Privacy policy - Land of Goals

The purpose of this Privacy Policy (hereinafter, “Policy”) is to regulate the personal data processing activities carried out by LALIGA ENTERTAINMENT S.L. (hereinafter, “LALIGA ENTERTAINMENT”) through the Land of Goals Game (hereinafter, the “Game”).

Who is the data controller for your personal data?

Your personal data will be processed by LALIGA ENTERTAINMENT, with CIF (tax identification no.) B42958694 and address at Calle Torrelaguna 60, 28043, Madrid.

LALIGA ENTERTAINMENT’s Data Protection responsible contact: lopd@laliga.es

Where do we get your personal data from?

LALIGA ENTERTAINMENT will process the data which you provide via the access form (favourite team and nickname), as well as other data inferred as a result of your use of and activity within the Game (registered user ID; device ID; advertising ID or Mobile Advertising ID – MAID; identifier for the provider of the service provided through the Game; identifier for advertisers – IDFA – which permits the identification of your device in order to track your activity in LALIGA ENTERTAINMENT assets; operating system; device model and telemetry, for example, when you click on certain content or the time you remain active will also be recorded) or your interactions with communications which we may send you via push, in-app or email notifications, as applicable (for example, clicking on the content of a communication). Likewise, if you consent, LALIGA ENTERTAINMENT will process your geographical position data of the terminal.

We inform you that in the iOS version of the Game, Apple will ask your permission for the use of the advertising identifier of your device (“IDFA”) by LALIGA ENTERTAINMENT for any of the purposes which may require it, in accordance with the section Why do we process your personal data?of this privacy policy.

Importing data from social media

We hereby inform you that you will be able to use the social media profiles you hold in order to sign up to or access the Game, as well as to share with LALIGA ENTERTAINMENT additional information on the profile you have on said social media.

Data shared via Google:

•Name and surnames (Required to register)

•Email address (Required to register)

Data shared via Apple:

•Name (Required to register)

•Apple ID or email address (Required to register)

In this regard, we inform you that LALIGA ENTERTAINMENT is not responsible for the legal adequacy of the social network you use for the aforementioned purposes. For this reason, we recommend that you review the conditions of use and privacy policy of the social networks that you are going to use for these purposes so that you can verify that the treatment carried out with your personal data is in accordance with your expectations of privacy and the data protection regulations that may be applicable in each case.

Once the data has been imported and incorporated into your Game user account, your data will be processed by LALIGA ENTERTAINMENT for the purposes described in this Privacy Policy.

Why do we process your personal data?

Main purposes:

•Registering and accesing in the Game: We inform you that the personal data you provide in the registration form will be processed by LALIGA ENTERTAINMENT for the purposes of facilitating your access to the Game, managing your participation in it, as well as registration where applicable.

The legal basis for the aforementioned purposes is that the processing is necessary for the execution of a contract in which the interested party is a party by virtue of the provisions of art. 6.1 b) of the General Data Protection Regulation. The necessary and essential data for the access to the Game is your nickname and your favourite team. Also, if you register in the Game, your email address and your name and surname will be mandatory data to fulfil the registration. If you do not provide said data, you will not be able to enjoy the services requested.

•Exclusive content and use of geolocation data: To unlock certain exclusive content of the Game, it is necessary to process your device’s geolocation data to locate you where the promotion is active. The Game application will collect, in real time, data related to your location with a precision of up to 3km with the sole purpose of placing you within the radius defined for activation and in this way being able to unlock the exclusive content of the Game. In this way, we recommend only enabling geolocation when you are within the promotion area, deactivating it when you leave said area.

The legal basis for the processing of your data for the aforementioned purpose is the consent that you have given us for the processing of your data for the specific purposes selected by virtue of the provisions of art. 6.1 a) of the General Data Protection Regulation. Your personal data will be kept for this purpose until you revoke the consent granted.

