HomeLegal information

Legal information

LALIGA.COM PRIVACY POLICY

The purpose of this Privacy Policy (hereinafter, the “Policy”) is to provide information regarding the processing of personal data carried out by LaLiga Group International, S.L. (hereinafter, “LALIGA”) via the laliga.com website (hereinafter, “laliga.com” or the “WEBSITE”).

To access the exclusive content of “MILIGA”, you must register with the LALIGA Ecosystem, through which you gain access to an environment created by LALIGA, comprising various LALIGA applications and websites, where, by means of a common registration system implemented by LALIGA across these assets (LALIGA Single Sign-On), each user receives a unique identifier so that any selection or modification of preferences or deletion request you make on one of the applications or websites forming part of the ecosystem will affect the rest of the LALIGA Ecosystem. Click on the link to find out more about the LALIGA Ecosystem.

Who is responsible for processing your personal data?

Your personal data will be processed by LALIGA, with tax identification number (NIF): B05421805 and registered address at Calle Torrelaguna 60, 28043, Madrid.

Contact details for LALIGA’s Data Protection Officer: dpo@laliga.es

Where do we obtain your personal data?

LALIGA will process the data you provide via the registration form (email address as a mandatory field and country as an optional field), during the website configuration process (favourite team as a mandatory field) via your profile in MyAccount (first name, surname, avatar or photo, date of birth, gender, National ID number, language, country of residence, county, city, address, postcode, telephone number as optional fields), through the various forms on the website and other data inferred as a result of your use and activity on the website (registered user ID; device ID; operating system; device model and telemetry; for example, it will also be recorded when you click on specific content or the time you spend on the platform) or your interactions with communications we send you via web notifications or email, where applicable (for example, clicking on the content of a communication).

Similarly, if you are a user of another platform managed by LALIGA and forming part of the LALIGA Ecosystem, LALIGA may process on MILIGA the aforementioned personal data, whether provided or inferred on those platforms.

Importing data from social media

We inform you that you may use the social media platforms of which you are a user to register with the LALIGA Ecosystem. Furthermore, if you consent to this, the social media platform you have chosen may share additional information with LALIGA to complete your profile on the LALIGA platform.

Data shared via Facebook:

First name and last name (required to register).
Email address (required to register).
Gender (Optional. Only if you have given your consent will LALIGA process this information).
Date of birth (Optional. Only if you have given your consent will LALIGA process this information).
Posts on your timeline (Optional. Only if you have given your consent will LALIGA process this information. Your public and private posts on your timeline, including photos and videos, information about the locations tagged in them and the types of reactions they receive).
Page likes (Optional. Only if you have given your consent will LALIGA process this information).
Current city (Optional. Only if you have given your consent will LALIGA process this information).

Thanks to page likes and posts on the timeline, LALIGA may obtain the following inferred data:

“Engagement” score: this score measures the volume of interactions the user has with the Facebook wall of the official LALIGA page.
“Social” score: this score measures the user’s influence on social media.
“Promotion” score: users’ walls are analysed for references to prize draws, promotions and entries into prize draws, and a score is assigned that measures the promotional ratio on the user’s wall. It also checks whether the user’s profile follows Facebook pages dedicated to advertising promotions, raffles and prize draws.
“Fan Value”: This score is a combination of the three previous metrics, ranking users according to the value obtained (a user with a higher score will be considered a more valuable user).

Data shared via Google:

First name and surname (Required to register)
Email address (Required to register)
Postal address associated with the account (Optional. Only if you have given your consent will LALIGA process this information).
Permission to access your YouTube account (Optional. Only if you have given your consent will LALIGA process this information, such as subscribed channels, “likes”, etc.).

The use (of the app) and transfer of information received from Google APIs to any other app will comply with the Google API Services User Data Policy, including the limited use requirements.

In this regard, we inform you that LALIGA uses a third-party technical provider’s tool for the structuring and segmentation of the information provided by Facebook and Google.

We would also like to remind you that LALIGA is not responsible for the legal compliance of the social media platform you use to register on the LALIGA website. For this reason, we recommend that you review the terms of use and privacy policy of the social media platforms you intend to use for this purpose, so that you can verify that the processing of your personal data complies with your privacy expectations and the applicable data protection regulations in each case.

