At Athletic Club we are committed to the protection of your privacy and the proper use of the personal data we process and that you submit to us, both online (through this website and, as appropriate, through any one of its subdomains, microsites and/or mobile apps), and offline.
Please read this policy carefully and ensure you understand it and agree with it before providing us with your personal data. If you do not agree with it, please do not use this website or its services and do not submit your data to us. If you access this website, use any of its services, or submit your data to us, whether online or offline, we shall understand this indicates you are clearly agreeing (whenever so necessary) to your data being used for the purposes as specified forthwith.
Party responsible: Athletic Club
Postal address: Ambas en Alameda de Mazarredo 23, 48009 Bilbao (Spain)
Phone number: +34 94 424 08 77
Email: email@example.com or firstname.lastname@example.org (solely for users of the museum and in relation to the processing of data in it).
If you are a member or follower, you have provided them, either online or offline, when registering to enable us to keep in contact with you.
If you have not submitted your data through this website, we gather information, for example, when you access the website, when you register as a user, complete any form requesting personal data, when you download our mobile app, when you launch a session in our services through third-party media such as Facebook or Google, when you buy something from our shop or purchase tickets, or when you communicate with us directly via email.
By providing your personal data you are confirming that you are empowered to do so and that the information is correct, true, accurate and updated, that it is not confidential, that it is not in breach of any contractual constraints or third-party rights, and you undertake not to impersonate any other users by using their registration data for the website’s different services and/or content.
You are responsible for ensuring your data are correct and updated, with Athletic Club declining all responsibility in the event you should fail to do so.
The personal data processed by Athletic Club and the Athletic Foundation may be provided by third parties, such as, for example, affiliated clubs or entities or organisations with which we have reached agreements to undertake social, cultural and sports projects. In such cases, the categories of data we may process are those involving identification, personal characteristics, and even those social circumstances that are especially protected.
Regarding other people’s data, you should respect their privacy by taking special care when posting their personal data. If you provide data on third parties, you are responsible for obtaining their prior and express consent for using them and disclosing them to us, and you are responsible for informing them that their data have been included in our files.
Any disclosure of the data of third parties without their consent may be in breach not only of legislation on data protection but also on said third parties’ right to honour, privacy and personality.
The data you submit to us, as well as any other generated during the relationship we maintain with you, may be processed for different purposes, such as the following:
a) If you are one or more of the following: a Club member or follower, a member of a supporters’ club, a Foundation member, follower or collaborator, and/or a participant attending or taking part in any one of our activities, events or projects of a sports, social or cultural nature, we use your data for:
b) If you are simply a user of our website (and, as appropriate, any one of its subdomains, microsites and/or mobile apps) we use your data to manage the online purchase of tickers (whether for matches, events, the museum …), any requests made or services arranged through our website or the Club’s official app, and the relationship, even contractual, as appropriate, arising from them, and whenever necessary, managing your registration and/or participation in the online activities or events in which you take part.
The provision of certain registration data (or their use when already registered as a member or follower and ticking the corresponding option on the registration form), or your Facebook profile data when you use the Facebook Connect option for registering, will be mandatory in some cases; for example, when accessing certain services or content, such as online purchases, online follower, contact, VIP area, accessing the display or download of audiovisual content … as these data must be processed for the purposes described above in this section. If this information is not provided, we cannot provide the services requested.
We keep the personal data you provide until you ask them to be removed; and we may still keep them, although their processing in this case will solely be to comply with legal obligations and/or for lodging or refuting claims.
In some cases (e.g., members, and purchasers of tickets or items from our online shop), the legal basis that entitles us to process your data is the relationship arising from the contract existing between the parties; in others, it will be your consent; for example, if you have submitted a request through our website, or if you are simply a user of the same, or a participant in the activities and/or events arising from any social, cultural or sports projects we undertake directly or in partnership with other entities and organisations. You provide this consent in an unequivocal manner when you provide your data online, through our website, or offline, understanding this submission to constitute clear confirmation of such permission. You may withdraw this permission at any time by sending us an email accordingly to email@example.com or to firstname.lastname@example.org (solely for users of the museum and in relation to the processing of data in it) , although this withdrawal does not have an effect on the processing of your data for all the other purposes described.
In other cases, the reason may be a legal requirement; for example, in the case of regulations on the prevention of violence at sporting events, and in other cases, given the pertinent and appropriate relationship you maintain with us as a member, follower, collaborator, user of our website, participant in the activities and/or events arising from any social, cultural or sports projects we undertake…, we have a legitimate interest in processing your data for their maintenance and management.
These usages are compatible with the initial reasons for gathering your data (managing our contact and communication with you and upholding the relationship between us) although, in all cases, the submission of your data for the above purposes, derived from our legitimate interest, is always voluntary, and your interests, rights and freedoms shall always prevail over our legitimate interest, so if you ask us to delete these data and stop using them for these purposes by sending an email stating this to email@example.com or to firstname.lastname@example.org (solely for users of the museum and in relation to the processing of data in it) we shall do so, keeping them blocked to be used solely for the formulation, lodging or refutation of claims. This deletion does not have an effect on the processing of your data for all the other purposes described.
If you have provided sensitive data subject to special protection, the justification for using them is your express consent. You provide this consent in an unequivocal manner when you submit your data, understanding this submission to be a clear confirmation of this consent. The provision of the data requested is mandatory, as they are vital for responding to your request; if you do not provide them, we cannot answer you. You may withdraw this permission at any time by sending us an email accordingly to email@example.com, although this withdrawal does not have an effect on the processing of your data for all the other purposes described.
You are hereby informed that the data you provide may be disclosed to third parties for fulfilling those purposes directly related to the legitimate roles of assignor and assignee, such as the following:
Right of access: You may ask us to tell you what personal data we are processing, and even for a copy of the same.
Right of correction: You may ask us to correct any inaccurate data or to complete any that are incomplete, even through an additional submission.
Right of deletion (right to be forgotten): You may ask us to delete your personal data in the following cases: when they are no longer required for the purposes for which they were gathered, when you withdraw your consent, when illegitimate use has been made of the same, or in compliance with a legal obligation.
Right to restricted processing: You may ask for your data to be subject to restricted processing, in which case we will hold them solely for the purpose of defending against claims.
Right to data portability: You may ask us to return (to you or to a third party you specify) your personal data in a format that is structured, of common usage, and involves mechanical reading.
Right of contestation: You may contest the processing of your data if this is informed by the file owner’s legitimate interest or when it is for advertising purposes.
You may exercise all these rights by submitting a written and signed request, in all cases attaching a copy of your ID or passport, to the postal address or email specified in section 2 herein. If the event of any change to your data please notify this to the same address, with the company declining any responsibility should you fail to do so.
Once we have received any one of the above requests, we shall reply to you within a maximum of 10 days.
You are entitled to submit a complaint to Spain’s Data Protection Agency. For more information on your rights and to request models of the forms for exercising your rights, please visit the website of Spain’s Data Protection Agency [Agencia Española de Protección de Datos] at www.agpd.es.