DOWNLOAD IN PDF
1. DATA CONTROLLER
Upon entering and/or registering, your personal data will be processed by:
a) FC Barcelona (hereinafter FC BARCELONA), with registered address at Calle Arístides Maillol s/n, 08028, Barcelona, and with NIF [Número de Identificación Fiscal (Taxpayer Identification Number)] G08266298.
b) Barça Licensing & Merchandising, S.L., (hereinafter BLM), with registered address at Calle Arístides Maillol s/n, 08028, Barcelona, and with NIF B67192955.
These companies will process your personal data in accordance with the purposes set forth in the second section of this Privacy Policy. Unless otherwise indicated, each data controller will process data independently and at their own responsibility, which generates no joint responsibility whatsoever as with regards to the processing.
In accordance with the above, each company will be the holder of the data derived from the following processing activities, without prejudice to the fact that the processing itself may be carried out by the other company. This is due to the unification of users under the same company (FC BARCELONA), who will keep a unified client repository, with BLM being the one that, within the framework of e-commerce activity, will decide on the exploitation of personal data (for example, it will determine the segmentation criteria for sending communications, advertising on social networks, etc.). In the case of commercial communications, for example, while BLM will determine what advertising to send, it will be FC BARCELONA, as the holder of the users’ data, who will send it.
In all matters relating directly to the purchase of products, the data holder and the controller will always be BLM, as the company responsible for said commercial activity. BLM will perform other supplementary services arising from the purchase of products, such as customer service, payment management, and fraud control.
|
PROCESSING |
DATA HOLDER |
DATA CONTROLLER |
|
USER REGISTRATION |
FC BARCELONA |
FC BARCELONA |
|
MERCHANDISING NEWSLETTERS, TICKETING AND OTHER SERVICES S |
FC BARCELONA |
FC BARCELONA and BLM, independently |
|
USER PROFILES |
FC BARCELONA |
FC BARCELONA and BLM, independently |
|
ADVERTISING ON SOCIAL NETWORKS OR THIRD-PARTY SERVICES |
FC BARCELONA |
FC BARCELONA and BLM, independently |
|
PRODUCT AND MERCHANDISING PURCHASES
|
BLM |
BLM |
|
CUSTOMER SERVICE DERIVED FROM PRODUCT AND MERCHANDISING PURCHASES |
BLM |
BLM |
|
PAYMENT MANAGEMENT AND FRAUD CONTROL IN PRODUCT AND MERCHANDISE PURCHASES |
BLM |
BLM |
2. LEGITIMATE PURPOSES AND BASES
Your data will be processed for the following purposes, according to the company responsible for each processing activity:
|
PROCESSING PERFORMED BY FC BARCELONA |
||
|
PROCESSING |
PURPOSE |
LEGITIMATE BASIS AND DURATION |
|
USER REGISTRATION |
By registering on this page, FC BARCELONA will process your data in order to manage and maintain your user account, which will include all the information that we may collect about you, such as your content or product preferences, information provided by the user directly through surveys, promotions, etc., and as a result of browsing our website. |
We process the data based on your consent provided when registering on our website. The data will be processed for as long as you hold your user account or until you object to said processing. |
|
MERCHANDISING, TICKETING AND OTHER SERVICE NEWSLETTERS |
If you grant your consent, we will send you information about our products marketed by BLM, as well as other Club products such as discounts and promotions for tickets to matches, merchandising, digital products, or invitations to events and opinion polls. |
Consent
The data will be processed for as long as you hold your user account or until you withdraw your consent. |
|
USER PROFILES |
We create a profile for users who interact with us both electronically and physically. The profile allows us to offer better services, adapted to our clients’ preferences, by providing quality and personalised content. For further information about this processing, please see section 4 of this privacy policy. |
Legitimate interest
The data will be processed for as long as you hold your user account or until you object to said processing. |
|
ADVERTISING ON SOCIAL NETWORKS OR THIRD-PARTY SERVICES |
Certain third-party social networks, applications and web pages allow commercial communications or advertising to be sent to specific or target groups of users.
With this information, the social network or application verifies whether the user has an account on its platform, allowing it to perform “Custom audience” activities for users who have agreed to receive commercial communications from BLM and FC BARCELONA in accordance with the above provisions of this policy, and who in turn have an account with said social network or application, making it possible to show advertising directly to them.
This type of activity can be carried out using various media, notably Facebook (Custom audiences), Twitter (Tailored audiences) and Google (Customer Match).
Furthermore, these social networks or applications allow user data to be shared to identify “similar audiences,” or those with a similar profile to that of BLM and/or FC BARCELONA users on said social network or application, but who are not users or fans of FC BARCELONA.
This type of activity is usually carried out through social networks such as Facebook (Lookalike audience), Twitter (Tailored audiences) and Google (Similar audiences). In this case, as it does not directly show advertising to users themselves, the basic data of all users, even those who have not agreed to receive commercial communications, are used.
With regard to the data provided to said third parties, we believe that users should be aware that only their email address or telephone number will be communicated and that these will be sent in encrypted form to guarantee the confidentiality and security of users’ data. The entire process is secured through the tool provided by the platform, which will allow it to identify you in its database.
Remember that if you do not wish to receive advertising through social networks or third-party platforms, you must restrict this through your user profile, all in accordance with the privacy policies of each platform.
These social networks and/or applications will only provide us with your data in the form of anonymised statistics and we will be unable to identify you again or learn about other new interests unless you interact with us through one of our advertisements on the social network and/or application.
|
Legitimate interest
The data will be processed for as long as you hold your user account or until you object to said processing. |
|
PROCESSING PERFORMED BY BLM |
||
|
PROCESSING |
PURPOSE |
LEGITIMATE BASIS AND DURATION |
|
PRODUCT AND MERCHANDISING PURCHASES
|
To manage the purchase and delivery of products. |
Contractual relationship
The data regarding your purchases will be processed for as long as you hold your user account with us or until you object to said processing.