Once the data has been imported and incorporated into your registered user account, your data will be integrated into the LALIGA Ecosystem and processed by LALIGA for the purposes described in this Policy.

For what purpose do we process your personal data?

Main Purposes:

/ Access to the Platform and registration on MILIGA: We inform you that your personal data (in this case, your email address and all profile data you have provided as optional information) will be processed by LALIGA for the purpose of facilitating your registration and access to MILIGA. To identify yourself on MILIGA, you will have the option to upload your own photograph as an avatar, which may be viewed by other users.

Furthermore, LALIGA will use your email address to grant you access to the other assets of the LALIGA Ecosystem.

In this regard, we inform you that LALIGA uses the services of a third-party provider (RP Solutions, S.L.) which, in turn, uses the services of a provider based in the United States (Neverbounce, Inc.), which involves the international transfer of your email address to the United States, for the purpose of verifying the validity of your email address. A country where a level of protection equivalent to that of the European Economic Area is not guaranteed. For this reason, standard contractual clauses adopted by the European Commission have been signed with this service provider pursuant to Article 46(2)(c) of the General Data Protection Regulation, including additional guarantees and obligations for these providers to ensure the greatest possible security and transparency. The content of the standard contractual clauses is available upon request vialopd@laliga.es .

In addition, once you have provided your email address and created your password, LALIGA will automatically send you an email containing a verification code so that you can verify your account and complete your registration on the website.

Finally, once you have completed the registration process on the LALIGA Ecosystem, LALIGA will process your email address to send you confirmation of your registration in compliance with the provisions of Article 28.1 of Law 34/2002 of 11 July on information society services and electronic commerce, and in accordance with Article 6.1.c) of the GDPR.

To send these communications, LALIGA uses a third-party service provider (salesforce.com EMEA Limited), which involves the international transfer of data to the United States, a country that guarantees a level of protection equivalent to that of the European Union for personal data transferred from Europe to third-party providers in the United States that adhere to the Data Privacy Framework, of which this provider is a member.

The data required and essential to enable you to register on the WEBSITE are your email address and your password. If you do not provide this data, you will not be able to register on the WEBSITE.

Should you decide not to register with MILIGA, LALIGA will use the data inferred from your use and activity on the website (registered user ID; device ID; operating system; device model and telemetry) or your interactions with communications we send you via web notifications or email, where applicable (for example, clicking on the content of a communication) to allow you access to laliga.com.

/ MILIGA configuration process: LALIGA will process the information regarding your favourite team in order to configure the content of MILIGA and show you news, prize draws and competitions related to your club. If you do not provide this information, the content of MILIGA cannot be configured according to your favourite team.

/ Participation in prize draws and polls via MILIGA: Please note that your email address will be processed by LALIGA for the purpose of managing your participation in prize draws and polls conducted via MILIGA. In the case of prize draws, once the draw has taken place, the prizes will be published on MILIGA or we will notify you via email. Furthermore, should you be selected as the winner of a prize draw, we will contact you to request additional details such as your postal address so that we can send you the prize or, if the prize is worth more than €300, your National Identity Card number so that we can make the relevant tax deduction. The only information required and essential for participation in prize draws and polls conducted via MILIGA is your email address. If you do not provide this information, you will not be able to take part. Furthermore, the additional information required if you are a winner may include your first name, surname, postal address and/or ID number if the prize is worth more than €300. If you do not provide the aforementioned information, we will not be able to send you the prize.

/ Participation in surveys via MILIGA: We inform you that your email address will be processed by LALIGA for the purpose of managing your participation in the various surveys conducted via MILIGA. Furthermore, we inform you that your responses may be shared in aggregate form with third-party sponsors or partners of LALIGA. In this case, the information shared will not contain any personal data, so it will not be possible to identify the user who answered the survey. The only information required to participate in the surveys is your email address ( ). If you do not provide this information, you will not be able to participate in these surveys.

/ Reward system via MILIGA: Please be advised that your email address will be processed by LALIGA for the purpose of storing and managing the points you earn through the various actions you undertake on MILIGA or through your activity within the various assets of the LALIGA Ecosystem. The only data required to provide this service is your email address. If you do not provide this information, the LALIGA rewards system will not function correctly.

