PRIVACY POLICY

This Privacy Policy (hereinafter, the "Policy") seeks to regulate the personal data processing activities performed by LaLiga Group International, S.L. (hereinafter, "LALIGA") through the LALIGA Business School website (hereinafter, the "Web").

Who is the data controller for your personal data?

Your personal data will be processed by LALIGA, with Tax Identification Number (NIF) B05421805 and address at Calle Torrelaguna 60, 28043, Madrid.

Contact for LALIGA's Data Protection Officer: dpo@laliga.es

Where do we get your personal data from?

LALIGA will process the data you provide through the brochure request form (name, surname, email, telephone and country of residence as mandatory data), the alumni registration form (name, surname, master's degree taken and edition as mandatory data) and through the various registration and participation forms for any of the master's degrees and courses offered (name, surname, email, telephone and country of residence as mandatory data).

Likewise, LALIGA will also process other inferred data as a result of the use and activity you carry out on the Web (registered user ID; device ID; operating system; device model and telemetry, for example, it will also be recorded when you click on specific content or the time you remain on the asset) or your interactions with the communications we send you via web notification or email, where applicable (for example, clicking on the content of a communication).

Why do we process your personal data?

Main purposes:

Response to brochure requests: We inform you that your personal data provided for the brochure request (name, surname, email, telephone and country of residence as mandatory data) will be processed by LALIGA for the purposes of providing you with information, managing your queries and assisting you in everything related to the offer of courses and master's degrees of LALIGA Business School.
Registration and participation in the training offered: We inform you that the personal data (name, surname, email, telephone and country of residence as mandatory data) that you provide in any of the forms enabled for registration or participation in any of the master's degrees and/or courses offered by LALIGA Business School will be processed by LALIGA for the purposes of managing your request to participate in said master's degrees and/or courses.
Registration in the Alumni Community section of the Web: We inform you that, in the event of registering in the section dedicated to the Alumni Community of the Web, we will process your personal data (name, surname, master's degree taken and edition as mandatory data) for the purpose of verifying your status as a student or former student of LALIGA Business School and, where appropriate, allowing your registration in said community where you will have access to information on training, academic programs, courses and invitations to events of the latter and its collaborators, or exclusive promotions.

In this sense, for the purpose of verifying the validity of the email provided to LALIGA for the above purposes, LALIGA uses the services of a third-party provider (RP Solutions, Inc.) which implies an international transfer to the United States, a country that guarantees a level of protection equivalent to that of the European Union for personal data transferred from Europe to third-party providers that are adhered to the Data Privacy Framework, among which said provider is found.

The legal basis for the aforementioned purposes is that the processing is necessary for the performance of a contract to which the data subject is party by virtue of the provisions of Art. 6.1 b) of the General Data Protection Regulation (hereinafter, "GDPR").

In this sense, we inform you that the data identified as mandatory will be necessary to attend to and respond to your requests for information, carry out your registration and participation in the training offered by LALIGA Business School or, where appropriate, verify your status as a current student or former student of LALIGA Business School and manage your registration in the Alumni Community of the Web. If you do not provide this data, we will not be able to apply the measures requested by you.

LALIGA Business School Alumni Community: In the event of participating in any of the courses and master's degrees of LALIGA Business School, we inform you that your personal data (name, surname, email, telephone and country of residence) will be processed by LALIGA to manage your participation in the LALIGA Business School alumni community with the purpose of sending you communications via email regarding training, academic programs, courses, invitations to events of LALIGA Business School and its collaborators, or exclusive promotions.

The legal basis for the aforementioned purpose is that the processing is necessary for the satisfaction of the legitimate interest of LALIGA by virtue of the provisions of Art. 6.1 f) of the GDPR, consisting of keeping students informed and fostering relationships between former students. Prior to this, we inform you that LALIGA has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users. You can request the conclusions of this analysis via lopd@laliga.es.

You have the right to object to the aforementioned purpose at any time in accordance with the procedure described in the section "What are your rights when you provide us with your personal data?".

