This Privacy Policy (hereinafter, the “Policy”) governs the processing of personal data carried out by Real Club Deportivo Mallorca, S.A.D. (hereinafter, the “Club”, “RCD Mallorca” or the “Controller”) through the RCD Mallorca Business Club website (the “Platform” or the “Website”).
By providing your data to contact, request information or, where applicable, subscribe to communications from the Business Club, this data will be processed by the Club as the Data Controller in accordance with the provisions of the applicable regulations, including Regulation (EU) 2016/679 (“GDPR”) and the LOPDGDD.
Real Club Deportivo Mallorca, S.A.D.
CIF: A07323736
Home: C/ Camí dels Reis s/n, 07011, Palma de Mallorca (España)
General contact email: businessclub@rcdmallorca.es
Data Protection Officer(DPD/DPO): datos@rcdmallorca.es
If you have any questions about this Policy or any aspect related to data protection, you can write to the DPO at datos@rcdmallorca.es.
Data that you provide to us in the forms on the Website (e.g., Name and surname, Company, Email, Telephone, Message) and, where applicable, when subscribing to communications from the Business Club.
Data derived from the use of the Website (essential telemetry, technical identifiers, server logs, basic interaction with forms and communications – e.g., email opens/clicks if you subscribe).
Third-party integrations that we use on the Website (e.g., transactional or marketing email provider, email validation). In such cases, only the data strictly necessary to provide the service is shared.
Embedded videos (YouTube): If you access embedded content from YouTube, the playback service provider is Google Ireland Limited. We recommend that you review their privacy policy.
Login with LaLiga (if enabled): If in the future you are allowed to register with your LaLiga account, we may receive the data you authorize from LaLiga (e.g., email and, optionally, first name, last name, phone number, date of birth, gender, city/state/country). This functionality will be clearly indicated at the point of capture and will be optional.
Main purposes
To attend to your requests (contact, commercial information and/or membership in the Business Club) and manage related communications.
Management of your Business Club communications subscription (if you sign up): sending news, events, announcements, information notes and relevant content for companies and partners.
Additional purposes (if you enable/accept them)
3) Commercial communications from the Club (email, SMS or instant messaging) about activities, events, products/services, contests, offers, raffles and/or promotions of the Club or carried out with sponsors of the Club.
4) Simple segmentations to tailor communications (e.g., by age or province indicated).
5) More detailed Club profiles (only with your consent): personalize experiences and content in Club communications and assets, measure individual campaign performance, optimize/exclude completed campaigns, target audiences, assess propensity and retargeting in Club or third-party environments.
Performance of a pre-contractual or contractual relationship (art. 6.1 b) GDPR): to attend to your request for information/contact and manage your membership or interest in the Business Club.
Legitimate interest (Art. 6.1 f) GDPR): simple segmentations to improve the relevance of Business Club communications (assessed using a weighting test available upon request at datos@rcdmallorca.es). You can object at any time.
Consent (Art. 6.1 a) GDPR): subscription to Club marketing communications and comprehensive profiles; use of channels such as SMS/WhatsApp; inclusion in personalized marketing campaigns; non-technical cookies (see Cookie Policy). You can withdraw your consent at any time without affecting the lawfulness of your consent before its withdrawal.
Management of requests/contact/adherence: while the management lasts and, once completed, during the legal limitation periods (blocked).
Business Club communications: until you unsubscribe or revoke consent; afterwards, for the applicable statute of limitations (blocking).
Simple segmentations (legitimate interest): as long as you do not object and the purpose persists; afterwards, blocking for legal periods.
Comprehensive profiling (consent): as long as you do not withdraw your consent and the purpose persists; afterwards, blocking for legal periods.
Once the retention/blocking periods have expired, the data will be securely deleted.
Data processors who provide us with services (hosting, web maintenance, email sending tools and CRM, email verification, aggregated analytics, messaging, etc.), with whom we have signed the contracts required by art. 28 GDPR.
Authorities and public bodies when there is a legal obligation.
Your data will not be transferred to third parties for their own purposes without your consent, except when legally required or for the execution of services requested by you.
If we use providers located outside the EEA (e.g., salesforce.com EMEA Limited for email/CRM mailings or RP Solutions, Inc. for email verification), transfers will be covered by adequate mechanisms or sufficient safeguards (e.g., Data Privacy Framework and/or Standard Contractual Clauses), limited to the data strictly necessary.
Additional information on applicable guarantees is available at datos@rcdmallorca.es.
You can exercise your rights of access, rectification, erasure, objection, limitation, portability and not to be subject to automated decisions (including profiling that produces legal effects or similarly significantly affects you) at any time:
By email to the DPO: datos@rcdmallorca.es
Indicate the right you wish to exercise and prove your identity.
Consent and withdrawals:
You can withdraw your consent and/or manage your preferences from the unsubscribe link included in each communication, from the subscription center (if available) or by writing to datos@rcdmallorca.es.
Complaints:
If you feel you have not received satisfaction, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
We apply appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including the use of HTTPS (SSL) on the Website and access controls, encryption in transit, event logging and the principle of data minimization.
The Website and Business Club services are intended for individuals aged 14 and over. If we detect registrations from individuals under 14, we will cancel them.
The use of cookies and similar technologies is governed by the Cookie Policy, where you can configure your preferences (especially regarding non-technical cookies).
We may update this Policy to reflect legal or treatment changes. We will post the current version and indicate the date of the last update. We recommend that you review it periodically.