The legal basis for the purposes mentioned above (except for the confirmation of your registration) is that the processing is necessary for the performance of the legal terms and conditions of MILIGA, pursuant to Article 6.1(b) of the General Data Protection Regulation. Furthermore, we inform you that LALIGA uses consultancy and technical support providers to carry out the purposes described above.

/ Management of registration and attendance at events organised by LALIGA via MILIGA: through MILIGA, you can register for events organised by LALIGA. To this end, LALIGA will confirm your participation and may send you communications related to the event (such as sending your ticket via a QR code or event-specific information: time and venue, how to get there, etc.), which may involve the disclosure of data to third-party suppliers of LALIGA for the management of the event. In such cases, we inform you that LALIGA has signed the relevant data processing agreement with these providers.

/ Sending of the LALIGA regular newsletter: on a monthly basis, LALIGA may send you organisational information relating to LALIGA that may be of interest to the international football industry. To this end, LALIGA will process your email address, first name, surname, country, newsletter language and the sector to which you belong, as provided by you via the application form enabled on the website.

In this regard, we inform you that LALIGA uses the mailing services of Sendgrid (Twilio, INC.), which involves the international transfer of data to the United States, a country that guarantees a level of protection equivalent to that of the European Union for personal data transferred from Europe to third-party providers in the United States that adhere to the Data Privacy Framework, of which this provider is a member.

The legal basis for processing your data for the aforementioned purposes is the consent you have given for the processing of your data for the specific purposes selected, in accordance with Article 6(1)(a) of the General Data Protection Regulation. Your personal data will be retained for this purpose until you withdraw the consent you have given.

You have the right to withdraw your consent at any time in accordance with the procedure described in the section ‘What are your rights when you provide us with your personal data?’, without this affecting the lawfulness of the processing based on consent prior to its withdrawal.

/ Internal reports: Furthermore, LALIGA will process in aggregate form the personal data you have provided during registration (in this case, country), the data you have provided during the MILIGA setup process (favourite team ), the data you have provided via your MyAccount profile (only the following data will be processed for this purpose: date of birth, gender, language, country of residence, county, city or postcode, if you have provided them) or social login (where applicable, birthday, gender, page likes and current city), data on your use of the website and other LALIGA Ecosystem assets you use (user ID, device ID (IDFA or, where applicable, IDFV), device model, operating system and telemetry, for example, clicking on specific content or the time you spend on the asset) and, finally, interactions with communications of any kind that you receive (for example, clicking on the content of a communication), for the compilation of relevant metrics and statistics that enable LALIGA to analyse how different user segments use the WEBSITE and the impact of its campaigns, assessing the interest they have generated among those segments based on the analysed data. In particular, LALIGA will carry out aggregated segmentation based on the data mentioned above, including:

Segmentation based on favourite team and country (e.g. 20 users from Spain have selected club X as their favourite team).

In this regard, we inform you that LALIGA uses technical support providers to carry out internal reporting.

The legal basis for the aforementioned purposes is that the processing is necessary to satisfy LALIGA’s legitimate interest pursuant to Article 6(1)(f) of the General Data Protection Regulation, consisting of deriving insights from the information provided and obtained from users that enables it to improve the website and optimise the communication campaigns it carries out based on the interest these generate among different user groups. Prior to this, we would like to inform you that LALIGA has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users. You may request the conclusions of this analysis vialopd@laliga.es .

You have the right to object to the aforementioned purpose at any time in accordance with the procedure described in the section ‘What are your rights when you provide us with your personal data?’.

/ Enquiries to the Accreditation and TV Regulations Enforcement Department: In order to process any enquiries you make to LALIGA’s Accreditation Department via email atacreditaciones@laliga.es , LALIGA will process your personal data (email address and any other identifying or contact details you choose to provide voluntarily) in order to manage and respond to your enquiries.

/ Contact form: If you wish to contact LALIGA via the form provided for this purpose on the Platform, LALIGA will process the personal data you submit via that form (email address, first name, surname, telephone number, media outlet you represent, section or programme, position and country) in order to manage, process and respond to the enquiry you have submitted.

