1. DATA PROCESSOR
Your personal data will be processed by the FC Barcelona Private Foundation located at Calle Arístides Maillol s/n, 08028, Barcelona and with Spanish tax identification number (NIF) G-60627445 (hereinafter, Barça Foundation)
2. PURPOSES AND GROUNDS OF LEGITIMATION
Your data will be processed for the following purposes:
|GROUNDS OF LEGITIMATION AND DURATION
|If making a donation, your data will be processed for the time necessary to manage your donation and/or contribution to the corresponding campaign, as well as to comply with any legal requirement that may be applicable in accordance with the contribution made.
Contractual Relationship and Legal Obligation
The data will be kept until the donation ends.
|When making the donation, we may process your data to monitor possible fraudulent operations, which may involve providing data to expert partners in the field of fraud prevention and management, in accordance with the provisions of the following section.
In addition, in the case of donations greater than 100 euros, we may contact you to request your national identification in order to verify that the donation is legitimate.
In the event that you register for Barça Foundation programs, such as the Bullying Prevention Program or the “Illusions” Program, among others, your data will be processed for the sole purpose of managing and assessing your request and if accepted, provide you as a user with a Barça experience, which may include, among others, a meeting with FC Barcelona players, experiences in the stadium and all those other events or actions that may provide a Barça experience.
You are informed that it is not the purpose of the Barça Foundation to process health data of minors. To be able to process such a request, the requirements as established must be met without the need to send or communicate any type of report or document.
The data will be processed until the end of the Program or until you withdraw your consent
OTHER TYPES OF
FOUNDATION (RAFFLE, AUCTIONS, ETC.)
In case of participating in our raffles, auctions, etc., your data will be processed in order to manage the raffle/auction, in order to deliver the prize or purchased product, as well as to comply with any legal requirement that may be applicable.
As a general rule, your data will be processed for the management of the raffle/auction. In any case, you are advised to read the Legal Regulations before participating.
Contractual Relationship and Legal Obligation
The data will be processed until the conclusión of the raffle/auction.
In case of giving your consent, you shall be sent the Barça Foundation Newsletter, which will always be personalized and adapted to your interests and may include information on campaigns and activities that we carry out or promote, as well as the digital magazine, the annual report, corporate documents related to our activity, or any other information that we consider relevant.
Likewise, we may send you relevant information by other electronic means, such as SMS or instant messaging applications, as well as contact you by phone to communicate information that may be of interest to you or improve the quality of our services and campaigns.
The data will be processed until you unsubscribe or withdraw your consent.
ON EVENTS AND
|In case of giving your consent, you shall be sent information on activities and events not related to the activity of the Foundation.
The data will be kept until you unsubscribe or withdraw your consent.
PROFILE OF OUR
The data will be processed as long as you have a relationship the Barça Foundation or until you oppose the processing.
There are certain third party social networks, applications or web pages that allow the sending of commercial communications or advertising to specific users.
With this information, the social network or application verifies whether the user has an account on its platform, and the Barça Foundation may perform what is known as ‘Custom audience’ with those users who have agreed to receive commercial communications from the Barça Foundation, and which in turn have an account in said social network or application, thus making it possible to show advertising directly to them.
This type of activity can be carried out in different media, particularly social networks such as Facebook (Custom audience), Twitter (Tailored audiences) or Google (Customer Match).
Likewise, these social networks or applications allow sharing of user data to find or identify what are called “similar audiences”, that is, users who have a similar profile to users and/or Barça Foundation in said social network or application, but who are not Barça Foundation users.
This type of activity is usually carried out especially through social networks such as Facebook (Lookalike audience), Twitter (Tailored audiences) or Google (Similar Audiences). In this case, as it does not directly impact advertising addressed at its own users, the basic data on all users is used, even those who have not agreed to receive commercial communications.
In relation to the data provided to the said third parties, we consider it relevant for our users to know that only their email or telephone will be communicated, which will be communicated in encrypted form to guarantee the confidentiality and security of their data. The entire process is secured by means of the tool provided by the platform itself, which makes data identifiable in its database.
Note that if you do not wish to receive advertising through the social network or third-party platform, you must restrict it through your user profile, all in accordance with the privacy policies of each of the platforms.
These social networks and/or applications will only provide us with your data in an anonymized and statistical manner, without us being able to identify you again or learning of any other new interests, unless you interact with us through one of our advertisements via the social network and/or application.
