PRIVACY POLICY

This Privacy Policy (hereinafter, the “Policy”) seeks to regulate the personal data processing activities performed by LA LIGA NACIONAL DE FÚTBOL PROFESIONAL (hereinafter, “LALIGA”) on the LALIGA Credentials Web Portal (hereinafter, the “PORTAL”).

Who is the data controller?

Your data will be processed by La Liga, with Spanish Corporate Tax ID No.: G-78069762 and registered address at 60 Calle Torrelaguna, 28043, Madrid. This is a private Sports Association under the provisions of Articles 56 of Spanish Law 39/2022, of 30 December, on Sports, which is exclusively and compulsorily made up by all Public Limited Sports Companies and Clubs that participate in official national and professional football competitions. LALIGA is registered under entry 1 in the Professional Leagues section of the Register of Sports Associations held by the National Sports Council.

Contact details of LALIGA’s Data Protection Officer: dpo@laliga.es

Where do we get your personal data from?

LALIGA will only process personal data (full name, ID, position and company, and additionally in the case of self-employed workers, proof of registration as a self-employed worker and civil liability insurance) you have provided in the form on the credentials portal.

However, if you are not accredited international television rights holder staff, Mediapro Internacional, S.L.U. will communicate the personal data you provided to LALIGA.

Why do we process your personal data?

Main Purposes:

  • Provision of the requested service: We hereby inform you that your personal data will be processed by LALIGA in order to facilitate, manage, maintain and control the appropriate credentials on behalf of the media outlets as they access the football stadiums of the Clubs or Public Limited Sports Companies of the Campeonato Nacional de Liga de Primera y Segunda División or the clubs participating in any of the competitions organised by LALIGA.
  • Payment of financial compensation by national radio stations: We inform you that your personal data will be processed by the entity responsible for the Redsys PoS payment service in accordance with current regulations on personal data protection, for the purpose of enabling payment of the financial compensation established by the CMT via the virtual PoS on the Portal.

The legal basis for the above mentioned purposes is that processing is necessary to execute a contract to which the data subject is a party, according to the provisions of Art. 6.1 b) of the General Data Protection Regulation. The necessary and essential data for the provision of this service are full name, ID, position and company, and additionally in the case of self-employed workers, proof of registration as self-employed worker and civil liability insurance. If you do not provide these data, the service may not be provided.

  • Internal reports: LALIGA will process the personal data you have provided on registering (full name, position and company) in an aggregated manner in order to prepare relevant metrics and statistics that enable LALIGA to analyse the number and frequency of credentials granted, as well how users use the Platform.

The legal basis for the above purpose is that processing is necessary to satisfy LALIGA’s legitimate interest pursuant to Art. 6.1 f) of the General Personal Data Regulation, which consists of extracting lessons from the information provided by and obtained from users in order to improve the credentials system and platform. Before doing so, please note that LALIGA has analysed the proportionality between its legitimate interest and the rights and freedoms of its users. The conclusions of this analysis can be requested by writing to lopd@laliga.es.

You have the right to oppose to the purposes described at any time in accordance with the procedure described in the section “What are your rights when you provide us with your personal data?”.

  • Verification of compliance: LALIGA will process the personal data you provided when registering (full name, ID, position and company, and additionally in the case of self-employed workers, proof of registration as a self-employed worker and civil liability insurance) in order to verify your compliance with tax, labour and corporate obligations.

The legal basis for the above purpose is that processing is necessary to satisfy LALIGA’s legitimate interest pursuant to Art. 6.1 f) of the General Personal Data Regulation, which consists of complying with LALIGA’s obligations with its collaborators in tax, labour or corporate matters. Before doing so, please note that LALIGA has analysed the proportionality between its legitimate interest and the rights and freedoms of its users. The conclusions of this analysis can be requested by writing to lopd@laliga.es.

How long do we store your personal data?

The personal data we process will be stored while the purposes that led to their collection remain in force or you do not exercise your rights to erasure, opposition or restriction of processing.

LALIGA will thus keep your personal data blocked for the following storage periods so the sole purpose of addressing any liabilities that may arise:

  • Provision of the requested service: data provided for registration and to access the platform will be stored until you request erasure of your data, while the purpose remains in force and, afterwards, during the limitation period in which legal actions may arise.
  • Payment of financial compensation by national radio stations: data provided to deal with queries will be stored until you request the erasure of your data, while the purpose remains in force and, afterwards, during the limitation period in which legal actions may arise.
  • Internal reports: data provided for internal reports will be stored until you request the erasure of your data, you oppose processing, while the purpose remains in force and, afterwards, during the limitation period in which legal actions may arise.
  • Verification of compliance: data provided for internal reports will be stored until you request the erasure of your data, you oppose processing, while the purpose remains in force and, afterwards, during the limitation period in which legal actions may arise.

Personal data will be deleted when these periods expire.

With whom will we share your personal data?

Your personal data will be shared with the clubs and Public Limited Sports Companies who are members of the Campeonato Nacional de Liga de Primera y Segunda División, or who participate in any of the competitions organised by LALIGA inasmuch as they need your personal data to manage and process the credentials.

Likewise, LALIGA may communicate your personal data and any other user information to the public authorities when required in the performance of the duties legally attributed to them and pursuant to the applicable provisions.

Furthermore, some parties subcontracted by LALIGA may access your personal data and information as Data Administrators or Data Sub-Administrators to provide LALIGA with a necessary service.

LALIGA receives assistance from service providers. When necessary to provide you with the service, your information will be shared with our third-party service providers. These service providers sign an agreement that requires them to only use your personal data for the provision of services and as set out in this policy.

What are your rights when you provide us with your personal data?

We hereby inform you that you can exercise your rights of access, rectification, opposition, erasure, portability or limitation of processing before LALIGA at any time.

What are your rights as a user?

  • Right to access: you have the right to obtain confirmation about whether LALIGA will process your personal data. You also have the right to access these data.
  • Right to rectification: you can request that inaccurate personal data be modified or rectified.
  • Right to erasure: you can request that your personal data be erased.
  • Right to restriction of processing: in certain circumstances, you may ask for the processing of your data to be restricted. In this case, they will only be stored for the purpose of defence against lawsuits.
  • Right to opposition: you may oppose the processing of your data for the purpose you specify. LALIGA will refrain from processing your data, unless justified on compelling legitimate grounds or to defend against possible lawsuits.
  • Right not to be subject to a decision based solely on automated Processing, including profiling, which may cause you legal effects or similarly significantly affects you.
  • Right to portability: if the Portal so permits, you may exercise the right to portability of your data, in a structured, commonly used and machine-readable format to another data controller. Said action may require that a reasonable fee be paid by the applicant, depending on the administrative costs incurred to satisfy the request, in accordance with the regulations.

How can I exercise my rights?

  • By sending an email to: lopd@laliga.es. Exercising your rights is completely free of charge.
  • You may also oppose the processing of your data based on legitimate interest at any time by sending an email to: lopd@laliga.es.
  • The fact that you oppose a specific purpose will not affect the use you may make of the application or the lawfulness of the processing prior to opposition.
  • Furthermore, if you believe that you have not been able to exercise your rights to your satisfaction, you may contact the data protection delegate at LALIGA at dpo@laliga.es or file a claim before the Spanish Data Protection Agency at its website, www.agpd.es.