The legal basis for the aforementioned purposes is that the processing is necessary to satisfy LALIGA’s legitimate interest, in accordance with Article 6(1)(f) of the General Data Protection Regulation, which consists of processing your request for information. Prior to this, we would like to inform you that LALIGA has carried out a proportionality assessment between its legitimate interest and the rights and freedoms of its users; you may request the conclusions of this assessment vialopd@laliga.es .

Additional Purposes

The following are the additional purposes for which LALIGA will process your personal data:

/ LALIGA marketing communications: So that LALIGA can send you marketing communications via email or other instant messaging channels (e.g. SMS) regarding its activities (the competitions it organises, campaigns, public viewings, shows or live events), products (apps, web platforms and games developed by LALIGA), services, competitions, offers, prize draws and/or promotions organised by LALIGA itself, or competitions, offers, prize draws and/or promotions carried out by LALIGA regarding products and services promoted jointly by LALIGA and its official sponsors, which you can view here, partners, national federations or national and international television networks. For this purpose, LALIGA will process only your email address and, where applicable, your telephone number.

We also inform you that, in order to send you commercial communications via email or SMS, LALIGA uses a third-party service provider (salesforce.com EMEA Limited) which involves the international transfer of the email address you have provided to us to the United States, a country that guarantees a level of protection equivalent to that of the European Union for personal data transferred from Europe to third-party providers in the United States that adhere to the Data Privacy Framework, of which this provider is a member.

Finally, LALIGA also uses the consultancy and technical support services of other providers for the sending of commercial communications.

The legal basis for processing your data for the aforementioned purpose is the consent you have given us to process your data for the specific purposes selected, in accordance with Article 6(1)(a) of the General Data Protection Regulation. Your personal data will be retained for this purpose until you withdraw your consent.

Creating simple segments: So that LALIGA can send you targeted marketing communications via email or other instant messaging channels regarding LALIGA’s products and services. These communications will be based on the information you have provided via the registration form or through your MyAccount profile (for example, we will send you communications about products that may interest you based on your age, favourite team or the county you live in).

The information used to create segments will be solely that provided by the data subject on any of the platforms within the LALIGA Ecosystem (for example, gender, country, city, age and favourite team or sport), with a limited level of detail regarding the user’s profile and without using information inferred from the data subject or sourced from third parties; in any case, these will be non-exhaustive segments. In this way, commercial communications can be sent based on the simple segments created using the aforementioned information, thereby avoiding the sending of content that is not relevant to you.

In this regard, we inform you that LALIGA uses consultancy and technical support providers to carry out simple user segmentation.

The legal basis for the aforementioned purpose is that the processing is necessary to satisfy LALIGA’s legitimate interest pursuant to Article 6(1)(f) of the General Data Protection Regulation, consisting of making effective use of the personal data provided by the user to achieve greater engagement and return on the communications sent. Prior to this, we would like to inform you that LALIGA has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users; you may request the conclusions of this analysis via lopd@laliga.es .

Under no circumstances will the segmentation carried out by LALIGA have any legal effect or significantly affect you in a similar manner.

/ Comprehensive profiling: If you give us your consent, LALIGA will create a comprehensive profile of you so that it can offer you personalised experiences, information and products by sending you personalised marketing communications via email, SMS or other instant messaging channels (provided you have given your consent for the purpose “LALIGA commercial communications”) or to display banners with personalised advertising on websites, apps or social media regarding LALIGA’s products and services (for example, if we identify that you are a supporter of a specific club, we will offer you personalised incentives, such as a shirt from your favourite team).

In this way, the information mentioned above will be targeted at the segments (groups of users created based on the information obtained from them or your use of the Website or other assets of the LALIGA Ecosystem) that we can develop based on the following data sources:

· The information you provide during registration or via your MyAccount profile (in this case, favourite team, country or language);

· Social login (in this case, first name and surname, email address, date of birth, gender, city and county of residence, interest categories, as well as inferred metrics – engagement, social, promotion and fan value – obtained from posts on your Facebook profile and page likes);

· Interactions with communications or notifications you receive (for example, clicking on the content of a communication);

· Data inferred as a result of your use and activity on the Platform (device ID, registered user ID, device model, operating system and telemetry, for example, clicking on specific content or the time you spend on the site).

