Last updated: April 12th, 2021
1.- Data controller and description
1.1.- Responsible party
The controller of this site is REAL CLUB DEPORTIVO MALLORCA SAD (hereinafter RCD Mallorca), Camí dels Reis, s/n, estadio "Son Moix", 07011, Palma de Mallorca, Balearic Islands, Spain.
In order to process your personal data, RCD Mallorca complies with current local and European legislation, as well as its implementing regulations.
It therefore adopts the necessary technical and organisational measures to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data provided. Always in accordance with the state of technology, the nature of the data and the risks to which they are exposed.
2.- Information collected
The Service can be used without providing any data, although in order to purchase our products you will need to provide us with some personal data. The information (personal or non-personal) collected by the Service may vary accordingly.
Personal and non-personal information collected by the Service will come to us in three ways: 1) information collected automatically 2) information you voluntarily provide to us and 3) information provided by third parties.
2.1.- Automatically collected
This information will consist of:
The IP from which the connection is made, the type of device used and its characteristics, the version of the operating system, the type of browser, the language, the date, the country, the time of the request, the URL from which you came, the URL to which you go or the mobile network used, among others.
Data on the use of the Service and possible errors detected during its use.
In any case, you can disable Google Analytics cookies here.
2.2.- The information you provide voluntarily
This information will consist of:
The information required by RCD Mallorca to create an account: email, name, surname and password.
All data are mandatory.
If you register on behalf of another person through the Service, you guarantee that you have legitimately obtained the personal information and consent of those other persons before providing us with their data.
In relation to your password, as a user of the Service you are responsible for its protection. In this sense, you will assume any damage that may arise from its misuse or the transfer of the same to third parties.
The information required by RCD Mallorca to complete the purchase of the desired product: name, surname, email address, payment method, telephone number, among others.
Mandatory data will be indicated with an asterisk.
If you make a purchase on behalf of another person through the Service, for example for a gift, you warrant that you have legitimately obtained the personal information of those other persons before providing us with their details.
Information, personal or otherwise, that may be contained in messages sent through the contact or feedback channels set up on the Service, for example your name, email address and message.
Personal or non-personal information required to subscribe to the newsletter, such as your email address.
Your photograph, name, nickname or geolocation if you decide to participate in any of our activities in social networks.
2.3.- Information provided by third parties
This information will consist of:
Information provided by payment systems or credit card processors, such as the time of purchase or the amount of the purchase.
Information provided by courier services that deliver your order, for example, the date and place of delivery.
The information provided by social networks or similar services.
3.- Rights and purposes
We inform you that the completion of the forms is voluntary. However, if you do not fill in the mandatory fields (usually marked with an asterisk), the use of some functions of the Service will not be possible or will be limited.
The personal data you provide will be included and processed in RCD Mallorca's Register of Processing Activities, in order to be able to deal with your requests, provide the service requested and keep you informed about matters relating to the club's activity and its services or products.
You may at any time exercise your rights of access, rectification, suppression, limitation of processing, opposition and portability of your personal data by sending an e-mail to: email@example.com or to the postal address: Camí dels Reis, s/n, estadio "Son Moix", 07011 Palma de Mallorca, Balearic Islands, Spain.
In both cases you must identify yourself with your name and surname, as well as a copy of your DNI or national ID, if necessary.
In the event that you have given consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
Furthermore, if you consider that there is a problem with the way in which RCD Mallorca is handling your data, you can address your complaints to the corresponding data protection authority, being the Spanish Data Protection Agency the one indicated in the case of Spain.
With respect to your use of the online service, you represent that you are of legal age and that you have the legal capacity to be bound by this agreement and to use the site in accordance with its terms and conditions, which you fully understand and acknowledge.
You represent that all information you provide to access the Service, before and during use, is true, complete, and accurate.
5.- Use of data
RCD Mallorca will use the data collected to:
Administer, provide and update the Service (the legal basis being our legitimate interest in keeping and maintaining the Service up to date and in good order).
Manage the customer relationship throughout the process and provide you with the purchased product (the legal basis being the contract).
Manage the creation of your account on the Service (the legal basis being your consent).
To deal with the issues you raise, such as queries, complaints, claims and/or suggestions obtained from the customer service contact channels (the legal basis being our legitimate interest in dealing with our users' requests).
Process the payments you make and issue the corresponding invoices (the legal basis being the contract).
Deliver the purchased products to you (the legal basis being the contract).
Send you our newsletter and promotional offers by e-mail (the legal basis, depending on the case, being your consent or our legitimate interest based on the previous contractual relationship, in accordance with art. 21.2 LSSICE).
You can unsubscribe from them from the e-mail you receive or by contacting us at firstname.lastname@example.org. However, you will not be able to unsubscribe from certain correspondence from us, such as messages relating to the security of your data or the terms and conditions of the Service.
