SSO Privacy Policy

SINGLE SIGN-ON PRIVACY POLICY

The purpose of this Privacy Policy (hereinafter, the “Policy”) is to regulate personal data processing carried out by REIAL CLUB DEPORTIU ESPANYOL DE BARCELONA, S.A.D. (hereinafter, “Club” or “RCDE”) and LaLiga Group International, S.L. (hereinafter, "LaLiga"), through the platform. Therefore, the personal data that you provide for access and, where appropriate, to register on the platform, will be handled by both entities as joint controllers.

To enjoy the advantages of the platform, you must register with LaLiga Ecosystem, through which you access an environment created by LaLiga, made up of various applications and websites, both from LaLiga and from the affiliated football clubs with which LaLiga maintains collaboration agreements. Through a common registry implemented by LaLiga (LaLiga Single Sign-On), each user receives a unique identifier so that any selection or modification of preferences or deletion request made in one of the applications or websites that are part of the ecosystem will affect the rest of the LaLiga Ecosystem environment and the entities that comprise it. Follow this link to find out more about LaLiga Ecosystem and the entities that comprise it.

Your personal data will be processed by LaLiga, the CIF of which is B-05421805 and address Calle Torrelaguna 60, 28043, Madrid.

Contact the LaLiga Data Protection Officer: dpo@laliga.es

Your personal data will also be processed by REIAL CLUB DEPORTIU ESPANYOL DE BARCELONA, S.A.D., CIF A-08357139 and address Avenida del Baix Llobregat, 100, 08940, Cornellà de Llobregat (Barcelona), a sports limited company.

You can contact the Data Protection Delegate or the Club's data protection officer by email at: dpd@rcdespanyol.com, should you have any questions regarding the content of this privacy policy.

Users of the platform may contact the Data Protection Officer for LaLiga and/or the Club to find out the essential content of the co-responsibility agreement between both parties in relation to the platform.

The Club and LaLiga will process the personal data that you provide through the registration form (email and preferred language, requested as mandatory data, and name, surname, date of birth, gender, country, province, city, address, postal code and phone as optional data) and other data inferred as a result of the use and activity undertaken on the platform (registered user ID; device ID; operating system; device model and telemetry, for example, will also be recorded when you click on certain content, or the time that you spend on it) or your interactions with the communications that we send you via email, if applicable (for example, clicking on the content of an email).

In the event that you are a user of another asset that is the responsibility of LaLiga or in which LaLiga acts as jointly responsible for the data, and that forms part of the LaLiga Ecosystem, the Club may receive the aforementioned personal data, which is either declared or inferred in such assets.

Importing of social media data

We inform you that you can use the social networks of which you are a user to register or access the LaLiga Ecosystem, as well as to share with LaLiga additional information about your profile on said social networks.

Data shared via Facebook:

• Name and profile photo (Required to register. However, we inform you that LaLiga does not process your profile photo).
• Email address (Required).
• Birthday (Optional).
• Gender (Optional).
• Current city and province (Optional).
• Page likes (Optional).
• Timeline Posts (Optional. Your public and private timeline posts, including photos and videos, information about places tagged in them, and the types of reactions they receive.)
• Categories of interests:
  • Food,
  • Animals and Pets,
  • Art and Culture,
  • Banks, Finance and Economy,
  • Alcoholic Beverages,
  • Beauty,
  • Cinema, Theatre and Musicals,
  • Sports,
  • Electronics and IT,
  • Energy, Science and Industry,
  • Social Groups,
  • Home and Housing,
  • Children,
  • Media,
  • Fashion,
  • Motoring,
  • Women,
  • Music,
  • Leisure and Entertainment,
  • NGOs and Causes,
  • Health, Hygiene and Wellbeing,
  • Insurance,
  • Professional Services,
  • Shopping,
  • Technology and Internet,
  • Telecommunications,
  • TV and Radio,
  • Travel,
  • Video games,
  • Viral Media.