In addition, LALIGA will generate these segments taking into account the following profiling techniques:

· Measurement of individual campaign performance: LALIGA will use information relating to open rates, average click-through rates, email bounce rates or unsubscription rates to measure campaign performance at an individual level, and, as a result, carry out segmentation based on the information inferred about you and the other information provided, with the aim of targeting you again with specific campaigns that are more relevant to you or including you only in those in which you have shown the most interest (for example, if you are a very active user in certain communications, we may send you similar communications more frequently). To this end, we inform you that, through the data management tools provided by the social media platforms on which LALIGA has an account, user audiences will be created which may be shared, within each social media platform and in encrypted form, with third parties outside LALIGA, so that they may create their own advertising campaigns within the social media platform itself.

· Campaign optimisation: we will exclude you from advertising campaigns relating to prize draws in which you have participated, apps you have registered for or downloaded, products you have purchased, or services you have previously acquired (for example, we will avoid offering you a LALIGA app if we know you have previously downloaded it). To do this, we will cross-reference your information with that obtained from other LALIGA platforms that you use.

· Users with similar tastes and preferences: thanks to the profile LALIGA creates of you, we can send you personalised content taking into account other profiles similar to yours (for example, if we identify that other users similar to you like eSports, we will show you advertising related to eSports).

· User profiling: LALIGA will derive an unknown variable from known variables provided or inferred from you so that it can carry out an analysis of its users with the aim of identifying those most likely to use or subscribe to LALIGA’s products, and, where appropriate, offer you LALIGA’s products and services.

· Retargeting: if you have interacted with LALIGA without registering or without using or downloading the relevant LALIGA content, LALIGA may use your device’s identifying data and/or your email address to show you adverts on websites other than LALIGA’s, with the aim of achieving the interaction LALIGA seeks.

In this regard, we inform you that LALIGA uses consultancy and technical support providers to carry out complex profiling.

Under no circumstances will the profiling carried out by LALIGA produce legal effects or significantly affect you in a similar manner.

The legal basis for processing your data for the aforementioned purpose is the consent you have given us to process your data for the specific purposes selected in accordance with the provisions of Article 6(1)(a) of the General Data Protection Regulation. Your personal data will be retained for this purpose until you withdraw the consent you have given.

How long will we retain your personal data?

The personal data we process will be retained for as long as the purposes for which it was collected remain valid and/or you do not withdraw the consent you have given, or you do not exercise your rights to erasure, objection or restriction of processing.

In this regard, once the aforementioned period has expired, LALIGA will keep your personal data duly blocked for the sole purpose of meeting any liabilities of any kind that may arise:

/ Access to the Platform and registration on MILIGA: the data provided for the provision of the services offered by the laliga.com environment and the MILIGA platform will be retained for as long as you do not request the erasure of your data, this purpose persists and, once it has ended, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Website configuration process: the data provided for the configuration of MILIGA will be retained until you request the deletion of your data, for as long as this purpose persists and, once it has ceased, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Participation in prize draws and polls via MILIGA: the data provided for participation in prize draws and polls via MILIGA will be retained until you request the deletion of your data, for as long as this purpose persists and, once this purpose has ceased, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Participation in surveys: the data provided for participation in surveys will be retained for as long as you do not request the erasure of your data, this purpose persists and, once it has ceased, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ MILIGA rewards scheme: the data provided for the management of the MILIGA rewards scheme will be retained until you request the deletion of your data, for as long as this purpose persists and, once this purpose has ceased, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Management of registration and attendance at events organised by LALIGA: the data provided for the management of registration and participation in the event will be retained until you withdraw the consent given, the purpose for which it was collected continues to exist, or you request its erasure or the restriction of its processing; and, once that purpose has ended, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Sending the LALIGA periodic newsletter: the data provided for sending the LALIGA periodic newsletter and handling enquiries will be retained until you request the erasure of your data, this purpose persists, you do not withdraw the consent granted or restrict the processing and, once this purpose has been fulfilled, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Internal reports: the data provided for internal reports will be retained until you request the erasure of your data, this purpose continues to apply, you do not object to the processing and, once this purpose has been fulfilled, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Enquiries to the Accreditation and TV Regulations Enforcement Department: the data provided to manage your enquiries submitted to the LALIGA Accreditation Department will be retained for as long as you do not request the erasure of your data, this purpose persists, you do not object to the processing and, once this purpose has been fulfilled, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Contact form: the data provided to process your enquiries submitted via the LALIGA contact form will be retained for as long as you do not request the erasure of your data, the purpose for which the data is processed remains valid, you do not object to the processing and, once this purpose has been fulfilled, data will be kept blocked for the duration of the limitation period for any legal actions that may arise from the processing of your data.