Internal reports: Likewise, LALIGA will process, in aggregated form, the personal data you have provided through the Web (in this case, country of residence), the data on the use of the Web (user ID, operating system and telemetry, for example, clicking on specific content or the time you remain on the asset) and finally, interactions with communications of any kind that you receive (for example, clicking on the content of a communication) or in communication with Web support, for the preparation of relevant metrics and statistics that allow LALIGA to analyze the use made of the Web by the different user segments generated and the impact of its campaigns, evaluating the interest they have aroused among said segments based on the analyzed data. In particular, LALIGA will carry out aggregated segmentations based on the aforementioned data, among which are:
- Segmentations based on country. (e.g. 20 users from Spain have taken Master's Degree X).

The legal basis for the aforementioned purposes is that the processing is necessary for the satisfaction of the legitimate interest of LALIGA by virtue of the provisions of Art. 6.1 f) of the GDPR, consisting of extracting learnings from the information provided and obtained from users that allow it to improve the Web and optimize the communication campaigns it carries out based on the interest these generate among the different user groups. Prior to this, we inform you that LALIGA has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users. You can request the conclusions of this analysis via lopd@laliga.es.

Additional purposes:

The additional purposes for which LALIGA will process your personal data are indicated below:

LALIGA commercial communications: So that LALIGA can send you commercial communications via email, SMS or other instant messaging channels about its activities (the competitions it organizes, campaigns, public viewings, shows or live events), products (applications, web platforms and games developed by LALIGA), services, contests, offers, draws and/or promotions of LALIGA, or contests, offers, draws and/or promotions carried out by LALIGA regarding products and services promoted jointly by it with its official sponsors, which you can consult here.
For this purpose, LALIGA will only process the email address and telephone number that you have included in any of the forms enabled on the Web.

Likewise, we inform you that, to send you commercial communications via email or SMS, LALIGA uses a service from a third-party provider (salesforce.com EMEA Limited) which implies the international transfer of the email address you have provided to us to the United States, a country that guarantees a level of protection equivalent to that of the European Union for personal data transferred from Europe to third-party providers that are adhered to the Data Privacy Framework, among which said provider is found.

The legal basis for the processing of your data for the aforementioned purpose is the consent you have granted us for the processing of your data for the purpose of sending you these communications by virtue of the provisions of Art. 6.1 a) of the GDPR. Your personal data will be kept for this purpose until you revoke the consent granted.

You have the right to withdraw your consent at any time in accordance with the procedure described in the section "What are your rights when you provide us with your personal data?", without this affecting the lawfulness of the processing based on consent prior to its withdrawal.

Preparation of simple segmentations: So that LALIGA can send you segmented commercial communications via email, SMS or other instant messaging channels, about LALIGA products and services (for example, we will send you commercial communications about products that may interest you based on your country of residence).
The aforementioned information will be directed at simple segments (groupings of users carried out based on the information provided by them in their profile). By way of example merely, and not exclusively, LALIGA may prepare user segments taking into account the following:
- Low level of detail of the profile. LALIGA could create simple segments using the declared information of the user such as, for example, creating segments based on country of residence.
- Non-exhaustive profile. To create the segments, LALIGA will only process the personal data that you have provided in any of the forms enabled on the Web. In particular, LALIGA may use the following personal data declared by the user to create segments:
  - Country of residence.
  - Training taken.

Positive consequences for the user. LALIGA will be able to send you commercial communications that best fit the profile you have declared, avoiding unwanted commercial communications or those regarding uninteresting content.

The legal basis for the aforementioned purpose is that the processing is necessary for the satisfaction of the legitimate interest of LALIGA by virtue of the provisions of Art. 6.1 f) of the GDPR, consisting of effectively taking advantage of the personal data that the user has provided to achieve greater interest and return on the communications sent. Prior to this, we inform you that LALIGA has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users, the conclusions of which you can request via lopd@laliga.es.

In no case will the profiling carried out by LALIGA produce legal effects or significantly affect you in a similar way.