You have the right to withdraw your consent at any time following the procedure described in the “What are the user’s rights when providing us their personal data?” section, this does not affect the legality of the processing based on consent prior to its withdrawal. Likewise, you can modify your preferences regarding your location and deactivate geolocation through the configuration panel of your terminal.

•In-app notifications related to the Game: In the event that you access the mobile application of the Game, you may receive in-app notifications relating to the Game (for example, about changes to the privacy policy, legal notice or terms and conditions of use of the Game, etc.). You can stop such communications being sent at any time through the Game’s “notifications centre”. These notifications are only shown when the mobile application is open and we will use your user ID to send you the notification.

Likewise, in order to verify send this notifications, LALIGA ENTERTAINMENT uses the services of a third-party provider (PlayFab) that involves an international transfer of personal data to the United States, country that guarantees an equivalent level of protection to that provided within the EU for personal data transferred from Europe to third-party providers ubicated in the United States and are adhered to the Data Privacy Framework. LALIGA ENTERTAINMENT’s third party provider is among these providers.

The legal basis for the aforementioned purposes is that the processing is necessary for the execution of a contract in which the interested party is a party by virtue of the provisions of art. 6.1 b) of the General Data Protection Regulation. The necessary and essential data for the provision of these services within the Game are user identifiers. If you do not provide such data, you will not be able to receive the necessary communications related to the Game.

•Push notifications about the Game: In the event that you access the mobile application of the Game, you will be able to receive push notifications relating to the Game via the regular notifications system of your Smartphone or Tablet. You can stop such communications being sent at any time through the Game’s “notifications centre” or through the settings on your Smartphone or Tablet. These notifications may be shown on your device whether you have the mobile application open or not and we will use your user ID to send you the notification.

Likewise, in order to verify send this notifications, LALIGA ENTERTAINMENT uses the services of a third-party provider (PlayFab) that involves an international transfer of personal data to the United States, country that guarantees an equivalent level of protection to that provided within the EU for personal data transferred from Europe to third-party providers ubicated in the United States and are adhered to the Data Privacy Framework. LALIGA ENTERTAINMENT’s third party provider is among these providers.

The legal basis for the aforementioned purposes is that the processing is necessary for the satisfaction of the legitimate interest of LALIGA ENTERTAINMENT by virtue of the provisions of art. 6.1 f) of the General Data Protection Regulation, consisting in achieving greater use of the Game through notifications about matches, about the start of matches, results, goals, cards or any other event that occurred during the match, or about a new Game’s functionality. Before doing so, we inform you that LALIGA ENTERTAINMENT has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users. You can request the conclusions of this analysis through lopd@laliga.es.

You have the right to object to the aforementioned purpose at any time in accordance with the procedure described in the section “What are your rights when you provide us your personal data?”.

•Internal reporting: Furthermore, LALIGA ENTERTAINMENT will process in aggregate form the personal data which you supplied during registration (in this case, favourite team), usage data of the Game (user ID, device ID (IDFA or if applicable, IDFV), device model, operating system and telemetry, for example, clicking on certain content or the time you remain active) and finally, interactions with communications of any type which you may receive (for example, clicking on the content of a communication), for the preparation of relevant metrics and statistics which allow LALIGA to analyse the use made of the Game by different user segments which are generated and the impact of its campaigns, evaluating the interest which they have generated among the aforementioned segments based on the data analysed. In particular, LALIGA ENTERTAINMENT will carry out aggregated segmentations based on the aforementioned data, which include:

– Segmentations based on favourite tea. (e.g. 20 users have selected X team as their favourite team).

The legal basis for the aforementioned purposes is that the processing is necessary for the satisfaction of the legitimate interest of LALIGA ENTERTAINMENT by virtue of the provisions of art. 6.1 f) of the General Data Protection Regulation, consisting of extracting lessons from the information provided and obtained from users that allows you to improve the Game and optimize the communication campaigns carried out based on the interest that these generate among the different groups of users. users. Before doing so, we inform you that LALIGA ENTERTAINMENT has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users. You can request the conclusions of this analysis through lopd@laliga.es.