/ LALIGA marketing communications: the data provided for marketing communications sent by LALIGA will be retained for as long as you do not request the erasure of your data, this purpose remains valid, you do not withdraw the consent given or restrict the processing, and, once this purpose has been fulfilled, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Creation of simple segmentations: the data provided for the creation of simple segmentations will be retained for as long as you do not request the erasure of your data, this purpose persists, you do not object to the processing and, once this purpose has been fulfilled, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Creation of comprehensive profiles: the data provided for the creation of comprehensive profiles will be retained for as long as you do not request the erasure of your data, this purpose persists, you do not withdraw the consent given or restrict the processing and, once this purpose has been fulfilled, data will be kept blocked for the limitation period of any legal actions that may arise from the processing of your data.

/ Rights management: the personal data processed by LALIGA to handle your data subject rights requests, as described in the section “What are your rights when you provide us with your personal data?” of this Policy, will be retained for as long as this purpose persists and, once fulfilled, will be kept blocked for a period of 3 years.

Such personal data will be deleted once these time limits have expired.

To whom will your personal data be disclosed?

Your personal data may be disclosed to other individuals or companies for their own purposes provided that you give your consent by ticking the relevant box or in connection with the service you request. In this regard, we inform you that your personal data will be disclosed to third parties associated with LALIGA depending on the purpose of the processing:

/ LALIGA will share your personal data obtained from the assets belonging to the LALIGA Ecosystem of which you are a user (email address and, where applicable, first name, surname, telephone number and country) with your Favourite Team and third-party entities so that they may send you commercial communications regarding their activities, products, services, competitions, offers and/or promotions.

In this regard, we inform you that your personal data will only be disclosed to third parties and to football teams belonging to the first and second divisions of the National Professional Football League that have entered into a collaboration agreement with LALIGA. Via the following link, you can access a list of the third parties and football teams that currently have an agreement with LALIGA and which, should you authorise us, may send you commercial communications.

We also inform you that the disclosure of your data to third parties may, in some cases, involve the international transfer of your data to countries which either provide an adequate level of protection, comparable to that of the European Union, or do not guarantee such protection. In the latter case, LALIGA has taken the necessary measures to ensure that your data is processed with a level of protection equivalent to that of the European Union. For this reason, LALIGA has signed standard contractual clauses adopted by the European Commission with these third parties in accordance with Article 46(2)(c) of the General Data Protection Regulation, including additional safeguards and obligations, following an impact assessment of the transfer, aimed at ensuring the greatest possible security and transparency. The content of the standard contractual clauses is available upon request vialopd@laliga.es .

The legal basis for this disclosure of personal data is the consent you have given us in accordance with Article 6(1)(a) of the General Data Protection Regulation.

Furthermore, LALIGA may provide personal data and any other user information when required to do so by public authorities in the exercise of their legitimately assigned functions and in accordance with the applicable provisions.

Similarly, LALIGA uses certain service providers who will access personal data and information as data processors or sub-processors to provide LALIGA with the various services mentioned in the section ‘For what purpose do we process your personal data?’ of this Policy.

These service providers sign a contract obliging them to use your personal information solely for the provision of the services set out in this Policy.

What are your rights when you provide us with your personal data?

We inform you that, at any time, you may exercise your rights of access, rectification, objection, erasure, data portability, not to be subject to automated decision-making, restriction of processing, and to withdraw your consent at any time from LALIGA.

What are your rights as a user?

/ Right of access: you have the right to obtain confirmation as to whether LALIGA processes your personal data, as well as to access such data.