Thanks to page likes and bio posts, LaLiga will obtain the following inferred data:

• “Engagement” value: This value measures the volume of interactions that the user has with the Facebook wall of the official LaLiga page.
• “Social” value: This value measures the user's influence on social networks.
• “Promotion” value: Users' walls are analysed looking for references to prize draws and promotions, and assigns a value that measures the promotional ratio of the user's wall. It is also verified if the user's profile follows Facebook pages dedicated to advertising promotions, prize draws and competitions.
• “Fan” Value: This score is a combination of the 3 previous ones that classifies the users by the value obtained (a user with a higher score will be considered a more valuable user).

Data shared by Google:

• Name and surname (Obligatory for registration
• Email address (Obligatory for registration).

LaLiga is not responsible for the legal adequacy of the social network that you use for the aforementioned purposes. For this reason, we recommend that you review the conditions of use and privacy policy of the social networks that you are going to use for said purposes so that you can verify that the handling that is carried out of your personal data is in accordance with your expectations of privacy and data protection regulations that are applicable in each case.

Once the data has been imported and incorporated into your registered user account, your data will be integrated into the LaLiga Ecosystem and processed by LaLiga for the purposes described in this Privacy Policy.

Club and LaLiga:

Registration and access to the platform: TWe inform you that the personal data you provide when registering on the platform will be processed by the Club and LaLiga for the purpose of facilitating your registration and access. Likewise, LaLiga will use it to allow you access to the rest of the assets of the LaLiga Ecosystem. In particular, the Club and LaLiga will use the following personal data to fulfill this purpose:

• Email: Mandatory and necessary for registration on the platform.
• Platform language (mandatory).
• Name and surname (optional).
• Date of birth (optional).
• Sex (optional).
• Country (optional).
• Province (optional).
• City (optional).
• Address and postcode (optional).
• Telephone number (optional).

lopd@laliga.es.

The legal basis for the purpose mentioned above is that the handling is necessary for the execution of the requested services regulated through the legal terms of the platform, by virtue of the provisions of art. 6.1 b) of the General Data Protection Regulation.

LaLiga:

Internal reports: Likewise, LaLiga will handle the personal data that you have provided through registration (in this case, your country) or social media login (if applicable, birthday, gender, page likes and current city), as well as the data regarding use of the Platform (user ID, device ID, device model, operating system and telemetry, for example, clicking on a certain content or the time you remain on it) and interactions with the communications you receive (for example, clicking on the content of an email) for the preparation of relevant metrics and statistics that allow LaLiga to analyse the impact of their campaigns, as well as the interest that they have aroused among the interested parties based on the data analysed. In particular, LaLiga will carry out aggregate segmentations based on the data mentioned above, among which are:

• Segmentations based on the country. (for example, “20 users from Spain have participated in the prize draw”).

The legal basis for the aforementioned purpose is that the processing is necessary to satisfy the legitimate interest of LaLiga, by virtue of the provisions of art. 6.1 f) of the General Data Protection Regulation, consisting of learning from the information provided and obtained from users that allows the improvement of the Platform and optimising the communication campaigns carried out, based on the interest that these generate among the different groups of users. Before doing so, we inform you that LaLiga has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users. You can request the conclusions of this analysis through lopd@laliga.es. 

You have the right to oppose the aforementioned purpose at any time in accordance with the procedure described in the section “What are your rights when you provide us with your personal data?”.

Additional purposes

The additional purposes for which the Club and LaLiga will process your personal data are indicated below:

(i) The Club:

Club commercial communications: So that the Club can send you newsletters and commercial communications related to the activities, products, services and promotions of the Club and its sponsors and collaborators, by any means, including electronic, without implying the communication of your personal data to said third parties.

For this purpose, the Club will only process the email address and, where appropriate, the telephone number that you have provided us with in the registration form.