Preparation of exhaustive profiles: LALIGA will draw up an exhaustive profile of you so that it can offer you personalized experiences, information and products through the sending of personalized commercial communications via email, SMS, or other instant messaging channels or show you banners with personalized advertising on websites, applications or social networks about LALIGA products and services (for example, if we identify that you are a fan of a specific club, we will offer you personalized incentives, such as a jersey of your favorite team).
In this way, the aforementioned information will be directed to the segments (user groupings that are carried out based on the information obtained from them or the use you make of the Web that we can prepare based on the following data sources:
- The information you provide us during registration (in this case, country and region);
- Interactions with communications or notifications you receive (for example, clicking on the content of a communication);
- Inferred data as a result of use and activity on the Web (device ID, registered user ID, telemetry, for example, clicking on specific content or the time you remain on the asset).
Furthermore, LALIGA will generate said segments taking into account the following profiling techniques:
- Measurement of individual campaign performance: LALIGA will use information regarding open rates, average click-through rates, email bounces or subscription cancellation rates to measure campaign performance at an individual level and consequently, carry out segmentations based on the inferred information about you and the rest of the declared information (for example, if you are a very active user in certain communications we may send you communications of the same type more frequently).
- Campaign optimization: we will exclude you from those advertising campaigns regarding draws in which you have participated, regarding applications in which you have registered or downloaded, regarding products you have purchased or regarding services you have previously acquired (for example, we will avoid offering you a LALIGA app if we know that you have previously downloaded it).
- Users with similar tastes and preferences: thanks to the profile that LALIGA creates about you, we can send you personalized content taking into account other profiles similar to yours (for example, if we identify that other users similar to you like eSports we will show you advertising related to eSports).
- User valuation: LALIGA will obtain an unknown variable from known variables provided or inferred from you so that it can carry out an analysis of its users with the aim of identifying those with a greater propensity to use or contract LALIGA products, and where appropriate, offer you LALIGA products and services.
- LALIGA may offer third-party advertisers segments and audiences prepared by it with the aforementioned personal data so that said advertisers can show you personalized advertising in different advertising spaces. In no case will we share your personal data to fulfill this purpose.

In no case will the profiling carried out by LALIGA produce legal effects or significantly affect you in a similar way.

How long will we keep your personal data?

The personal data we process will be kept as long as the purposes that motivated its collection persist and/or you do not revoke the consents you may have granted, or do not exercise your rights of erasure, opposition or limitation of processing.

In this sense, once the previous period has ended, LALIGA will keep your personal data duly blocked for the sole purpose of attending to responsibilities of any kind that may arise.

Specifically:

Response to brochure requests: The data provided for attending to queries will be kept as long as you do not request the erasure of your data, this purpose persists and, once finished, your data will remain blocked during the limitation period of legal actions that may arise.
Registration and participation in the training offered: The data provided for registration and participation in any of the master's degrees and courses offered by LALIGA Business School will be kept as long as you do not request the erasure of your data, this purpose persists and, once finished, your data will remain blocked during the limitation period of legal actions that may arise.
Registration in the Alumni Community section of the Web: The data provided for your registration in the LALIGA Business School alumni community will be kept as long as you do not request the erasure of your data, this purpose persists, you do not revoke the consent granted or limit the processing and, once this purpose is fulfilled, your data will remain blocked during the limitation period of legal actions that may arise.
LALIGA Business School Alumni Community: The data provided for the LALIGA Business School alumni community purpose will be kept as long as you do not request the erasure of your data, this purpose persists, you do not object to the processing and, once this purpose is fulfilled, during the limitation period of legal actions that may arise from it.
Internal reports: The personal data used to carry out the improvement of services and user experience will be kept as long as you do not request the erasure of your data, this purpose persists, you do not object to the processing and, once this purpose is fulfilled, your data will remain blocked during the limitation period of legal actions that may arise.
Commercial communications: The data provided for commercial communications carried out by LALIGA will be kept as long as you do not request the erasure of your data, this purpose persists, you do not revoke the consent granted or limit the processing and, once this purpose is fulfilled, your data will remain blocked during the limitation period of legal actions that may arise.
Preparation of simple segmentations: The data provided for the preparation of simple profiles will be kept as long as you do not request the erasure of your data, this purpose persists, you do not object to the processing and, once this purpose is fulfilled, your data will remain blocked during the limitation period of legal actions that may arise.
Preparation of exhaustive profiles: The data provided for the preparation of exhaustive profiles will be kept as long as you do not request the erasure of your data, this purpose persists, you do not revoke the consent granted or limit the processing and, once this purpose is fulfilled, your data will remain blocked during the limitation period of legal actions that may arise.

