MBA Privacy Policy

This Privacy Policy (hereinafter, the “Policy”) aims to regulate the personal data processing activities carried out by the LIGA NACIONAL DE FÚTBOL PROFESIONAL (Spanish Professional Football League, hereinafter, “LaLiga”) and Aspire Zone Foundation (hereinafter, “AZF”). Therefore, the personal data that you provide in the website (hereinafter, the “Platform”) will be processed by both entities as joint data controllers.

Who is the data controller for your personal data?

On the one hand, your personal data will be processed by LaLiga, with tax identification no. (NIF): G-78069762 and registered offices at Calle Torrelaguna 60, 28043, Madrid, which is a private sports association, in accordance with the provisions of Articles 12 and 41 of the Sports Act 10/1990 of 15th October, that is exclusively and compulsorily made up of all the public limited sports companies and clubs that participate in official professional football competitions at the state level. LaLiga is registered under number 1 in the Professional Leagues section of the National Sports Council’s Sports Associations Register.

The Data Protection Officer for LaLiga: dpo@laliga.es.

On the other hand, your personal data will be processed by AZF, a foundation owned by the Government of Qatar incorporated in accordance with the Emiri Decision number (1) for the year 2008 and having principal office at Aspire Zone, P.O. Box. 23833, Doha, Qatar, Tel: +97444476786 Fax: +97444472045 (hereinafter referred to as "Aspire"), duly represented by Mr. Mohammed Khalifa Al Suwaidi, CEO.

Where do we get your personal data from?

LaLiga and AZF will process the data you provide through the contact form (name, last name, mail and country as mandatory data and telephone number as optional) as well as your interactions with the communications that we send via email, where relevant (for example, clicking on the content of a communication sent).

Why do we process your personal data?

Main purposes:

LaLiga and AZF:
Both LaLiga and AZF undertake to process your personal data in accordance with the provisions of applicable regulations and, specifically, for the following purposes:
- Attending to information requests: we hereby inform you that LaLiga and AZF may process your personal data in order to manage any requests and provide you with the appropriate information regarding the offered courses.
- Enrolment in the offered training: we hereby inform you that LaLiga and AZF may process your personal data in order to manage your enrolment and participation in the offered courses.
  In this regard, LaLiga uses Microsoft's cloud services (Azure) for managing and hosting your personal data. Your personal data will be transferred outside the European Economic Area, specifically to the United States, because of this service. Similarly, LaLiga uses the services of a third party provider (RP Solutions, Inc.) to verify the validity of the email address provided to LaLiga to sign up to the Platform; this also involves an international transfer, in this case of the email address provided, to the United States. This is a country in which an equivalent level of protection to that of the European Economic Area is not guaranteed. Consequently, LaLiga has signed standard contractual terms adopted by the European Commission with said service providers pursuant to the provisions of Art. 46.2 c) of the General Data Protection Regulation, including additional guarantees and obligations addressed to these providers for as much security and transparency as possible. The content of the standard contractual terms is available on request through lopd@laliga.es.
The legal basis for the aforementioned purposes is that the processing is necessary for the execution of a contract in which the interested party is a party by virtue of the provisions of art. 6.1 b) of the General Data Protection Regulation.
LaLiga:
- Internal reports: Likewise, LaLiga will process in aggregated form the personal data that you provided when signing up (in this case, country) for the preparation of relevant metrics and statistics that let LaLiga analyse how the Platform is used by the different user segments that are generated and the impact of its campaigns, evaluating the interest that they have generated among said segments based on the data analysed. In particular, LaLiga will carry out aggregated segmentation based on the aforementioned data, which includes:
  - Segmentation according to country. (e.g., 20 students are from Spain).
The legal basis for the aforementioned purpose is that the processing is necessary to satisfy the legitimate interest of LaLiga by virtue of the provisions of art. 6.1 f) of the General Data Protection Regulation, consisting in extracting lessons learned from the information provided and obtained from users that let it improve the Platform and optimise the campaigns run based on the interest they generate among the different user groups. Before that, we would like to inform you that LaLiga has analysed the proportionality between its legitimate interest and its users’ rights and freedoms. You can request the conclusions of this analysis through lopd@laliga.es.

You have the right to object to the aforementioned purpose at any time in accordance with the procedure described in the section "What are your rights when you provide us your personal data?"