Likewise, we inform you that, to send you commercial communications via email or SMS, the Club use a service from a third-party provider (salesforce.com EMEA Limited) that involves the international transfer of the email address and/or telephone that you have provided us to the United States, a country where a level of protection equivalent to that of the European Economic Area is not guaranteed. For this reason, LaLiga, acting on behalf of themselves and on behalf of the Club, have signed standard contractual clauses adopted by the European Commission with said providers by virtue of the provisions of art. 46.2 c) of the General Data Protection Regulation, including guarantees and additional obligations addressed to these providers for the greatest possible security and transparency. The content of the standard contractual clauses is available to you upon request through lopd@laliga.es.

The legal basis for the processing of your data for the aforementioned purpose is the consent that you have given us for the processing of your data for the specific purposes selected by virtue of the provisions of art. 6.1 a) of the General Data Protection Regulation. Your personal data will be kept for this purpose until you revoke the consent granted.

You have the right to withdraw your consent at any time in accordance with the procedure described in the section “What are your rights when you provide us with your personal data?”, without affecting the legality of the processing based on consent prior to its withdrawal.

Creation of simple profiles: So that the Club can send you segmented commercial communications via email and SMS about the content mentioned in “Club commercial communications” (for example, we commercial communications about products that may interest you based on age or province of residence that you have provided in your profile).

The information mentioned above will be aimed at simple segments (groups of users that are created based on the information provided by them in their profile) that the Club can prepare taking into account the following:

• Low level of detail of the profile. The Club could create simple segments, such as segments on women over the age of 25.
• Not exhaustive profile. To carry out the segments, the Club will only process the personal data that you have provided on this platform or on any of the LaLiga Ecosystem assets. In particular, the Club will use the following personal data:
  • Country of residence.
  • Region or province.
  • Age.
  • Gender.
  • City of residence.
  • Language
  • Postcode.
• Positive consequences for the user. The Club may send you commercial communications that best suit the profile you have declared, avoiding unwanted commercial communications or uninteresting content.

The legal basis for the aforementioned purpose is the legitimate interest of the Club in making effective use of the personal data provided by the user to achieve greater interest and return on the communications sent. Before doing so, we inform you that the Club have carried out a proportionality analysis between legitimate interest and the rights and freedoms of its users, the conclusions of which you can request by sending an email to dpd@rcdespanyol.com.

You have the right to oppose the aforementioned purpose at any time in accordance with the procedure described in the section “What are your rights when you provide us with your personal data?”.

Creation of exhaustive profiles:

Experiences and personalised information: So that the Club can send you personalised commercial communications via email and SMS about the content mentioned in "Club commercial communications" (for example, we will send you commercial communications about products that may interest you based on the interactions you have had with other communications and your activity on the platform).

The information mentioned above will be addressed to the exhaustive segments (groups of users that are made based on the information obtained from them or inferred from the use they make of the platform or other assets of LaLiga Ecosystem) that we can prepare based on:

• The information that you provide us during registration (in this case, Date of birth, gender, country, province and city);
• Interactions with communications or notifications you receive (for example, clicking on the content of an email);
• Data inferred as a result of the use of and activity on the platform (device ID, registered user ID, device model, operating system and telemetry, for example, clicking on certain content or the time you remain on the page); and
• The personal data that you have provided in other forms under the responsibility of LaLiga and inferred data obtained from other forms under the responsibility of LaLiga, as a result of the use and activity of the user in said assets.

In addition, the Club will generate said segments taking into account the following profiling techniques:

• Measurement of the individual performance of campaigns: The Club will use the information related to opening rates, average click rates, email bounces or subscription cancellation rates to measure the performance of the campaign on an individual level and, as a consequence, carry out segmentations based on the information inferred about you and the rest of the declared information (for example, if you are a very active user in certain communications, we may send you communications of the same type more frequently).                                                                     
• Campaign optimisation: we will exclude you from advertising campaigns about prize draws in which you have participated, about applications for which you have registered or downloaded, about products that you have purchased or about services that you have previously purchased (for example, we will avoid offering you an app from the Club if we know that you have previously downloaded it)
• Users similar to your tastes and preferences: Thanks to the profile that the Club make about you, we can send you personalised content taking into account other profiles similar to yours (for example, if we identify that other users similar to you like eSports, we will show you advertising related to eSports).