Said personal data will be erased when the indicated periods prescribe.

To which recipients will your personal data be communicated?

LALIGA may provide personal data and any other user information when required by public authorities in the exercise of the functions legitimately attributed to them and in accordance with applicable provisions.

Similarly, some entities subcontracted by LALIGA could access personal data and information as data processors or sub-processors to provide LALIGA with a necessary service, as indicated in each of the purposes in the section "Why do we process your personal data?".

These service providers sign a contract that requires them to use your personal information solely for the provision of the services reported in this Policy.

What are your rights when you provide us with your personal data?

We inform you that, at any time, you can exercise your rights of access, rectification, opposition, erasure, not to be subject to automated decisions, portability and limitation of processing, as well as revoke your consent at any time with LALIGA:

What do your rights as a user consist of?

Right of access: you have the right to obtain confirmation as to whether LALIGA processes your personal data, as well as to access such data.
Right of rectification: you can request the modification or rectification of inaccurate personal data.
Right of erasure: you can request the erasure of your personal data.
Right of limitation of processing: In certain circumstances, you can request the limitation of the processing of your data, in which case they will only be kept for the exercise or defense of claims.
Right of objection: you can object to the processing of your data for the purpose you specify. LALIGA will cease to process the data, except for compelling legitimate grounds, or the exercise or defense of possible claims.
Right not to be subject to individual automated decisions: you have the right not to be subject to a decision based solely on automated processing, including profiling, which may produce legal effects on you or significantly affect you in a similar way.
Right of portability: if the web allows it, you can exercise the right to the portability of your data, in a structured, commonly used and machine-readable format, and to transmit them to another data controller.

How do I exercise my rights?

By sending an email to derechos@laliga.es. The exercise of your rights will be completely free of charge.

If upon registering in any of the sections of the Web, you have given your consent for the purposes for which it was requested, you may revoke it, at any time, as well as you may object to data processing based on the legitimate interest of LALIGA, either by following the procedure established in each of the communications you receive, or by sending an email to the address: derechos@laliga.es.

Objection to a specific purpose or the revocation of the consents granted will not affect the use you may make of the application nor the lawfulness of the processing prior to the objection or revocation of consent.

Finally, if you consider that you have not obtained satisfaction in the exercise of your rights or that the processing carried out by LALIGA of your personal data has not been in accordance with data protection regulations, you can contact or file a claim with LALIGA's Data Protection Officer at the email address dpo@laliga.es or file a claim with the Spanish Data Protection Agency through its website www.aepd.es.

Is there any type of restriction?

LALIGA informs you that to use and, where appropriate, request information on the Web you must be at least 18 years old.

COOKIES POLICY

Users are informed that this website uses its own and third-party cookies.

1. What are cookies?

Cookies are small data files generated on the user's computer allowing the user themselves to choose whether to store the information generated about their online activity. Cookies enable LaLiga to, among other things, store and recover information about the browsing habits of a user or their device and, depending on the information contained and the way in which the same is used by the device, may be used to recognise the user.

Proprietary cookies are sent to the user's terminal from a device or domain managed by LaLiga and from which the service requested by the user is provided. Furthermore, third-party cookies are sent to the user's terminal from a device or domain that is not managed by LaLiga but rather by another entity, which processes the data obtained via the cookies.

The website uses session cookies (which collect and store data while the user is accessing the website) and persistent cookies. Persistent cookies remain on the user's terminal so that the stored data may be accessed and processed during a period defined by the cookie manager, which may range from a few minutes to several years.