You have the right to object to the aforementioned purpose at any time in accordance with the procedure described in the section “What are your rights when you provide us your personal data?”.

Use of the identifier for advertisers (“IDFA”) on iOS (Apple) devices

Use of the IDFA for the “Internal reports” purpose requires the user tracking permission within Apple’s iOS operating system. In the event that the user has not given their permission for the use of the IDFA, LALIGA ENTERTAINMENT will not be able to carry out this purpose using the IDFA of the device.

The user may accept or reject the tracking permission at any time in the iOS settings of the user’s Apple device.

Additional purposes

If you give us your consent, the additional purposes for which LALIGA ENTERTAINMENT will process your personal data are provided below:

•LALIGA ENTERTAINMENT commercial communications: So that LALIGA ENTERTAINMENT can send you commercial communications via email, push or in-app notifications, SMS or other instant messaging channels about its activities (the competitions it organises, campaigns, public viewings, shows or live events), products (apps, online platforms and games developed by LALIGA ENTERTAINMENT), services, competitions, offers, draws and/or promotions run by LALIGA ENTERTAINMENT.

For this purpose, LALIGA ENTERTAINMENT will only process your email address, user ID and, if applicable, your favourite team you provided us with on the registration form.

Furthermore, we inform you that in order to send you marketing communications via email, LALIGA ENTERTAINMENT uses the service of a third-party provider (Twilio and PlayFab) that involves an international transfer of personal data to the United States, country that guarantees an equivalent level of protection to that provided within the EU for personal data transferred from Europe to third-party providers ubicated in the United States and are adhered to the Data Privacy Framework. LALIGA ENTERTAINMENT’s third party provider is among these providers.

The information used for the development of segments will be only that declared by the data subject in the registration (in this case, favourite team), with a low level of detail on the user profile without using information inferred from the data subject or from third-party sources, with the segmentations in any case not being in depth. In this way, commercial communications may be sent according to the simple segments created with the aforementioned information, avoiding sending content that has no connection to you.

The legal basis for the aforementioned purpose is that the processing is necessary to satisfy the legitimate interest of LALIGA ENTERTAINMENT under the provisions of Art. 6(1)(f) of the General Data Protection Regulation, consisting of making effective use of the personal data provided by the user to achieve greater interest and return from the communications sent. Before doing so, we would like to inform you that LALIGA ENTERTAINMENT has carried out a proportionality analysis between its legitimate interest and the rights and freedoms of its users, the conclusions of which you can request at lopd@laliga.es.

You have the right to object to the above-mentioned purpose at any time in accordance with the procedure described in the section “What are your rights when you provide us with your personal data?”.

Under no circumstances will the compilation of simple segments by LALIGA ENTERTAINMENT have any legal effect or significantly affect you in any similar way.

•Comprehensive profiling: If you give us your permission, LALIGA ENTERTAINMENT will create a comprehensive profile of you so that it can offer you personalised experiences, information and products by sending you personalised commercial communications via email, SMS or other instant messaging channels, send you personalised push or in-app notifications (provided you have given your consent for the purpose “LALIGA ENTERTAINMENT commercial communications”) or show you banners with personalised advertising on websites, apps or social networks about LALIGA ENTERTAINMENT’s products and services.

In this way, the aforementioned information will be directed to the segments (groupings of users that are made according to the information obtained from them or the use you make of the Game) that we can develop based on the following data sources:
– The information you provide during registration (in this case, favourite team);
– Social login (in this case, first and last name(s), phone number, email address, birthday, gender, city and province where you live);
– Interactions with communications or notifications you receive (e.g. clicking on the content of a communication);
– Data inferred as a result of usage and activity on the Platform (device ID, registered user ID, device model, operating system and telemetry, e.g. clicking on particular content or time spent on the asset).

