Privacy Policy

In accordance with Article 10 of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, we inform you that GRAVASPORT, S.L., with tax identification number (CIF) B96965348 and registered office at AVENIDA DEL PUERTO, 72 BAJO – 46023 VALENCIA, is responsible for managing and operating the website www.soccergrava.com and is registered in the VALENCIA COMMERCIAL REGISTER, Volume 6595, Book 3899, Folio 59, Section 8, Sheet V 71162.

If you wish to contact us, you may do so by post at the address above or by email at soccers@soccersvlc.com.

You may access our domain directly or through any existing redirect; this same Privacy Policy applies in either case.

PRIVACY POLICY

This Privacy Policy describes how we process your personal data (for example, the collection, use, disclosure, retention and protection of your personal information) and provides information about your rights as a data subject.

GRAVASPORT, S.L. is the data controller and is responsible for the collection, use, disclosure, retention and protection of your personal data, in accordance with the General Data Protection Regulation, internal rules and policies, and any applicable national legislation.

In compliance with Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation), GRAVASPORT, S.L. provides the following information:

Identity and contact details of the Data Controller

Our identification details:

GRAVASPORT, S.L.

You can contact us

• By post: AVENIDA DEL PUERTO, 72 BAJO – 46023 VALENCIA
• By email: soccers@soccersvlc.com
• By telephone: 610797810
• Website: www.soccergrava.com

Please note that Article 37(1) of the GDPR establishes the obligation to appoint a Data Protection Officer. You may contact the Data Protection Officer by email or telephone with any questions, queries or suggestions, or to exercise your rights under this Regulation in relation to the processing of your personal data.

Our DPO’s details:

– Vicente M. Sancho Rodríguez (Caler Consultores, S.L.)

– dpo@grupo-alonso.com

Categories of personal data

We process the following categories of personal data:

• Identification data – first name and surname, national identity document (DNI) or equivalent.
• Administrative data – company name, address, bank details and contact persons.
• Contact details – email address, telephone number and postal address.
• Digital data – cookies, IP address, websites and social media, and other data publicly accessible on the Internet, etc.
• Professional/employment data – contact information, references, work experience and education. Information relating to your curriculum vitae.
• Footballer data: data relating to their professional activity, sporting performance and health (injuries, medical examinations, injuries, etc.).
• Social media data – data from the public social media profiles of followers and visitors.
• Ethics channel data – details of an incident or the person reporting it, relating to reports received through the ethics channel.
• Business data – suppliers, customers, directors and shareholders.
• Other data necessary for processing – for further information on the categories of personal data processed in the course of our activities, please consult our Record of Processing Activities.

How do we collect your data?

We collect information about you from the following sources:

Through other online tools:

• Through our social media channels.
• Through emails to customers or suppliers with whom we have had a previous business relationship.
• Through emails to prospective customers or other interested parties with whom we have no business relationship and whose explicit consent we have not yet obtained.
• Through emails to interested parties whose consent we have obtained through the various contact forms.
• Through the ethics channel https://grupo-alonso.com/canal-etico/

From other sources:

• When we communicate or interact with you by telephone, email or any other company contact method.
• When you visit our premises.
• Through various sporting events (technical skills development, leagues, pre-season programmes, tournaments, high-performance projects and training camps).

For further information on the different ways in which we collect data in the course of our activities, please consult our Record of Processing Activities.

How long do we keep your data? (Retention Period)

Data will be retained for as long as a business, contractual or professional relationship with the data subject exists, and subsequently for as many years as necessary to comply with the legal obligations applicable in each case. Without prejudice to the foregoing, data will be retained for as long as they are necessary for processing and the data subject does not request their erasure.

For tax purposes, accounting and tax documentation must be retained for at least the period during which the tax authorities are entitled to verify and investigate and, consequently, assess tax liabilities. This includes accounting books and other records required under the applicable tax regulations (personal income tax (IRPF), VAT (IVA), corporation tax (IS), etc.), together with supporting documents for the entries recorded in those books (including computer programs and files and any other evidence relevant for tax purposes). Under Articles 66 to 70 of the General Tax Law, this period is four years.

