Privacy Policy

Last updated: January 7, 2026

1. INTRODUCTION AND DATA CONTROLLER

In GLOBAL SOCCER PROGRAM SL (hereinafter, "the Controller"), with Tax Identification Number B19499763 and registered office at Calle Hernani 262 B, 28020, Madrid, we assume a firm commitment to the privacy and protection of the personal data of our users, partners and, especially, of minors who participate in our programs of sports and recreational education.

This Privacy Policy explains how we collect, use, protect, and retain personal data in compliance with applicable regulations, including:

  • The General Data Protection Regulation (GDPR) (EU) 2016/679.

  • The Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

  • The Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

For any matter related to data protection, you can contact us at: info@globalsoccerprogram.com. info@globalsoccerprogram.com.

2. FUNDAMENTAL PRINCIPLES OF PROCESSING

We are committed to processing your personal data in accordance with the principles established by the GDPR and the LOPDGDD:

  • Lawfulness, fairness, and transparencyWe will only process data when there is a legal basis for it and we will inform you clearly.

  • Purpose limitationData will be collected only for specific, explicit, and legitimate purposes, detailed in this policy.

  • Data minimizationWe will only collect data strictly necessary for the stated purposes.

  • Storage limitation: We will retain data only for as long as necessary.We will keep your data up to date.

  • Integrity and confidentiality:We will apply technical and organizational security measures to protect them.

  • Data minimization:We will only collect data strictly necessary for the stated purposes.

  • Accountability:We are committed to being able to demonstrate compliance with these principles.

3. SPECIFIC INFORMATION FOR THE PROCESSING OF MINORS' DATA

Given our activity, we grant a reinforced protection to the processing of data of minors, considered a particularly vulnerable group.

  • Consent:The processing of personal data of children under 14 years of age will only be lawful if there is the express and verifiable consent of the father, mother or legal guardianFrom the age of 14, the minor can give their own consent.

  • Special TreatmentsWe are especially careful with:

    • Use of image: The publication of photographs or videos of minors on our website, social networks or promotional material It always requires specific, explicit, and separate consentFor children under 14, consent must be given by both parents or legal guardians, unless an exceptional situation is reliably proven (e.g., sole custody). For athletes between 14 and 17, obtaining consent from both parents is recommended and in many cases mandatory.

    • Health dataThe collection of medical information relevant to sports practice (allergies, injuries, etc.) will be limited to what is strictly necessary, will be treated with maximum confidentiality and will be protected by the consent of the legal guardians or by the need to protect the vital interests of the minor.

4. PURPOSES, LEGAL BASIS, AND CATEGORIES OF DATA PROCESSED

We inform you in detail and transparently about the different processing activities we carry out:

 
 
Purpose of ProcessingLegal Basis that Legitimizes itCategories of Data Processed (examples)
Management of registrations, additions/deletions and participation in programs, camps and activities.Performance of a contract (art. 6.1.b GDPR) and, for minors, consent of legal guardians.Of the athlete: Name, surname, date of birth, contact details (email, telephone), relevant basic medical data (allergies, conditions). De padres/tutores: Name, surname, ID number, email, telephone, address.
Administrative and operational communications (information about schedules, changes, events, billing).Performance of a contract (art. 6.1.b GDPR) and legitimate interest of the Controller (art. 6.1.f GDPR).Parent/guardian contact information (email, phone).
Sending commercial communications (newsletters, offers, news) about our services.Express consent (art. 6.1.a RGPD y LSSI-CE).Email and name of parents/guardians.
Image publication (photos, videos) on the web, social media and promotional material.Express, specific and informed consent (art. 6.1.a RGPD).Image and voice of the athlete.
Safety and healthcare management during the activities.Vital interests of the data subject (art. 6.1.d GDPR) and compliance with legal obligations regarding the protection of minors.Relevant health information, emergency contact.
Improving user experience and statistical analysis through cookies (see section 10).Consent: (for non-technical cookies) or legitimate interest (for essential technical cookies).Browsing data, IP address (considered personal data).

5. RECIPIENTS OF THE DATA AND INTERNATIONAL TRANSFERS

  • Disclosures to third parties:As a general rule, We do not share personal data with third parties, except where legally required or necessary for the provision of the service (e.g., mandatory sports medical insurance, in which case you will be informed beforehand).

  • Data Controllers:We may use service providers (online management platforms, hosting services, email marketing tools) who act as "data processors." We have contracts with all of them that guarantee compliance with the GDPR and the confidentiality of the data.

  • International TransfersInternational Transfers: We do not transfer personal data to countries outside the European Economic Area (EEA) that do not offer an adequate level of protection, unless we have specific guarantees (European Commission Adequacy Decisions, Standard Contractual Clauses, etc.).

6. DATA RETENTION PERIOD

We will retain personal data for the time strictly necessary to fulfill the purpose for which they were collectedand subsequently during the applicable statutory limitation periods for liability. We apply the following criteria:

  • Administrative and contractual management data: During the relationship and the subsequent years required by commercial and tax law.

  • Image data: Until the revocation of the consent given or, failing that, for a period of one sports season, renewable annually with new consent.

  • Marketing data: As long as you keep your consent active. You can withdraw it at any time.

  • Once these periods have ended, the data will be blocked or securely deleted.

7. ARSULIPO RIGHTS: HOW TO EXERCISE THEM

As the owner of your personal data (or as the legal representative of a minor), you have the right to exercise the following rights, known as ARSULIPO rights:

  • Access:To know what data we process and obtain a copy.

  • RectificaciónTo correct inaccurate data.

  • Erasure ("Right to be Forgotten"):To request the deletion of data.

  • Restriction of Processing:To restrict the use of your data under certain circumstances.

  • Portability:To receive your data in a structured format to transmit it to another controller.

  • Objection:To object to certain processing, especially direct marketing.

To exercise these rightsyou must send a written request, accompanied by a copy of your ID card or other identification document, to our email address: info@globalsoccerprogram.comIn the case of rights regarding data of minors, it must be done by their father, mother or legal guardian.

We will respond to your request. within a maximum period of one month from the date of receipt. This period may be extended to two months in particularly complex cases.

If you are not satisfied with our response or believe that we have violated your rights, you have right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. SECURITY MEASURES

We have implemented necessary technical and organizational measures To ensure the security of your data and prevent its loss, alteration, unauthorized access, or unlawful processing, we implement measures including, but not limited to, communication encryption (SSL), access control, backups, and specific training for our staff. We maintain a Record of Processing Activities in accordance with Article 30 of the GDPR.

In the unlikely event that a security breach that may pose a high risk to your rights, we will notify you without undue delay.

9. COOKIE POLICY

Our website uses its own and third-party cookies for the following purposes:

  • Technical:Essential for the basic functioning of the site.

  • Analytical:To analyze anonymous user behavior and improve the experience.

  • Advertising:Advertising: To manage campaigns and advertising content.

You can configure, manage and revoke your consent for the use of non-technical cookies at any time through our Banner o Panel de Configuración de CookiesYou can also configure your browser to block them. Please note that blocking certain cookies may affect the functionality of the site.

10. MODIFICATIONS TO THE PRIVACY POLICY

We reserve the right to modify this policy to adapt it to legislative or jurisprudential changes or changes in our services. Any changes will be published on this webpage with the new "Last updated" date. We recommend you review it periodically.