In addition, LALIGA will generate these segments taking into account the following profiling techniques:

– Measurement of individual campaign performance: LALIGA ENTERTAINMENT will use information relating to opening rates, average click-through rates, email bounces and unsubscription rates to measure the performance of the campaign at an individual level, and as a result, make segmentations based on the information inferred about you and the other information declared, in order to impact you again with certain campaigns that are more connected to you or include you only in those in which you have shown more interest (for example, if you are a very active user in certain communications we may send you communications of the same type more frequently). For these purposes, we hereby inform you that through the data management tools provided by the social networks in which LALIGA ENTERTAINMENT has an account, user audiences will be created that can be shared, within each social network and in encrypted form, with third parties outside LALIGA ENTERTAINMENT, in order to create their advertising campaigns within the social network itself.

– Optimisation of campaigns: we will exclude you from advertising campaigns about prize draws in which you have participated, about applications in which you have registered or downloaded, about products you have purchased or about services you have previously purchased (for example, we will avoid offering you a LALIGA ENTERTAINMENT app if we know that you have previously downloaded it). To do so, we will cross-reference your information with information obtained from other LALIGA ENTERTAINMENT assets of which you are a user.

– Users with similar tastes and preferences: using the profile that LALIGA ENTERTAINMENT creates about you, we can send you personalised content taking into account other profiles similar to yours (for example, if we identify that other users similar to you like eSports, we will show you advertising related to eSports).

– Valuation of users: LALIGA ENTERTAINMENT will obtain an unknown variable from known variables provided or inferred from you so that it can carry out an analysis of its users with the aim of identifying those with a greater propensity to use or contract LALIGA ENTERTAINMENT products, and where appropriate, offer you LALIGA ENTERTAINMENT products and services.

Under no circumstances will profiling carried out by LALIGA ENTERTAINMENT have any legal effect or significantly affect you in any similar way.

Once this period had elapse, LALIGA ENTERTAINMENT will keep your personal data duly blocked for the sole purpose of addressing any kinds of responsibilities that could arise.

•Registering and accessing in the Game: The data provided for registration and access in the Game will be kept as long as you do not request the deletion of your data, this purpose persists and, once it has ended, during the limitation period of legal actions that may arise from it.

•Exclusive content and use of geolocation data: The geolocation data will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object to the given consent and, once this purpose it has ended, during the limitation period of the legal actions provisions that may arise from it.

•In-app notifications related to the Game: The data provided for in-app notifications related to the Game will be kept as long as you do not request the deletion of your data, this purpose persists and, once it has ended, during the limitation period of legal actions that may arise from it.

•Push notifications about the Game: The data provided for push notifications about the Game will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object their sending and, once this purpose it has ended, during the limitation period of the legal actions provisions that may arise from it.

•Internal reports: the data provided for internal reports will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object to the processing and, once this purpose has ended, during the period of limitation for the legal actions that could arise from it. •

•LALIGA ENTERTAINMENT commercial communications: The data provided for LALIGA ENTERTAINMENT commercial communications will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object to the given consent and, once this purpose it has ended, during the limitation period of the legal actions provisions that may arise from it.

•Development of simple segmentations: the data provided for the development of simple segmentations will be kept as long as you do not request the deletion of your data, this purpose persists, you do not object to the processing and, once this purpose has ended, during the period of limitation for the legal actions that could arise from it.

•Development of comprehensive profiles: the data provided for the development of comprehensive profiles will be kept as long as you do not request the deletion of your data, this purpose persists, you do not revoke the consent granted or limit the processing and, once this purpose has ended, during the period of limitation for the legal actions that could arise from it.

Said personal data will be deleted when such period of time expires.

To which recipients will your personal data be communicated?

If you have consented, LALIGA ENTERTAINMENT may share your personal data (name, surname, email and favorite team) to the following entities so that they can send you commercial communications through any electronic means:

•LALIGA Group International (“LALIGA”) with NIF B05421805 and address at Calle Torrelaguna 60, 28043, Madrid. You can obtain more information about the data processing carried out by LALIGA here.