If you make your purchase as a guest user, your data will be processed for a period of five years after said purchase. |
|
CUSTOMER SERVICE DERIVED FROM PRODUCT AND MERCHANDISING PURCHASES |
To contact you by telephone and/or by electronic means such as SMS or email to resolve any issue or enquiry regarding your purchase. |
Contractual relationship
The data will be processed for as long as you hold your user account or until you object to said processing.
If you make your purchase as a guest user, your data will be processed for a period of five years after said purchase. |
|
PAYMENT MANAGEMENT AND FRAUD CONTROL IN PRODUCT AND MERCHANDISE PURCHASES |
When making the payment, we may process your data to identify possible fraudulent operations, which may involve sending data to expert providers in fraud prevention and management, in accordance with the provisions in the following section. |
Contractual relationship
The data will be processed for as long as you hold your user account or until you object to said processing.
If you make your purchase as a guest user, your data will be processed for a period of five years after said purchase. |
3. DATA COMMUNICATION
Your data will not be transferred, sold, leased or made available in any other way to any third party, except for service providers who carry out certain activities for FC BARCELONA and BLM (sending the newsletter, marketing and telemarketing services, customer care, payments, etc.) but in no circumstances will they process the data for their own purposes. Some of these providers may be outside the European Union, as indicated in section 5 below.
Notwithstanding the above, it is possible that, when making the purchase, your data may be communicated to third-party companies that will process your data as data controllers, and therefore they will determine the purposes and the means for which said data will be used. These companies may be logistics companies for shipping the products to the indicated address, or fraud prevention companies, such as Riskified Ltd., who will process your data for security purposes and conduct anti-fraud control procedures on the transactions you have carried out. The communication of your data to Riskified by BLM involves the international transfer of data outside the European Economic Area (EEA), to which end both parties guarantee that the appropriate measures have been adopted for this processing to comply with data protection regulations (for further information about these guarantees, you can contact us at the addresses indicated in the seventh section below).
For further information about how Riskified processes your data, please see https://www.riskified.com/privacy/
4. PROFILING AND AUTOMATED DECISIONS
As described below, FC BARCELONA will be able to profile your user account, taking into account all the information you provide.
This profile will consider, for example:
- Your behaviour on the website, based on products selected, cursor movements, interests, preferences, products purchased.
- Behaviour regarding our informative newsletters, such as the content you find interesting, according to the newsletters that are opened and the frequency with which they are opened.
- Your interaction through other channels, such as enquiries via our information or contact channels.
- Information you may provide to us through satisfaction surveys.
We also advise you that we may process your personal data using automated methods for some services. This means that certain decisions are made automatically, without human intervention, such as segmenting your user profile based on the interest you show in certain sections of the website or your use of other services we may offer.
If you have agreed to receive commercial communications, they may be adapted and customised according to the users’ interests, either based on the products and services requested, or based on the data we can deduce or obtain from your browsing, your interest in certain content or your reaction to our communications, among other behaviour.
Said customisation is carried out in a partially automated way whereby we determine the customisation parameters, but the user profile is generated by the technological platform. We do not send general communications that have not been segmented through the previous procedure as we consider that it is in our interest and that of the user to send or receive relevant information, and because not segmenting would not alter the number of communications received, but rather only the content thereof. Therefore, if you do not want your user profile to be segmented, please do not subscribe to commercial communications.
5. INTERNATIONAL TRANSFERS
FC BARCELONA and BLM, as organisations with an international scope, use international providers to provide their services from outside the EU, so it is possible that your data may be processed outside the European Union or the European Economic Area (for example, the provider that sends the newsletter, data storage, fraud management, etc.).
In any case, we will ensure that such data processing is always protected with the appropriate guarantees, which may include:
- Standard Clauses approved by the EU: These are contracts approved by the European regulator, which provide sufficient guarantees to ensure that the processing complies with the requirements established by the EU General Data Protection Regulation.
- Third-party certifications: For example, the Privacy Shield—a framework agreement between the EU and the United States that establishes a standardised framework for data processing according to the requirements of the EU General Data Protection Regulation.
6. DURATION OF THE PROCESSING
All data provided will be processed during the term established in the second section of this Privacy Policy.
Without prejudice to this term, your data may be kept anonymised for statistical or market research purposes, whenever possible, or duly blocked to comply with any legal obligation of FC BARCELONA or BLM.
7. FURTHER INFORMATION AND EXERCISING YOUR RIGHTS
You may request further information at any time regarding the processing of your personal data, as well as to exercise your rights of access, rectification, deletion, restriction or portability, by writing to the Data Controller at Avda. Arístides Maillol, S/N, 08028 Barcelona (Spain), or by email at:
- Futbol Club Barcelona: dades@fcbarcelona.cat
- Barça Licensing & Merchandising, S.L.: dades.blm@fcbarcelona.cat
Furthermore, you can remove the consent you granted for processing based on consent and/or object to our legitimate interest, as long as this is possible under the current regulations. Notwithstanding the above, if you object to any processing this may mean that we cannot provide certain services.
If you have any doubts, questions or complaints about the way in which we process your personal data, you can contact our Data Protection Officer at the email address dpo@fcbarcelona.cat or by writing to us at Avda. Arístides Maillol, S/N, 08028 Barcelona (Spain), with the reference “DPO”. If you do not receive a response within a reasonable period of time, you can file a complaint with the Spanish Data Protection Authority.