Privacy policy
This site collects as little personal data as it can. There are no forms, no newsletter and no analytics: what follows is the complete list of what is processed and why.
Who is responsible
The data controller is the owner identified above. You can contact them at the email address shown on this page for anything concerning your personal data.
What data is processed, and why
If you write to the club by email, the club processes the address you write from and whatever you choose to include in your message, for the sole purpose of replying to you. The legal basis is the club's legitimate interest in answering the people who contact it.
If you are part of the club's staff and have an account for the admin panel, the club processes your name, email address and password — stored hashed, never in readable form — to authenticate you. The legal basis is the relationship between you and the club.
The web server keeps technical logs (IP address, date, requested page, browser) to keep the service running and to detect abuse, such as brute-force attempts against the login. The legal basis is the club's legitimate interest in the security of its systems.
Cookies
The public website sets no cookies of its own and uses no analytics or advertising cookies.
The admin panel, which is not open to the public, uses a strictly technical session cookie: without it, staff could not stay signed in. Cookies of this kind are exempt from the consent requirement.
The videos on the home page are loaded from YouTube in privacy-enhanced mode, which means YouTube sets nothing until you press play. From that moment on, YouTube's own privacy policy applies.
Who else sees the data
The hosting provider identified above stores the site's data on the club's behalf, under a data processing agreement.
No personal data is sold, rented or shared with third parties for advertising, and none is transferred outside the European Economic Area beyond what the providers named here may do under their own terms.
How long it is kept
Email correspondence is kept for as long as it is useful for the matter it concerns, and then deleted.
Staff accounts are kept while the person is part of the club, and deleted when they leave.
Server logs are kept for a limited period and then rotated out.
Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these, write to the email address on this page.
If you believe your data has not been handled correctly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), at www.aepd.es.
Players and creators on this site
The profiles of players and content creators published here — nickname, photograph, country, role and social media links — are published with the consent of the people concerned, as part of their role representing the club. Anyone who wants their profile changed or removed can ask by writing to the club.