To analyse profiles of website activity and product purchase preferences and to manage the customer loyalty process (the legal basis being our legitimate interest in conducting direct marketing activities).
To carry out activities of monitoring and accounting of sales generated from the newsletter, which allow us to determine the origin and consumption of the purchasers (the legal basis being our legitimate interest in carrying out quality control of the service and traceability of the purchases made).
To maintain the security of the Service, to investigate illegal activities, to enforce our terms and conditions and to assist law enforcement agencies in their investigations (the legal basis being our legitimate interest in ensuring and maintaining the security of the Service and its users).
RCD Mallorca does not use automated decisions, although it may generate basic profiles of users, the legal basis being our legitimate interest for commercial purposes and to provide personalised offers.
In addition, RCD Mallorca may use user information in the form of aggregated and anonymous data for display to third parties. We may also share statistics and demographic information about users and their use of the Service with third parties. But none of this will allow those third parties to identify you personally.
5.1.- In e-mails and contact forms
The Service's website has TLS encryption that allows users to securely send your personal data through standard contact forms.
The personal data collected will be automatically processed and incorporated into the corresponding files of the register of processing activities and of which RCD Mallorca is the owner.
In this sense:
We will receive your IP, which will be used to check the origin of the message in order to provide you with appropriate recommendations (e.g. to present the information in the correct language) and to detect possible irregularities (e.g. possible attempts to cyber-attack the Service), as well as data relating to your ISP.
You may also provide us with your details by telephone, email and other means of communication as indicated.
Regarding the means of communication used:
Our payment service providers to pay for the provision of our services are VISA, Mastercard, Maestro, Amex and PayPal. At no time will the Service or its staff have access to the bank details (e.g. credit card number) that you as a customer provide to these third parties.
On the other hand, certain services provided through the website (for example, the possibility of participating in a competition or promotional code draw) may contain special conditions regarding the protection of personal data. It will be necessary to accept them before participating in these services.
5.2.- In social networks
RCD Mallorca has profiles on some of the main social networks, and is responsible for the processing of data published on them (for example, photos uploaded by RCD Mallorca in which people's faces appear).
The treatment that RCD Mallorca will carry out with the data within each of the aforementioned networks will be, at most, that which the social network allows to the corporate profiles.
Thus, RCD Mallorca will be able to inform, when the law does not prohibit it, our followers by any means that the social network allows about its activities or offers, as well as to provide a personalised customer service.
Under no circumstances will RCD Mallorca extract data from social networks, unless the user's consent to do so has been expressly obtained.
5.3.- In prize draws
When participating in promotional actions organised exclusively by RCD Mallorca, the data you provide will only be processed by us for the purpose that has been indicated in the statement of the action and its corresponding legal conditions.
6.- Retention of data
The following is an indication of how long the data processed by the Service will be kept for:
Disaggregated data will be retained without a deletion period.
Customer data will be retained for the minimum necessary period of time, which may be up to:
5 years, according to art. 1964 of the Civil Code (personal actions without special time limit).
6 years, according to Art. 30 of the Commercial Code (e.g. accounting books or invoices).
Users' data will be kept for a maximum of 12 months in order to be able to respond to their requests.
The data of newsletter subscribers will be kept from the time the user subscribes until the user unsubscribes.
The data of users uploaded by RCD Mallorca to its social networks will be kept from the moment the user gives his/her consent, or the data has been uploaded according to the legitimate interest of RCD Mallorca, until he/she withdraws it.
7.- Data shared with third parties
There are third parties that manage part of the Service.
Under some circumstances, RCD Mallorca may share, use or preserve some of the personal information collected with third parties:
To provide the Service:
Service providers who perform functions on our behalf, such as, for example
payment services, delivery services, web hosting, business analytics, customer service or web marketing. These service providers may collect and have access to information that is necessary for them to perform their functions, but are not permitted to share or use the information for any other purpose.
To cooperate with law enforcement authorities:
If we believe it is reasonably necessary to satisfy any law, legal process or legitimate interest. In any event, we will only provide information that is strictly required.
8.- Security measures
RCD Mallorca takes all necessary technical and organisational measures to protect the security and integrity of personal and non-personal information collected. Both against unauthorised access and against accidental alteration, loss or destruction.
In any case, RCD Mallorca cannot guarantee the absolute security of the information collected, so you must cooperate and use common sense at all times about the information shared.
You understand and acknowledge that, even after deletion, personal and non-personal information may remain visible in cache or if other users have copied or stored it.
We will notify you of changes by sending a notice to the email address provided and/or by posting a prominent notice on our website.
10.- Contacting Us
Address: Camí dels Reis, s/n, estadio "Son Moix", 07011 Palma de Mallorca, Balearic Islands, Spain.