Additional purposes:

The additional purposes for which LaLiga may process your personal data are set out below:

LaLiga commercial communications: So that LaLiga can send you commercial communications via email, SMS or other instant messaging channels about its activities (organized competitions, campaigns, public viewings, shows or live events), products (apps, online platforms and games developed by LaLiga), services, competitions, offers, draws and/or promotions run by LaLiga, or contests, offers, draws and / or promotions run by LaLiga on products and services jointly promoted with its official sponsors, which you can consult here www.laliga.es/sponsors (hereinafter, the "Official Sponsors"), national federations or national and international television channels (hereinafter, “LaLiga products and services”).
For this purpose, LaLiga will only process your email address and your phone number, where applicable.

Likewise, we hereby inform you that LaLiga uses a service provided by a third party provider (salesforce.com EMEA Limited) to send you commercial communications via email or SMS and commercial push notifications; this involves an international transfer of the email address and/or phone number you provided us to the United States. This is a country in which an equivalent level of protection to that of the European Economic Area is not guaranteed. Consequently, LaLiga has signed standard contractual terms adopted by the European Commission with said service provider pursuant to the provisions of Art. 46.2 c) of the General Data Protection Regulation, including additional guarantees and obligations addressed to these providers for as much security and transparency as possible. The content of the standard contractual terms is available on request through lopd@laliga.es.

The legal basis for processing your data for the aforementioned purposes is the consent you have granted for processing your data for the selected purposes under the provisions of art. 6.1 a) of the General Data Protection Regulation. Your personal data will be held for these purposes until you revoke the consent granted.

You have the right to withdraw your consent at any time following the procedure described in the “What are the user’s rights when providing us their personal data?” section, this does not affect the legality of the processing based on consent prior to its withdrawal.

Preparation of simple profiles: So that LaLiga can send you segmented marketing communications via email, SMS or other instant messaging channels, about LaLiga’s product and services (for example, we will send you marketing communications about products which may be of interest to you based on your age or the province of residence you have provided in your profile).
The aforementioned information is aimed at simple segments (groups of users created based on the information provided by them in their profiles) which LaLiga may prepare taking the following into consideration:
- Limited level of detail of the profile. LaLiga may create simple segments such as, for example, segments for women over the age of 25.
- Non-exhaustive profile. To create the segments, LaLiga will only process the personal data which you have provided on the current website or on other LaLiga Ecosystem assets. In particular, LaLiga will use the following personal data:
  - Country of residence.
  - Region or province.
  - Age.
  - Sex.
  - City of residence.
  - Language.
  - Post code.
  - Favourite team.
  - Favourite sport.
- Positive consequences for the user. LaLiga will be able to send you marketing communications that best match the profile that you have declared, avoiding marketing communications which are not desired or about content which is of little interest.

The legal basis for the aforementioned purpose is that the processing is necessary to satisfy the legitimate interest of LaLiga by virtue of the provisions of art. 6.1 f) of the General Data Protection Regulation, consisting in achieve a greater interest and return on the communications sent. Before doing so, we inform you that LaLiga has conducted a proportionality analysis between its legitimate interest and the rights and freedoms of its users, the conclusions of which can be requested from lopd@laliga.es.

You have the right to object to the aforementioned purpose at any time in accordance with the procedure described in the section “What are your rights when you provide us your personal data?”.

Preparation of exhaustive profiles: LaLiga will make an exhaustive profile of you in order to offer you customised experiences, information and products by sending you marketing communications via email, SMS, or other instant messaging channels (provided that you have given consent for the purpose "LaLiga commercial communications") (for example, if we identify that you are a supporter of specific club, we will offer you personalised incentives, such as a shirt of your favourite team).
Likewise, the aforementioned information will be targeted to the segments (user groups that are made according to the information obtained from them or how you use the Platform) that we can create based on the following data sources:
- The information that you provided when signing up (in this case, country);
- The interactions with communications or notifications you receive (for example, clicking on the content of a communication);
LaLiga will also generate said segments by taking into account the following profiling techniques:
- Campaign optimisation: we will exclude you from advertising campaigns on draws in which you have participated, on apps you have downloaded or registered on, on products or services you have already purchased (for example, we will avoid offering you a LaLiga app if we know that you have already downloaded it)
- Users with similar interests and preferences: thanks to the profile that LaLiga creates about you, we can send you personalised content that takes into account other profiles similar to yours (for example, if we identify that other users similar to you like eSports, we will show you advertising related to eSports).
- User ratings: LaLiga will obtain an unknown variable from known variables provided by you or inferred of you in order to carry out an analysis of its users with the aim of identifying those with the greatest propensity for using or contracting LaLiga products, and, if applicable, offering them products and services.