/ Right to rectification: you may request the modification or rectification of inaccurate personal data.

/ Right to erasure: you may request the erasure of your personal data.

/ Right to restriction of processing: In certain circumstances, you may request the restriction of the processing of your data, in which case it will only be retained for the purpose of exercising or defending legal claims.

/ Right to object: you may object to the processing of your data for the purpose you specify. LALIGA will cease processing the data, except for compelling legitimate grounds, or the exercise or defence of potential claims.

/ Right not to be subject to automated individual decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

/ Right to data portability: where the WEBSITE permits, you may exercise the right to receive your data in a structured, commonly used and machine-readable format, and to transmit it to another data controller.

How do I exercise my rights?

By sending an email toderechos@laliga.es . Exercising your rights is completely free of charge.

If, when accessing and, where applicable, registering with MILIGA, you have given your consent for the purposes for which it was requested, you may withdraw it at any time by following the procedure set out in each of the marketing communications you receive, via the “Consents” section within MyAccount or by sending an email to:derechos@laliga.es .

Furthermore, via the MyAccount section, you may view and amend your personal data at any time and change your preferences.

Objecting to a specific purpose or withdrawing your consent will not affect your use of the WEBSITE or the lawfulness of the processing prior to your objection or withdrawal of consent.

Furthermore, if you have registered with MILIGA via a social network or similar service, you may exercise your right to have your data deleted by deactivating the “LALIGA Ecosistema” service within the services linked to your social media profile. For further information, please consult the terms and conditions of each service:

Google: https://myaccount.google.com/permissions
Facebook: https://facebook.com/help/21834511485028

Finally, if you feel that your rights have not been adequately addressed or that your data has not been processed in accordance with applicable regulations, you may contact LALIGA’s Data Protection Officer at the email addressdpo@laliga.es or lodge a complaint with the Spanish Data Protection Agency via its website www.aepd.es.

What is MyAccount?

MyAccount is a section within MILIGA where you can view all the personal information you have provided to LALIGA through any of its platforms.

You can also complete your user profile within LALIGA’s digital ecosystem with any details you deem relevant, amend any data that is incorrect, inaccurate or out of date, and delete such data; this information will be updated across all LALIGA platforms where you are registered.

Finally, you can also modify your preferences, changing the consents granted to LALIGA at any time and in a straightforward manner.

You can access MyAccount via this link.

Are there any restrictions?

LALIGA informs you that to access laliga.com and register with MILIGA, you must be at least 16 years old.

This English version has been generated using artificial intelligence for convenience purposes only. In the event of any discrepancy or inconsistency between this translation and the original Spanish version, the Spanish version shall prevail.

ACTIVE PROSECUTION OF PIRACY

In order to combat various forms of audiovisual piracy relating to LALIGA’s audiovisual content, LALIGA has tools that enable the prevention and active prosecution of such conduct. The use of these tools may involve the processing of personal data of alleged infringers of intellectual property rights over which LALIGA holds the exploitation rights.

Furthermore, LALIGA may, in certain circumstances, take legal action against those individuals suspected of having engaged in infringing conduct.

Who is the data controller?

Personal data will be processed by the National Professional Football League (hereinafter, “LALIGA”), with Tax Identification Number (NIF): G-78069762 and registered office at Calle Torrelaguna 60, 28043, Madrid.

Contact details for LALIGA’s Data Protection Officer: dpo@laliga.es

Where do we obtain personal data?

LALIGA will process the data obtained through the use of the various tools at its disposal:

/ Usernames in various applications,

/ Pseudonymised data (unique identifiers associated with each username),

/ IP addresses (including, in certain cases, home IP addresses),

/ Email address, first name and surname, telephone number and advertising identifiers relating to legal entities or natural persons acting in their capacity as sole traders.

As well as other data that may be sent by various internet service providers to LALIGA relating to legal entities or natural persons acting in their capacity as sole traders (IP addresses, first name and surname, postal address and identification documents such as a Tax Identification Number (NIF) or Foreigner Identification Number (NIE)).

For what purpose do we process personal data?