•Kosmos Entertainment, S.L. with NIF B67477745 and address at Calle Beethoven 15, 6º, 08921 Barcelona. You can obtain more information about the data processing carried out by Kosmos Entertainment, S.L. Here.

•Port Aventura Entertainment, S.A.U., with NIF A63776306 and address at Avenida Alcalde Pere Molas, km2, Salou/Vilaseca Highway, Vila-seca Tarragona. You can obtain more information about the data processing carried out by Port Aventura Entertainment, S.A.U. here.

The legal basis for this communication of personal data is the consent you have given us for the transfer of your data to investors, partners and collaborators of LALIGA ENTERTAINMENT so that they can send you commercial communications relating to their activities, services, promotions and/or offers, as established in art. 6.1 a) of the General Data Protection Regulation. Your personal data will be kept for this purpose until you revoke the consent granted.

Likewise, LALIGA ENTERTAINMENT may supply the personal data and any other information about the user when required to do so by public authorities exercising the duties legitimately attributed to them and in accordance with the applicable provisions.

Likewise, some entities subcontracted by LALIGA ENTERTAINMENT may access the personal data and information as processors or sub-processors to provide LALIGA ENTERTAINMENT with a necessary service, as indicated in each of the purposes in the section “Why do we process your personal data?”. These service providers sign a contract requiring them to use your personal information only for the provision of the services stated in this policy.

What are your rights when you provide us your personal data?

We hereby inform you that you can exercise your rights of access, rectification, objection, erasure, portability, not to be subject to automated decision and limitation to processing or revoke your consent with LALIGA ENTERTAINMENT at any time.

What do your rights as a user consist of?

•Right of access: you have the right to obtain confirmation as to whether LALIGA ENTERTAINMENT processes your personal data, as well as the right to access your personal data.

•Right to rectification: you may request the modification or rectification of inaccurate personal data.

•Right to erasure: you may request the erasure of your personal data.

•Right to restrict processing: in certain circumstances, you may request that we restrict the processing of your data, in which case it will only be kept for the purpose of pursuing or defending claims.

•Right to object: you may object to the processing of your data for the purpose you specify. LALIGA ENTERTAINMENT will cease processing the data, except for compelling legitimate grounds, or the exercise or defence of possible claims.

•Right not to be subject to automated individual decisions: you have the right not to be subject to a decision based solely on automated processing, including profiling, which is likely to produce legal effects concerning you or similarly significantly affect you.

•Right to data portability: if the Game so permits, you may exercise the right to the portability of your data, in a structured, commonly used and machine-readable format, and to transfer it to another data controller.

How do I exercise my rights?

By sending an email to lopd@laliga.es. Exercising your rights is completely free of charge.

Likewise, you may revoke the consent or object to the legitimate interest at any time; by following the procedure set out in any of the communications you receive, through the Subscription Centre found on the Game’s menu, or by sending an email to: lopd@laliga.es

Revoking the consent provided or object to any purpose will not affect your use of the Game or the legality of the processing based on said consent prior to its withdrawal.

On the other hand, if you have signed up for the Game through social media, you can exercise your right to erase your data. Please see the conditions for each service for more information:

•Google: https://myaccount.google.com/permissions
•Apple: https://support.apple.com/en-gb/HT210426

Also, you can request the cancellation and erase your account directly by enter into the section “Settings”.

Finally, if you believe that you failed to obtain satisfaction in the exercise of your rights or that LALIGA ENTERTAINMENT has not processed your personal data in accordance with data protection regulations, please don’t hesitate to contact LALIGA ENTERTAINMENT’s Data Protection responsible at lopd@laliga.es or file a complaint with the Spanish Data Protection Agency (AEPD) through its website www.aepd.es

Are there any kinds of restrictions?

LALIGA ENTERTAINMENT hereby informs you that Game users must be at least 16 years old to use and sign up for the Game.