The legal basis for the processing of your data for the aforementioned purposes is the consent that you have given us for the processing of your data for the selected purposes. Your personal data will be kept for these purposes until you revoke the consent granted.

You have the right to withdraw your consent at any time in accordance with the procedure described in the section “What are your rights when you provide us with your personal data?”, without affecting the legality of the handling based on consent prior to its withdrawal.

(ii) By LaLiga:

LaLiga commercial communications:  So that LaLiga can send you commercial communications via email, SMS or other instant messaging channels about its activities (the competitions it organises, campaigns, public viewings, shows or live events), products (applications, web platforms and games developed by LaLiga), services, contests, offers, prize draws and/or promotions by LaLiga, or contests, offers, prize draws and/or promotions carried out by LaLiga for products and services promoted jointly by it with its official sponsors, which you can consult here aquí  www.laliga.es/patrocinadores  (hereinafter, the “Official Sponsors”), national federations or national and international television channels (hereinafter, “LaLiga products and services”).  For this purpose, LaLiga will only process an email address.

Likewise, we inform you that, to send you commercial communications via email or SMS, LaLiga uses a service from a third-party provider (salesforce.com EMEA Limited) that involves the international transfer of the email address that you have provided to us to the United States, a country where a level of protection equivalent to that of the European Economic Area is not guaranteed. For this reason, LaLiga has signed standard contractual clauses adopted by the European Commission with said providers by virtue of the provisions of art. 46.2 c) of the General Data Protection Regulation, including guarantees and additional obligations addressed to these providers for the greatest possible security and transparency. The content of the standard contractual clauses is at your disposal upon request through lopd@laliga.es. 

The legal basis for the processing of your data for the aforementioned purpose is the consent that you have given us for the processing of your data for the specific purposes selected by virtue of the provisions of art. 6.1 a) of the General Data Protection Regulation. Your personal data will be kept for this purpose until you revoke the consent granted.

You have the right to withdraw your consent at any time in accordance with the procedure described in the section “What are your rights when you provide us with your personal data?”, without this affecting the legality of the handling based on consent prior to its withdrawal.

Creation of simple profiles: So that LaLiga can send you segmented commercial communications via email, SMS or other instant messaging channels, about LaLiga's products and services (for example, we will send you commercial communications about products that may be of interest to you based on age or province of residence that you have provided in your profile). The information mentioned above will be aimed at simple segments (groups of users that are made based on the information provided by them in their profile) that LaLiga can create, taking into account the following:

• Low level of detail of the profile. LaLiga may create simple segments, such as segments of women over 25 years of age.
• Not exhaustive profile. To create the segments, LaLiga will only process the personal data that you have provided on this platform or on any of the LaLiga Ecosystem assets.

In particular, LaLiga will use the following personal data:

• Country of residence.
• Region or province.
• Gender.
• City of residence.
• Postal Code.
• Favourite team.
• Favourite sport.

Positive consequences for the user. LaLiga may send you commercial communications that best suit the profile you have declared, avoiding unwanted commercial communications or uninteresting content.

The legal basis for the aforementioned purpose is that the processing is necessary to satisfy the legitimate interest of LaLiga by virtue of the provisions of art. 6.1 f) of the General Data Protection Regulation, consisting of making effective use of the personal data provided by the user to achieve greater interest and return on the communications sent. Before doing so, we inform you that LaLiga have carried out a proportionality analysis between their legitimate interest and the rights and freedoms of users, the conclusions of which you can request through lopd@laliga.es. 

You have the right to oppose the aforementioned purpose at any time in accordance with the procedure described in the section “What are your rights when you provide us with your personal data?”. 

Creation of exhaustive profiles: LaLiga will prepare an exhaustive profile of you so that it can offer you personalised advertising, information, services and products by sending personalised commercial communications via email, SMS, or other instant messaging channels, sending you personalised push or in-app notifications (always depending on you having given consent for the purpose of “LaLiga commercial communications”) or show you banners with personalised advertising on websites, applications or social networks about LaLiga products and services (for example, if we identify that you are a follower of a specific club, we will offer you personalised incentives, such as a shirt of your favourite team).