For commercial law purposes, accounting and tax documentation must be retained in an orderly manner for six years from the last entry made in the books, unless otherwise provided by general or specific provisions, in accordance with Article 30 of the Commercial Code. This obligation covers books, correspondence, documentation and supporting records relating to the business, including both mandatory books (income, expenses, capital goods and provisions) and the documents supporting their entries (invoices issued and received, receipts, corrective invoices, bank documents, etc.).

Academic and/or professional data, such as a curriculum vitae, will be retained during the candidate selection process and for a maximum of one year, after which they will be deleted and destroyed.

For further information on data retention in the course of our activities, please consult our Record of Processing Activities.

With whom do we share your data?

Depending on the purpose of processing, your personal data may be disclosed to or processed by various categories of recipients:

• External partners and professionals: tax, accounting, legal and employment advisers, consultants, service companies and other professionals providing services necessary for our activities.
• Public authorities and official bodies: where necessary to comply with legal obligations or where those bodies are lawfully exercising their powers.
• Clubs, teams and sports organisations: where necessary to organise and manage technical skills development sessions, training camps, pre-season programmes, tournaments, team camps, training sessions, high-performance programmes or other sporting activities.
• Federations, leagues and sports governing bodies: where necessary for registration, organisation, management or participation in competitions, tournaments, events and sporting activities.
• Sports facilities and centres: where data are needed to manage bookings, access, activities, training sessions, training camps, pre-season programmes or any other contracted service.
• Accommodation and hospitality establishments: hotels, residences, apartments or other establishments where necessary to arrange accommodation, meals and services associated with training camps, pre-season programmes, tournaments or team camps.
• Transport companies and logistics operators: where necessary to arrange travel for players, coaching staff, teams, accompanying persons or personnel involved in the contracted activities.
• Medical, healthcare, physiotherapy and sports recovery providers: where necessary to provide assistance, prevention, recovery, physiotherapy, rehabilitation and return-to-sport support, or sports monitoring services, always in accordance with the applicable legal basis and, where appropriate, with the data subject’s consent.
• Sports and technical service providers: coaches, fitness coaches, performance analysts, specialists in methodology, scouting, sports nutrition, sports psychology, physiology and sports technology, and other professionals involved in providing the contracted services.
• Event organisation and management companies: where involved in planning, coordinating and running tournaments, training camps, sports camps, technical skills development sessions, sporting events and other activities organised by the company.
• Technology and digital service providers: providers of data hosting and storage, sports management platforms, communication tools, registration management, videoconferencing, email, management software and other technology solutions necessary to provide our services.
• Insurance companies and insurance brokers: where necessary to arrange and manage policies, accident insurance, civil liability insurance, sports assistance or other cover relating to the activities carried out.
• Financial institutions and payment service providers: where necessary to manage collections, payments, invoicing, refunds or other financial transactions.
• Security and access control companies: where necessary to ensure the safety and security of people, facilities and sporting events.
• Family members, guardians or legal representatives: in the case of minors, where necessary to manage their participation in activities and in accordance with applicable legislation.
• Other suppliers and partners necessary to provide the contracted services, provided that disclosure of the data is necessary for the proper organisation and delivery of the activities and there is a legal basis permitting it.

In all cases, we disclose your data only to the extent strictly necessary and in the manner required to fulfil the purposes described in this Privacy Policy, and only to entities with which we have signed agreements protecting your rights and freedoms in relation to your personal data. These entities and/or professionals, acting as Data Processors, are subject to Article 28 of the GDPR, and we ensure that they take all necessary security measures in accordance with that legislation.

We also inform you that your data may be processed by companies belonging to our group for commercial, administrative, statistical and/or financial purposes. For more detailed information, please visit www.grupo-alonso.com.

For further information on the disclosure of data to third parties in the course of our activities, please consult our Record of Processing Activities.

Where do we process your data?

To carry out our activities and provide our services, we process your personal data within the European Union (EU), in accordance with the conditions set out in this Privacy Policy.