You have the right to withdraw your consent at any time following the procedure described in the section “What are your rights when you provide us your personal data?”, this does not affect the legality of the processing based on consent prior to its withdrawal.

How long will we keep your personal data for?

The personal data which we process will be stored for such time that the purposes which motivated their collection persist and/or you do not revoke the consent which you have given, or you do not exercise your rights of erasure, objection or restriction of processing.

Likewise, LaLiga and AZF will keep your personal data, duly blocked, for the following period of time for the sole purpose of addressing any kinds of responsibilities that could arise:

Attending to information requests: The data provided for attending to information requests will be kept as long as you do not request the deletion of your data, this purpose persists and, once it has ended, during the limitation period of legal actions that may arise from it.
Enrolment in the offered training: The data provided for enrolment in the offered training will be kept as long as you do not request the deletion of your data, this purpose persists and, once it has ended, during the limitation period of legal actions that may arise from it.
Internal reports: The data provided for internal reports will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object their processing and, once this purpose it has ended, during the limitation period of the legal actions provisions that may arise from it.
LaLiga commercial communications: The data provided for LaLiga commercial communications will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object to the given consent and, once this purpose it has ended, during the limitation period of the legal actions provisions that may arise from it.
Preparation of simple profiles: The data provided for preparation of simple profiles will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object their processing and, once this purpose it has ended, during the limitation period of the legal actions provisions that may arise from it.
Preparation of exhaustive profiles: The data provided for preparation of exhaustive profiles will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object to the given consent and, once this purpose it has ended, during the limitation period of the legal actions provisions that may arise from it.

Dichos datos personales serán suprimidos cuando prescriban los plazos indicados anteriormente.

To which recipients will your personal data be communicated?

Your personal data will not be communicated to other people or companies. However, LaLiga may provide personal data and any other user information when required to do so by public authorities exercising responsibilities that have been lawfully granted to them and in accordance with applicable regulations.

Similarly, some entities subcontracted by LaLiga could access the personal data and information as data processors or sub-processors in order to provide LaLiga with a required service, as stated in the different purposes in the section “Why do we process your personal data?” These service providers sign a contract that requires them to use your personal information solely for the provision of the services communicated in this policy.

What are your rights when you provide us your personal data?

We hereby inform you that you can exercise your rights of access, rectification, objection, erasure, portability and limitation to processing with LaLiga and AZF at any time.

What do your rights as a user consist of?

Right of access: you have the right to obtain confirmation as to whether LaLiga process your personal data, as well as to access such data.
Right of rectification: you can request either entity to modify or rectify personal data that is inaccurate.
Right of erasure: you can request either entity to delete your personal data.
Right of limitation to processing: In certain circumstances, you can request the processing of your data to be limited, in which case, it will only be kept for the exercise or defence of claims.
Right of objection: you can object to the processing of your data for the purpose you specify. LaLiga will cease to process the data, except for compelling legitimate grounds, or for the exercise or defence of possible claims.
Right not to be subject to a decision based solely on automated processing, including profiling, which may cause you legal effects or similarly significantly affects you.
Right of portability: you can exercise the right of portability of your data, in a structured, commonly used and machine-readable manner, and to transfer the data to another data controller.

How do I exercise my rights?

AZF:
By sending an email to: Businessmanagement@aspirezone.qa

Finally, if you believe that you have failed to obtain satisfaction in the exercise of your rights, you are not happy with how your personal data has been processed file a complaint with the competent Data Protection authority.
LaLiga:
By sending an email to: lopd@laliga.es. Exercising your rights is completely free of charge.

Likewise, you can revoke the consent given or object to the data processing based on legitimate interest at any time by following the procedure set out in the different communications you receive from LaLiga, or by sending an email to: lopd@laliga.es.

The objection to a particular purpose or the revocation of consent given will not affect your use of the app or the legality of the processing prior to the objection or revocation of consent.

Finally, if you believe that you have failed to obtain satisfaction in the exercise of your rights, you are not happy with how your personal data has been processed or if you want to access the essential aspects of the joint responsibility agreement signed between the parties, please don't hesitate to contact the LaLiga data protection officer at dpo@laliga.es or, where relevant, file a complaint with the competent Data Protection authority.

Are there any kinds of restrictions?

LaLiga and AZF hereby inform you that you need to be at least 18 years old to request the information through the Platform.