In this way, the information mentioned above will be directed to the segments (groups of users that are made based on the information obtained from them or the use that you make of the platform or other assets of LaLiga Ecosystem) that can be created based on the following data sources:

• The information you provide us during registration (in this case, country of residence);
• The social network login (in this case, name and surname, email address, birthday, gender, city and province in which you reside, the categories of interests, as well as those inferred values -engagement, social, promotion and fan value- obtained from posts on your Facebook timeline and page likes);
• Interactions with communications or notifications you receive (for example, clicking on the content of an email);
• Data inferred as a result of use and activity on the Platform (registered user ID, device model, operating system and telemetry -for example, clicking on certain content or the time you remain on the asset or in the surveys you complete about LaLiga or the competition).

In addition, LaLiga will generate segments taking into account the following profiling techniques:

• Measurement of the individual performance of campaigns: LaLiga will use the information related to opening rates, average click rates, email bounces or subscription cancellation rates to measure the performance of the campaign on an individual level and, as a consequence, carry out segmentations based on the information inferred about you and the rest of the declared information (for example, if you are a very active user of certain communications, we may send you communications of the same type more frequently).
• Campaign optimisation: We will exclude you from advertising campaigns about prize draws in which you have participated, about applications in which you have registered or downloaded, about products that you have purchased or about services that you have previously purchased (for example, we will avoid offering you an app from LaLiga if we know that you have previously downloaded it)
• Users similar to your tastes and preferences: Thanks to the profile that LaLiga carries out on you, we can send you personalised content taking into account other profiles similar to yours (for example, if we identify that other users similar to you like eSports, we will show you advertising related to eSports).
• User evaluation: LaLiga will obtain an unknown variable from known variables provided or inferred from you so that they can carry out an analysis of users with the aim of identifying those who are more likely to use or contract LaLiga products, and where applicable, offer you LaLiga products and services.

The personal data that we process will be kept for as long as the purposes that motivated its collection persist and/or you do not revoke the consents that you have granted, or you do not exercise your rights to suppress, oppose or limit its handling.

The Club and LaLiga will keep your personal data blocked for the following storage period for the sole purpose of meeting responsibilities of any kind that may arise:

• Registration and access to the platform: The data provided for registration and access to the platform will be kept as long as you do not request the deletion of your data, the intended purpose persists and, once it is finished, during the limitation period of the legal actions that may derive from it..
• Internal reports: The data provided for internal reports will be kept as long as you do not request the deletion of your data, the intended purpose persists, you do not oppose the handling and, once this purpose is fulfilled, during the limitation period of the legal actions that may be derived from it.
• Commercial communications from the Club:  The data provided for the commercial communications carried out by the Club will be kept as long as you do not request the deletion of your data, the intended purpose persists, you do not revoke the consent granted or limit the handling and, once this purpose is fulfilled, during the limitation period of the legal actions that may derive from it.
• Creation of simple profiles by the club: The data provided for the preparation of simple profiles will be kept as long as you do not request the deletion of your data, the intended purpose persists, you do not oppose the treatment and, once this purpose is fulfilled, during the limitation period of the legal actions that may be derive from it.
• Creation of exhaustive profiles by the Club: The data provided for the preparation of exhaustive profiles will be kept as long as you do not request the deletion of your data, the intended purpose persists, you do not oppose the treatment and, once this purpose is fulfilled, during the limitation period of the legal actions that may be derive from it.
• Commercial communications from LaLiga: The data provided for receiving commercial communications from LaLiga will be kept as long as you do not request the deletion of your data, the intended purpose persists, you do not oppose the treatment and, once this purpose is fulfilled, during the limitation period of the legal actions that may be derive from it.
• Creation of simple profiles by LaLiga:  The data provided for the preparation of simple profiles will be kept as long as you do not request the deletion of your data, the intended purpose persists, you do not oppose the treatment and, once this purpose is fulfilled, during the limitation period of the legal actions that may be derive from it.
• Creation of exhaustive profiles by LaLiga: The data provided for the preparation of exhaustive profiles will be kept as long as you do not request the deletion of your data, the intended purpose persists, you do not oppose the treatment and, once this purpose is fulfilled, during the limitation period of the legal actions that may be derive from it.