For further information on where we process data in the course of our activities, please consult our Record of Processing Activities.

For what purposes do we process your data?

Your data will be collected for processing operations relating to the following purposes:

Purposes relating to the features of our website:

• Ethics channel:
  • Monitoring and managing the reported incident.
  • Contacting the person who reported the incident, where appropriate.
  • Using the data provided to resolve the incident properly.
• Specific processing on social media (see the Social media section).
• For prospective customers or other interested parties whose explicit consent we do not hold, we will request it by email so that we can continue communicating with them.

General purposes of our activities:

• Receiving contact information or other requests you submit through any of our communication channels.
• Administrative tasks arising from the provision of our services.

For further information on the purposes of data processing in the course of our activities, please consult our Record of Processing Activities.

You may withdraw your consent at any time, free of charge, by exercising your rights. Send your request in writing, together with a document proving your identity, to AVENIDA DEL PUERTO, 72 BAJO – 46023 VALENCIA or by email to dpo@grupo-alonso.com. For more detailed information on exercising your rights, please consult our Record of Processing Activities.

Why are we allowed to process your data? (Legal Basis)

The use of your data under the conditions described above is permitted by European and Spanish data protection legislation on the following legal bases:

Article 6 GDPR

• The data subject has given consent to the processing of their personal data for one or more specific purposes.
• Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the data subject’s request prior to entering into a contract.
• Processing is necessary for compliance with a legal obligation to which the controller is subject.

Ethics channel.

For the ethics channel, processing is based on Law 2/2023 of 20 February on the protection of persons who report regulatory infringements and on combating corruption.

For further information on the legal basis for data processing in the course of our activities, please consult our Record of Processing Activities.

What are your rights?

Data protection legislation allows you to exercise your rights of access, rectification, objection, erasure (the “right to be forgotten”), restriction of processing, data portability and not to be subject to individual decision-making before the Data Controller.

Every data subject has the right to receive basic, concise, first-layer information BEFORE their data are collected, at the time of collection and through the same medium used to collect their personal data. The remaining information must be provided through a medium better suited to its presentation and understanding.

The information to be provided in layers or levels is as follows:

First-layer information

• The identity of the Data Controller.
• What data will be processed.
• For what purpose.
• Where and how the data were obtained.
• The legal basis for processing.
• Whether the data will be disclosed to, shared with or processed by third parties.
• A reference to the procedure for exercising your rights.

Second-layer information

• The controller’s contact details. The identity and details of its representative (if any). The contact details of the Data Protection Officer (if any).
• A fuller description of the purposes of processing. Data retention periods or criteria. Automated decisions, profiling and the logic involved.
• Details of the legal basis for processing where it relies on a legal obligation, public interest or legitimate interest. Whether providing the data is mandatory and the consequences of not doing so.
• Recipients or categories of recipients. Applicable adequacy decisions, safeguards, binding corporate rules or specific situations.
• How to exercise the rights of access, rectification, erasure and data portability, and the rights to restrict or object to processing.
• The right to withdraw consent previously given.
• The right to lodge a complaint with the Supervisory Authority.

(The following table sets out your rights.)

These rights have the following characteristics:

• They may be exercised free of charge.
• You may exercise your rights directly or through a legal representative.
• If the request is submitted electronically, the information will be provided electronically where possible, unless the data subject requests otherwise.
• Before you exercise your rights, we must verify your identity to protect your personal data against attempted fraud.
• Your request will be dealt with within one month.
• The controller must inform you of the means available to exercise these rights. These means must be accessible, and a request cannot be refused solely because you choose a different means.
• If the controller does not act on the request, it will inform you, within one month at the latest, of the reasons for not doing so and of your right to lodge a complaint with a Supervisory Authority.

If you wish to exercise any of the rights described above, you can contact us through our Data Protection Officer:

• By post:

GRAVASPORT, S.L.