2. The cookies we use based on their purpose

Strictly necessary cookies These cookies are necessary for the website to function and cannot be deactivated in our systems. Generally speaking, they are only configured in response to the actions you take when requested services, such as to set your privacy preferences, log in or complete forms. You can configure your browser to block or notify you of these cookies, but certain parts of the website will not function. These cookies store no personal identifying data.
Performance cookies: These cookies allow us to count visitors and sources of traffic in order to assess performance by our website and improve it. They help us know which pages are more or less popular, and how visitors browse through the website. All the information collected by these cookies is aggregate in nature and therefore anonymous. If you do not allow these cookies, we will not know when you visited our website and we will not be able to assess whether it functioned correctly.
Functional cookies: These cookies allow the website to provide better functionality and personalisation. They can be established by our company or by external suppliers whose services we have added to our pages. If you do not allow these cookies, it is possible that some of these services will not function correctly.
Targeting cookies: These cookies may be established via our website or by our advertising partners. They may be used by those companies to create a profile on your interests and show you relevant adverts on other websites. They do not directly store any personal information, but are rather based on the unique ID of your browser and Internet device. In this regard, we inform you that we use these cookies to:
1. Personalise advertising campaigns;
2. Create anonymous browsing profiles;
3. Show adverts that are adapted to user preferences;
4. Measure performance by advertising campaigns;
5. (Reidentifying users who browse LaLiga or third-party websites thanks to the advertising identifier of each device. The advertising identifier is a pseudonymised data that does not directly identify the user who is browsing the web although it can make it identifiable in conjunction with other information available to it;
6. Sharing user's session data with other entities such as football clubs, sponsors and third-party media agencies with the purpose of offering the user customised advertising about their own content.

If you do not allow these cookies, you will see less targeted advertising.

Social media cookies: These cookies are established by a range of social media services that we have added to the website to enable you to share our content with your friends and networks. They can monitor your browser via other websites and create a profile on your interests. This may affect the content and messages you see on other websites that you visit. If you do not allow these cookies, it is possible that you will not be able to use or see these sharing tools.

3. Management of cookies

You can enable or disable the cookies we use through the privacy preference centre accessible through the following link:

Configuración de cookies

Without prejudice to the above, the user may also configure the cookies allowed in their browser at any time. However, the deactivation of cookies may affect the correct operation of certain sections of the Website.

Depending on the browser used, the installation options may be found in different sections. To this end, the user should consult the instructions for their browser if they wish to know how to block or allow the installation of cookies. For the following browsers, the user may find more information via the following links:

The user may also use third-party blocking tools that will allow them to detect cookies on any Website and manage their installation. One of these may be downloaded from the following link: http://www.abine.com/dntdetail.php

4. Data recipients

The information obtained via the cookies in this website will be shared with third parties with which LaLiga maintains a range of partnerships (hereinafter, "Partner Entities") for the purposes defined in this policy.

You can check the privacy preference centre through the following link to see the Partners that incorporate their cookies on our websites, what data they collect and how they use this data:

Configuración de cookies

In the same way, LaLiga will communicate the user's personal data to Clubs, Sponsors and third-party Media Agencies which have signed a prior collaboration agreement with LaLiga with the purpose provided in section (vi) of point 2 d) of this politics. The user can find a list of those collaborating entities in the following link.

5. More information

Finally, we inform you that you have the option to revoke the consent provided for the use of cookies by LaLiga at any time by changing the configuration of the privacy preferences settings or by configuring your browser to this end under the terms provided in section 3.

LaLiga may amend this Cookies Policy according to new legislative or regulatory requirements or to adapt said policy to instructions issued by the Spanish Data Protection Agency. To that end, users are advised to regularly visit this page in order to discover any changes made thereto.

If you have any questions about this Cookies Policy, you may contact LaLiga by writing an email to lopd@laliga.es. Furthermore, if you believe that you have been unable to exercise your rights satisfactorily, you may contact the Data Protection Officer of LaLiga by writing an email to dpo@laliga.es or lodging a complaint with the Spanish Data Protection Agency via its website at www.aepd.es.