The data will be processed until you unsubscribe from receiving information from the Barça Foundation or until you oppose the processing.
3. DATA COMMUNICATION
Your data will not be transferred, sold, leased or made available in any other way to any third party, except for those Barça Foundation service providers who carry out certain activities for us (send the newsletter, manage payments, manage databases, etc...) but that in no case will process the data for their own purposes. Some of these providers may be outside the European Union, as indicated in section 5 below.
Notwithstanding the foregoing, when making the donation it is possible that your data may be communicated to third parties that will treat your data as data processors, and it shall therefore be these that will determine the purposes and the means by which they will be used by the same. Said companies may be logistics firms for the sending of products to the given address, or fraud prevention firms, such as for example Riskified Ltd., who shall process your data for security purposes and anti-fraud control of the transactions carried out by you. The communication of Barça Foundation data to Riskified involves the international transfer of data outside the European Economic Area (EEA), for which purpose both parties guarantee that the sufficient guarantees have been taken to ensure that the processing complies with the requirements established in data protection regulations (for further information about these guarantees, please contact us at the addresses given in the seventh section below).
For further information about how Riskified processes your data, please see: https://www.riskified.com/privacy/
4. CREATION OF PROFILES AND AUTOMATED DECISIONS
As described below, the Barça Foundation will be able to make user profiles, taking into account all the information provided by you.
This profile will take into account, for example:
- Your behavior on the web, cookies, cursor movements, or your preferences and interests.
- Behavior with regard to our newsletters, for example, what contents are interesting to you depending on the opening of newsletters and the frequency with which you open them.
- Interactions that can be performed through other channels such as inquiries to our information channels, or contact.
- Information that you may provide us through satisfaction surveys.
- Information that might be provided to us via programs designed by the Barça Foundation.
We also inform you that, for some services, we may process your personal data using automated means. This means that certain decisions are made automatically without human intervention, such as segmenting you according to whether you have an interest in certain sections of the website or the likelihood of using other services that we may offer.
If you have agreed to receive commercial communications, these may be adapted and personalized according to users’ interests, either based on the services requested, or based on the data that we can deduce or obtain from your browsing behavior, interest in certain content, reaction to our communications, among others.
Said personalization is carried out in a partially automated manner, in the sense that we determine the personalization parameters, but it is the technological platform that actually generates the user profile. We do not send general communications that are not segmented via the previous procedure, since we consider that it is both in our own interest and that of the user to send or receive information that is relevant, and not segmenting would not alter the number of communications received, but only the content thereof. If you do not wish to be segmented, please do not authorize sending, or oppose this at any time.
5. INTERNATIONAL TRANSFERS
The Barça Foundation, as an international organization, has international suppliers that may provide their services from outside the EU, so it is possible for users’ data to be processed outside the European Union or the European Economic Area (for example, supplier that sends the newsletter, data storage, fraud management, etc.).
In any case, we will ensure that this data processing is always protected with the appropriate guarantees, which may include:
- Standard EU approved clauses: These are contracts approved by the European regulator, and which provide sufficient guarantees to ensure that the processing complies with the requirements of the European General Data Protection Regulation.
- Third party certifications: For example, Privacy Shield, the framework agreement between the EU and the United States that establishes a standardized framework for data processing according to the requirements of the European General Data Protection Regulation.
6. DURATION OF THE PROCESSING
Notwithstanding these deadlines, your data may be kept in anonymized form for statistical or market research purposes, whenever possible, or duly blocked to comply with any legal obligation of the Barça Foundation.
7. FURTHER INFORMATION AND EXERCISE OF YOUR RIGHTS
You may request further information about the processing of your personal data at any time, as well as exercise your rights of access, rectification, deletion, limitation or portability, by contacting the Barça Foundation at the address c/Arístides Maillol, S/N, 08028 de Barcelona (Spain), or by email to email@example.com
Likewise, you may oppose the consent given regarding any consent-grounded actions and/or oppose our Legitimate Interest, as long as possible pursuant to current regulations. Notwithstanding the foregoing, opposition to any processing may mean that we are unable to provide certain services.
If you have any doubt, question or complaint about the way in which we process your personal data, please contact our Data Protection Officer, at the email address firstname.lastname@example.org or by regular written mail addressed to C/Arístides Maillol, S/N, 08028, Barcelona (Spain), with the reference “DPO”. In the event that you do not get a response within a reasonable period, you may file a claim with the Spanish Data Protection Authority.