REAL MADRID ESTADIO, S.L.U. (hereinafter also referred to as "REAL MADRID ESTADIO" or "the Stadium"), provides you with this information concerning the processing of your personal data through the Santiago Bernabeu Stadium website.
Who is the Data Controller of your data?
Identity: Real Madrid Estadio, S.L.U.
VAT NO: B-16827172
Postal address: Av. Concha Espina, número 1, 28036, Madrid
Contact Data Protection Office: protecciondedatos@corp.realmadrid.com
WHAT DO WE USE YOUR DATA FOR?
Below, we provide detailed information about the processing that we carry out with the different people with whom we deal in order to carry out various activities related to the Santiago Bernabéu Stadium, in particular, we provide information regarding the purposes for which we process the data, the legal bases that allow us to process the data, the time we keep the data and the third parties with whom, if applicable, we share such data:
1.- WEB USERS:
a) Purposes and legitimacy of the processing: Your data will be processed for the following purposes:
§ Installation of cookies in your browser to analyse visits to our website and to allow certain user preferences, with your prior consent or request, as well as for technical purposes necessary for the correct operation of the website based on our legitimate interest in doing so.
For additional information on the use of cookies, you can visit our Cookie Policy.
§ Registration and processing of queries or requests received through the forms and/or e-mails published on the website based on our legitimate interest in duly attending to users who contact us through the aforementioned means on our website.
b) Origin and conservation period of your data: The data have been provided to us by you or your legal representative.
The data obtained, where applicable, through cookies, are retained for the period of time that, for each cookie or type of cookie, we indicate in our Cookies Policy.
With regard to the data you provide us with when contacting us via the form/e-mail, they will be kept until the communication received is dealt with and will subsequently be duly blocked for the legally stipulated period for the defence and lodging of possible claims.
c) Types of data: In the case of cookies, the data used are identification data (visitor ID) data relating to the device from which you access our website (such as IP and browser used) and browsing habits and preferences.
With regard to the registration and processing of queries or requests received through the forms and/or e-mails published on the website, the types of data we use are identification data, contact data and any other data that you voluntarily provide us with through the communication you send us.
d) Communication of your data: We do not share your data with third parties without your prior consent, with the exception of the cookie providers listed in our Cookie Policy.
2.- APPLICANTS FOR RENTAL OF SPACE
In the event that you are the legal representative or contact person of any of the entities or persons with which Real Madrid Estadio SLU is related to the management and/or rental of spaces, we will process your personal data as described below:
a) Purposes and legitimacy of the processing: Your data will be processed for the management of the commercial/professional relationship related to the rental/use of stadium spaces of the persons requesting the rental of the spaces and/or their legal representatives, by virtue of the application of pre-contractual measures, the execution of a contract and the legitimate interest we have for it.
b) Origin and storage period: The data have been provided to us by you or your legal representative. In general, we will keep your data for as long as the contractual relationship is maintained and subsequently, duly blocked, for the legal period foreseen for the possible defence or filing of claims, in which case they will be kept until the termination or final archiving of the corresponding inspection, procedure or claim.
c) Types of data: The data we process are identification data, contact data, personal characteristics data (being of legal age), corporate data (corporate contact data), work occupation data (such as place of work and your position), and activity and business data.
d) Communication of your data: We do not share your data with third parties without your prior consent, with the exception of REAL MADRID CLUB DE FÚTBOL for the management of the rental of requested spaces and service providers, such as technological services, who only have access to data to provide their services and who are requested to apply the same level of data protection as that applied by REAL MADRID STADIUM.
3.- USERS OF OUR WHISTLEBLOWING CHANNEL
In case you use our reporting channel in a non-anonymous way:
a) Purpose and legitimacy of the processing: we will process your personal data for the processing of your communication, the management of the Internal Information System of the Stadium and, if necessary, to carry out the appropriate investigation.
The processing is carried out because it is necessary to comply with legal obligations imposed by Law 02/2023, regulating the protection of persons who report regulatory infringements and the fight against corruption. Likewise, the processing is carried out by virtue of the existing public interest in the prevention and investigation of criminal conduct and our legitimate interest in dealing with all communications received through this channel.
b) Origin and conservation period: The data have been provided to us by you. Your data will be stored in the information system only for as long as is necessary for the investigation of the reported facts.