/ Active prosecution of audiovisual piracy: We inform you that personal data (in this case, data collected by the various applications available to LALIGA) will be processed by LALIGA for the purpose of conducting investigations to prosecute acts of audiovisual piracy involving LALIGA content.

/ Taking legal action against alleged infringers: We inform you that personal data (in this case, data provided by various internet service providers) will be processed by LALIGA for the purpose of taking the appropriate legal action against those infringers for whom there is reasonable evidence that they are making available or disseminating, either directly or indirectly, content, works or services subject to intellectual property rights without complying with the requirements established by law and through acts that cannot be considered to have been carried out by end consumers acting in good faith and without the intention of obtaining economic and/or commercial benefits.

In this regard, we inform you that LALIGA uses technical service providers, with whom LALIGA has entered into a data processing agreement, to carry out the purposes described.

The legal basis for the aforementioned purposes is that the processing is necessary to satisfy LALIGA’s legitimate interest pursuant to Article 6(1)(f) of the General Data Protection Regulation, consisting of protecting LALIGA’s audiovisual content to prevent its commercialisation from being affected by the unlawful practice of piracy.

Prior to this, we would like to inform you that LALIGA has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users. You may request the conclusions of this analysis vialopd@laliga.es .

With regard to these purposes, the data subject does not have the right to object to the processing of personal data, all of this pursuant to Article 21(1) of the General Data Protection Regulation, given that, on the one hand, compelling legitimate grounds for the processing of such data can be demonstrated which override the interests, rights and freedoms of the data subject and, on the other hand, the processing of the data is necessary for the establishment and exercise of legal claims which, where applicable, may be relevant.

How long will we retain personal data?

The personal data we process will be retained for as long as the purposes for which it was collected remain valid or until the rights to erasure, objection or restriction of processing are exercised.

In this regard, once the aforementioned period has expired, LALIGA will keep the personal data duly blocked for the sole purpose of meeting any liabilities of any kind that may arise:

/ Active prosecution of audiovisual piracy: data used for the active prosecution of audiovisual piracy will be retained for as long as this purpose persists, and once this purpose has been fulfilled, for the limitation period of any legal actions that may arise from it.

/ Bringing legal proceedings against alleged infringers: data received from operators will be retained for a maximum of 30 calendar days. If it is decided not to bring the relevant legal proceedings, the data will be destroyed immediately. If, on the other hand, it is decided to bring legal proceedings, the data will be retained for the duration of the proceedings and, once these have concluded, for the limitation period of the relevant legal proceedings.

Personal data will be permanently deleted once these time limits have expired.

To whom will personal data be disclosed?

LALIGA may provide personal data and any other user information when requested to do so by public authorities in the exercise of their legitimately assigned functions and in accordance with the applicable provisions.

Similarly, LALIGA uses certain subcontractors who will access personal data and information as data processors or sub-processors to provide LALIGA with a necessary service. As such, LALIGA uses technical and business consultancy providers to fulfil the purposes set out in the section ‘For what purpose do we process personal data?’.

These service providers sign a contract obliging them to use your personal information solely for the provision of the services set out in this policy.

What rights are recognised under data protection legislation?

Please note that you may exercise your rights of access, rectification, erasure and restriction of processing at any time by contacting LALIGA.

What do your rights as a user consist of?

/ Right of access: you have the right to obtain confirmation as to whether LALIGA processes your personal data, as well as to access such data.

/ Right to rectification: you may request the modification or rectification of inaccurate personal data.

/ Right to erasure: you may request the erasure of your personal data.

/ Right to object: You may object to the processing of your data for the purpose you specify. LALIGA will cease processing your data, except for compelling legitimate grounds, or for the exercise or defence of potential claims.

/ Right to data portability: wherever possible, you may exercise the right to receive your data in a structured, commonly used and machine-readable format, and to transmit it to another data controller.

How do I exercise my rights?

By sending an email toderechos@laliga.es . Exercising these rights is completely free of charge.

Finally, if you consider that you have not received a satisfactory response regarding the exercise of your rights or that the processing of your data has not been carried out in accordance with the applicable regulations, you may contact LALIGA’s Data Protection Officer at the email addressdpo@laliga.es or lodge a complaint with the Spanish Data Protection Agency via its website www.aepd.es.