This personal data will be deleted when the indicated periods expire.

Your personal data may be communicated to other people or companies to be used for their own purposes, as long as you give us your consent by checking the corresponding box or for the service you request. We inform you that your personal data will be communicated to third parties as explained in the section “For what purpose do we process your personal data?”. 

Specifically:

(i) Club:

In general, the Club will not transfer your personal data, except in the following cases to competent authorities and bodies, courts, tribunals or any other legitimate third parties in accordance with the applicable regulations.

However, the Club have contracted the provision of certain services (e.g. virtual infrastructure services, cloud computing, etc.) to providers, who may have access and/or process personal data in their capacity as data handlers. Some of these providers may process and store personal information on servers located outside of your country of residence. You can consult the details of these providers by sending an email to: dpd@rcdespanyol.com.

Therefore, depending on the user's location, the transfer of data to other countries could occur. In such a case, your personal data may be transferred internationally to third parties located outside the European Economic Area ("EEA"), provided that the Club have the authority to do so and subject to compliance with the appropriate safeguards set forth in articles 44 to 50 of the GDPR. Said third parties will only access the data to carry out their services in the name and on behalf of the Club, under an obligation of confidentiality and always following their instructions -without at any time being able to use said data for their own purposes and/or unauthorised purposes.

In either case, appropriate safeguards include, among others:

• Adequacy decision: A declaration by the European Commission that a non-EU State offers an adequate level of data protection, equivalent to that provided by European data protection legislation, so that international data transfer to a third party is possible in that State outside the EU;
• Binding Corporate Rules: These are applicable to business groups or the union of companies engaged in a joint economic activity, which enables the flow of personal data based on a self-regulation accepted and assumed by each of the signatory entities;
• Standard Corporate Rules: A mechanism signed between the exporter of Personal Data from any of the EEA countries and a third country. It is a contractual agreement, the model of which has been approved and published by the European Commission and aligned with the precepts of the GDPR.
• Code of conduct or a certification mechanism: Used together with binding and enforceable commitments made by the recipient in relation to the application of adequate guarantees for the protection of the transferred data.

Your personal data may, as an exceptional measure, be transferred to a third country or international organisation, in application of the mechanisms that may be recognised in this regard by data protection legislation. The content of the standard contractual clauses is available to you upon request through: dpd@rcdespanyol.com.

(ii) LaLiga:

LaLiga will communicate the personal data, either declared or inferred (identified in the section Where do we obtain your personal data?) on the Platform, to the affiliated football clubs that are part of the LaLiga Ecosystem in order to allow you access to their assets and have the same profile throughout the ecosystem. All this will be possible as long as you are a registered user of any of the assets that are the responsibility of said clubs, in accordance with the privacy policies of the assets of each club and based on the consents that you have granted to them.

The legal basis that legitimises this communication of personal data is that the processing is necessary for the execution of a contract in which the interested party participates by virtue of the provisions of art. 6.1 b) of the General Data Protection Regulation, in particular, the execution of the services offered to users in the LaLiga Ecosystem through the LaLiga Single Sign-On, which are regulated in the conditions of use of the Platform, and in the conditions of the rest of the assets that are part of said ecosystem.

Likewise, LaLiga may provide personal data and any other user information when required by the public authorities in the exercise of the functions that are legitimately attributed to them and in accordance with the provisions that are applicable.

Likewise, some entities subcontracted by LaLiga could access personal data and information as in their role to provide LaLiga with a necessary service, as indicated in each of the purposes of the section “For what purpose do we process your personal data?”. These service providers sign a contract that obliges them to use your personal information only for the provision of the services reported in this policy.

