communications, accreditations or any other communication made through the channels of communication with the Club, including instant messaging.

The processing is based on the consent of the interested party. Your data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of the data.

How long will we keep your personal data?

The personal data we process will be kept for as long as the purposes for which they were collected persist and/or you do not revoke any consent you may have given, or you do not exercise your rights of deletion, opposition or limitation of processing.

In this sense, the Club will keep your personal data duly blocked for the following retention periods for the sole purpose of meeting the responsibilities of any kind that may arise:

Registration and access to the APP: the data provided for registration and access to the APP will be kept as long as you do not request the deletion of your data, this purpose persists and, once it is finished, during the period of limitation of legal actions that may arise from it.

Push notifications about the services of the APP: the data provided for push notifications about the services of the APP will be kept as long as you do not request the deletion of your data, this purpose persists, you do not oppose the sending of the same and, once this purpose is fulfilled, during the period of limitation of legal actions that may arise from it.

Commercial communications from the Club: the data provided for commercial communications made by the Club will be kept as long as you do not request the deletion of your data, this purpose persists, you do not revoke the consent given or limit the treatment and, once this purpose is fulfilled, during the period of limitation of legal actions that may arise from it.

Development of simple segmentations: the data provided for the preparation of simple profiles will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object to the processing and, once this purpose has been fulfilled, during the period of limitation of legal actions that may arise from it.

Comprehensive profiling: the data provided for the elaboration of exhaustive profiles will be kept as long as you do not request the deletion of your data, this purpose persists, you do not revoke the consent granted or limit the treatment and, once this purpose has been fulfilled, during the period of limitation of the legal actions that may arise from it.

These personal data will be deleted when the indicated deadlines expire.

 

To which recipients will your personal data be communicated?

Your personal data may be communicated to other persons or companies to be used for their own purposes provided that you give us your consent by checking the box provided or for the purpose of the service you request. In this regard, we inform you that your personal data will be communicated to third parties as explained in the section “For what purpose we treat your personal data?

Specifically, they will be communicated to the State Agency of Tax Administration and to banks and financial institutions for the collection of the service provided or product purchased, Public bodies, Judges and Courts and, in general, competent Authorities (eg: Consejo Superior de Deportes), when the Club has the legal obligation to provide them.

In case of purchase or payment, if you choose any application, web, platform, bank card, or any other online service, your data will be transferred to that platform or will be treated in their environment, always with maximum security.

When we order it, the web development and maintenance company or the hosting company will have access to our website. They will have signed a service contract that obliges them to maintain the same level of privacy as we do.

In the case of international data transfers, when using American applications, it will be verified that there are standard contractual clauses (SCC) approved by the European Commission or any other validation mechanism for international transfers in accordance with Regulation (EU) 679/2016.

In the case of having your consent, GETAFE CF will communicate your data to its collaborating companies and sponsors.

In the case of having your consent, GETAFE CF may transfer your data to LaLiga for the purpose of sending you commercial communications.

GETAFE CF has the collaboration of some third party service providers who have access to your personal data and who process said data in the name and on behalf of the Club as a result of their provision of services. GETAFE CF follows strict criteria for the selection of service providers in order to comply with its obligations regarding data protection and undertakes to sign with them the corresponding data processing contract by which it will impose them, among others, the following obligations: to apply appropriate technical and organizational measures; to process personal data for the agreed purposes and only in accordance with the documented instructions of GETAFE CF; and to delete or return the data to GETAFE CF once the provision of services is completed.

What are your rights when you provide us with your personal data?

We inform you that, at any time, you can exercise your rights of access, rectification, opposition, deletion, portability, not to be subject to automated decisions and limitation of treatment before the Club.

What are your rights as a user?

  • Right of access: you have the right to obtain confirmation as to whether the Club processes your personal data, as well as to access them.
  • Right of rectification: you may request the modification or rectification of inaccurate personal data.
  • Right of deletion: you may request the deletion of your personal data.
  • Right of limitation of processing: In certain circumstances, you may request the limitation of the processing of your data, in which case they will only be kept for the exercise or defense of claims.
  • Right of opposition: you may oppose the processing of your data for the purpose you specify. The Club will cease processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
  • Right not to be subject to automated individual decisions: you have the right not to be subject to a decision based solely on automated processing, including profiling, which is likely to produce legal effects concerning you or similarly significantly affect you.  
  • Right of portability: if permitted, you have the right to exercise the right to have your data transferred in a structured, commonly used and machine-readable format and to have it transferred to another data controller.

How do I exercise my rights?

By sending an email to [email protected].

If you have given your consent for the purposes for which it has been requested, you may revoke it, at any time, by following the procedure established in each of the commercial communications you receive, or by sending an e-mail to the address: [email protected].

The revocation of the consent given will not affect the use that you may make of the Platform or the lawfulness of the processing based on such consent prior to its withdrawal.

Likewise, if you consider that you have not obtained satisfaction in the exercise of your rights, you can contact the Club's data protection delegate at the e-mail address [email protected] or file a complaint with the Spanish Data Protection Agency through its web page www.aepd.es.

Are there any limitations?

The Club informs you that to use and, if applicable, register in the APP you must be at least 14 years old.