FAO: Data Protection Officer

AVENIDA DEL PUERTO, 72 BAJO – 46023 VALENCIA

•  Or by email at: dpo@grupo-alonso.com

Please note that Article 37(1) of the GDPR establishes the obligation to appoint a Data Protection Officer, whom you may contact at the email address provided. You may address any questions, queries or suggestions to the Data Protection Officer, or exercise your rights under this Regulation in relation to the processing of your personal data, providing a document proving your identity.

Supervisory Authority

If you wish to lodge a complaint concerning the processing of your data by GRAVASPORT, S.L., you may contact the Spanish Data Protection Agency at C/ Jorge Juan, 6, 28001 Madrid, http://www.agpd.es

Cookies

Cookies are files downloaded to your computer to collect standard Internet log information and information about browsing behaviour. This information is used, for example, to track visitors’ use of the website and compile statistical reports on website activity.

You can configure your browser not to accept cookies. However, some first-party cookies are necessary to enable website users to use our services during their session.

For further information, please visit the website’s Cookies Policy.

Social media

GRAVASPORT, S.L. has a presence on social media platforms such as Facebook and Instagram. The purposes of personal data processing are those set out in the terms applicable to the service. If you register for certain services using personal data associated with a user account, please note that certain information held in your account will be shared. GRAVASPORT, S.L. reminds you to familiarise yourself with the privacy policies of the platforms or social networks on which you are registered to avoid sharing information unintentionally.

You can use the privacy and account management settings on social networks to manage your preferences relating to privacy, identity, advertising and other relevant matters.

If you register for certain services using personal data associated with a user account, please note that certain information held in your account will be shared.

The purposes for which data are collected on the various social networks are:

• Advertising and marketing prospecting.
• Managing customer databases arising from campaigns or promotions publicising our activities and services among our followers.
• Communicating with customers or other interested parties.

Specifically, on Facebook, when users become fans of the official Fan Page by clicking the “Like” button, they authorise their personal data to be used solely on the Facebook platform to manage the Fan Page and two-way communications with those followers through chat, posts, comments, messages or any other communication methods the social network permits now or in the future. This processing is subject to the social network’s privacy policies, which users can consult at https://www.facebook.com/policy.php. Becoming a fan provides access to the list of members or followers who have joined the Fan Page. Please also note that, when users become fans, published news will appear on their home page. If a fan comments on those posts, both their comment and profile name, and, where applicable, their profile photograph, will be accessible to other fans, subject to their privacy or timeline and tagging settings. In all cases, users are responsible for their use of the social network.

On Instagram, when users follow our profile by clicking the “Follow” button, we gain access to their profile page, specifically their username, photographs (if they have added a profile photograph), posts and any other information published on their profile, such as the accounts they follow or their followers. Data belonging to users who follow our Instagram profile are used solely to manage the information exchanged between us. The privacy policy governing this social network can be consulted at https://help.instagram.com/519522125107875

Unsubscribe request

You can unsubscribe by writing to AVENIDA DEL PUERTO, 72 BAJO – 46023 VALENCIA or emailing dpo@grupo-alonso.com with the subject line “EXERCISE OF RIGHTS”, stating your details and the email address with which you are registered. We will reply to let you know the status of your request or whether we need further information.

Minors

The User confirms that they are over 14 years of age and therefore have the necessary legal capacity to consent to the processing of their personal data, in accordance with this Privacy Policy.

If you wish to use our services through the website and are aged 14 or under, we will need your legal guardian’s consent to store your data. If we do not have this consent, we may block or delete your data.

Security

GRAVASPORT, S.L. adopts organisational and technical measures to ensure the security of personal data and prevent their alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.

Updates

We keep our Privacy Policy under review and may change it from time to time, primarily to comply with legal and data protection practices.

Updated versions will be published on our website.

Applicable law and competent courts

The terms and conditions governing this website, and any relationships arising from it, are governed by and subject to Spanish law. Any controversy, litigation or dispute arising between the user and GRAVASPORT, S.L. from the use of this website shall be submitted to the Courts and Tribunals of VALENCIA, Spain.

Last updated: 21 SEPTEMBER 2026