We inform you that, at any time, you can exercise your rights to access, rectification, opposition, deletion, portability, exemption from being subject to automated decisions and limitation of processing, either to the Club or LaLiga

• Right of access: You have the right to obtain confirmation as to whether LaLiga or the Club are processing your personal data, as well as to access it. Right of rectification: You can request the modification or rectification of inaccurate personal data.
• Right to deletion: You can request the deletion of your personal data. We remind you that as long as the commercial and/or contractual relationship that we maintain with you continues, it is necessary that we process certain personal data to comply with the contract, so while it is still in force we will not be able to delete, block or cancel it, because otherwise it would prevent us from complying with the contract.
• Right to limitation of handling: In certain circumstances, you may request the limitation of the handling of your data, in which case it will only be kept for the exercising or defence of legal claims.
• Right to opposition: You can oppose the processing of your data for the purpose you specify. LaLiga or the Club will cease processing the data, except for when there are compelling legitimate reasons, or for the exercising or defence of possible legal claims.
• Right not to be the subject of automated individual decisions: You have the right not to be the subject of a decision based solely on automated processing, including profiling, which may produce legal effects for you or significantly affect you in a similar way.
• The Club and LaLiga inform you that, without prejudice to the fact that they carry out decisions based on automated systems, these decisions (i) either do not produce legal effects or significant effects on the interested party; (ii) are not adopted exclusively in an automated way.
• Right to portability: If allowed, you may exercise the right to the portability of your data, in a structured, commonly used and machine-readable format, and to transmit it to another data controller (provided that this is technically possible).

How do I exercise my rights?

(i) Club:

Sending an email to: dpd@rcdespanyol.com.

If you have given your consent for the purposes for which it has been requested, you may revoke it at any time, following the procedure established in each of the commercial communications you receive, or through the Subscription Centre found in your profile within the platform and sending an email to dpd@rcdespanyol.com.

The revocation of the consent given will not affect the use that you can make of the platform or the legality of the processing based on said consent prior to its withdrawal.

Likewise, if you consider that you have not obtained satisfaction in the exercise of your rights, you can contact the Club's data protection officer at dpd@rcdespanyol.com or file a claim with the Spanish Agency for Data Protection. through its website www.agpd.es.

In the event that, in the course of a contractual relationship with us, you provide us with the personal data of third parties, we remind you that you are solely responsible for having obtained their prior consent to communicate the personal data to the Club for the purpose established in each case, as well as your having been informed of the content of this Policy.

You are responsible for holding the Club exempt from any liability arising from the lack of information and/or consent to/from the Third Party.

(ii) LaLiga:

Sending an email to lopd@laliga.es, the exercise of your rights will be totally free.

If by accessing and, where appropriate, by registering on the platform, you have given your consent for the purposes requested, you may revoke this at any time, by following the procedure established in each of the communications you receive, through the Subscription Centre found in your profile within the platform, or by sending an email to lopd@laliga.es.

The revocation of the consents provided will not affect the use that you can make of the application or the legality of the treatments based on said consents prior to its withdrawal.

If you have registered on the platform through a social network or similar service, you can exercise your right to delete your data, deactivating the "LaLiga Ecosystem" service within the services connected to your online profile. Social. For more information consult the conditions of each service:

• Google: https://myaccount.google.com/permissions
• Facebook: https://facebook.com/help/218345114850283

Finally, if you consider that you are not satisfied in the exercise of your rights or that the handling that LaLiga has carried out of your personal data has not been in accordance with data protection regulations, you can contact the LaLiga Data Protection Officer at the email address dpo@laliga.es or file a claim with the Spanish Agency for Data Protection through its website www.agpd.es.

The Club and LaLiga inform you that users of the platform must be at least 14 years old to register.

Regarding the use of social networks, we recommend that parents or guardians regularly check and supervise their children's internet activity. Please make sure that your children do not provide us with personal data without asking for your authorisation and consent.

At any time, you can exercise the rights of minors under 14 years of age in your care, proving your legitimacy.