In the event that the investigation leads to legal action, administrative or disciplinary proceedings, the data shall be kept for the applicable legal period. If no investigation proceedings have been initiated, the data shall be destroyed three months after receipt of the communication and may be kept in an anonymised form, without the obligation to block provided for in article 32 of Organic Law 3/2018, of 5 December, being applicable.
If it is proven that the information provided or part of it is not truthful, we will immediately delete it as soon as we become aware of this circumstance, unless this lack of truthfulness may constitute a criminal offence, in which case the information will be kept for the necessary time during the legal proceedings.
c) Types of data: If you use the reporting channel in a non-anonymous way, the types of data we use are identification and contact data and data that you voluntarily provide in your communication.
d) Communication of your data: We inform you that your data will not be disclosed, under any circumstances, to the persons to whom the communicated facts refer or to other third parties, or to any third party without your prior consent, with the exception of
· the judicial authority, the Public Prosecutor's Office or the competent administrative authority if necessary in the context of a criminal, disciplinary or disciplinary investigation.
· REAL MADRID CLUB DE FÚTBOL for the management of the communication received.
· Providers of storage and communications technology services and legal and consultancy services. These providers only have access to data for these purposes and are requested to apply the same level of data protection as that applied by REAL MADRID ESTADIO.
IS IT COMPULSORY FOR YOU TO PROVIDE US WITH YOUR PERSONAL DATA?
WEB users: In the case of cookies, you will be able to select, at any time, those cookies that you consent to be installed on your device. Only those cookies that are necessary to guarantee the correct functioning of the website will be obligatory.
In the case of the registration and processing of queries or requests received through the forms and/or e-mails published on the website, we will indicate, in each case, the obligatory fields for dealing with your communication.
Space rental applicants: in the corresponding application form, we will indicate the required fields in order to process your application and provide you with the requested service.
Whistleblowing channel: if you use our whistleblowing channel in a non-anonymous way, we will indicate the mandatory fields in the corresponding request form, to submit your request.
ABOUT OUR SUPPLIERS:
When choosing providers whose services involve the processing of personal data under our control, Real Madrid ESTADIO applies strict criteria to choose only those providers that offer an adequate level of guarantees for this purpose.
We also contractually require them to adopt the necessary technical and organisational measures to guarantee the protection of the rights and freedoms of the persons whose information is processed.
Service providers may only use personal data for what is strictly necessary for the service they provide to us and for the duration of that service.
YOUR RIGHTS AND HOW TO EXERCISE THEM:
You have the right to obtain information about the processing of your data, to access them, to have them rectified or, if necessary, erased.
In certain circumstances, you also have the right to restrict the processing of your data, in which case we will only keep it for the purpose of asserting or defending claims, to object to the processing of your data and to its portability by transferring it to you or directly to another company of your choice.
Revocation of consent: In relation to the processing of your data that we carry out on the basis of your consent, we inform you that you have the right to withdraw said consent at any time, although the revocation will not produce retroactive effects and will not affect the processing that has been carried out up to that time.
Right of objection with respect to processing whose basis of legitimation is the legitimate interest of the REAL MADRID STADIUM or a public interest: the exercise of the right of objection may be denied if, in view of the request made, compelling legitimate grounds for processing the data prevail and/or if the data are necessary for the formulation, exercise or defence of claims.
To exercise any of these rights, you may contact the Data Protection Office at the postal address Av. Concha Espina, 1, Madrid or by e-mail at protecciondedatos@corp.realmadrid.com.
We also inform you that, if you consider that any type of violation has occurred in relation to the processing of your personal data, you may file a complaint with the competent supervisory authority (in Spain, the Spanish Data Protection Agency www.aepd.es).
HOW DO WE ENSURE THE SECURITY OF YOUR DATA?
Real Madrid ESTADIO has adopted all the technical and organisational measures and procedures appropriate to the level of risk assessed, has established all the technical means at its disposal to prevent the loss, misuse, alteration, unauthorised access and theft of the data you provide us with and guarantees that its staff is duly trained and informed to protect the personal information provided.
DATA OF MINORS
This website is not directed at minors.
Real Madrid ESTADIO will not collect or process personal data from children under the age of fourteen (14). If, by mistake or without the consent of a parent or guardian, we obtain personal data from a child under the age of 14, we will delete such information as soon as possible.
POINT OF CONTACT:
For further information regarding the processing of your data, please contact our Data Protection Officer at Avenida de las Fuerzas Armadas, 402, 28055, Madrid and at the e-mail address protecciondedatos@corp.realmadrid.com
Current version dated 26 June 2024.