PRIVACY POLICY

1. DATA CONTROLLER

Your personal data will be processed by FC Barcelona (hereinafter “FC Barcelona or Club), located at Calle Arístides Maillol s/n, 08028, Barcelona and with Spanish tax identification number (NIF) G-08266298.

2. PURPOSES, LEGITIMATION BASIS AND DATA RETENTION

Your data will be processed for the following purposes:
Purchase of tickets and attendance at the event: Your data will be processed to manage the purchase of tickets and your attendance at the event, on the basis of the contractual relationship, and for a period of 5 years after its termination

Covid control: In the case of attending the event in person, we will be able to view your covid certificate or the PCR/antigens test you have taken. This information will be treated in the public interest and we will only be able to view this information and it will not be registered in any of the Club’s systems.

Fraud control: When you make a payment, we may process your data in order to control possible fraudulent transactions, which may involve the communication of data to suppliers who are experts in fraud prevention and management, in accordance with section 3 of this Privacy Policy. Your data will be processed on the basis of legitimate interest and will be kept until the end of the transaction.

Newsletter: In addition, if you give your consent by ticking the corresponding box, you can subscribe to our newsletter containing information about FC Barcelona products (tickets, merchandising or digital products, among others), as well as invitations to events or opinion polls. Your data will be kept until you unsubscribe from the newsletter.

Profiles of our users: We create profiles of our users. The profile allows us to offer better services, adapted to the preferences of our users, providing quality and personalised contents according to their interests. For more information about this treatment, you can consult section 4 of this privacy policy. Such processing will be carried out on the basis of legitimate interest, and as long as you do not object to it.

3. DATA COMMUNICATION

Your data will not be transferred, sold, leased or made available in any other way to any third party, except for those FC Barcelona service providers who carry out certain activities for us (third parties that help us to manage access to the event, or that manage FC Barcelona’s databases.) but that in no case will process the data for their own purposes. Some of these providers may be outside the European Union, as indicated in section 5 below.

Notwithstanding the foregoing, it is possible that when you make your purchase your data may be communicated to third parties that will treat your data as data processors, and it shall therefore be these that will determine the purposes and the means by which they will be used by the same. These may be logistics companies used to send products to the given address, or fraud prevention companies, such asRiskified Ltd., who shall process your data for security purposes and anti-fraud control of the transactions carried out by you. The club’s communication to Riskified involves the international transfer of Data outside the European Economic Area (EEA), for which purpose both parties guarantee that the appropriate guarantees have been taken to ensure that the processing complies with the requirements established in the data protection regulations (for further information about these guarantees, please contact us at the addresses given in the seventh section below). For further information about how Riskified processes your data, please see: https://www.riskified.com/privacy/

4. CREATION OF PROFILES AND AUTOMATED DECISIONS

As described below, the Club will be able to make user profiles, taking into account all the information provided by you.

This profile will take into account, for example:

– Your behaviour on the web, cookies, cursor movements, or your preferences and interests.
– Behaviour with regard to our newsletters, for example, what content is interesting to you depending on the opening of newsletters and the frequency with which you open them.
– Interactions that can be performed through other channels such as inquiries to our information channels, or contact.
– Information that you may provide us through satisfaction surveys.

We also inform you that, for some services, we may process your personal data using automated means. This means that certain decisions are made automatically without human intervention, such as segmenting you according to whether you have an interest in certain sections of the website or the likelihood of using other services that we may offer.

In addition, if you agree to receive commercial communications, these may be adapted and personalised according to users’ interests, either based on the products and services requested, or based on the data that we can deduce or obtain from your browsing behaviour, interest in certain content, reaction to our communications, among others.
Said personalisation is carried out in a partially automated manner, in the sense that we determine the personalisation parameters, but it is the technological platform that actually generates the user profile. We do not send general communications that are not segmented via the previous procedure, since we consider that it is both in our own interest and that of the user to send or receive information that is relevant, and not segmenting would not alter the number of communications received, but only the content thereof. If you do not wish to be segmented, please do not authorise for it to be sent or oppose the same at any time.

5. INTERNATIONAL TRANSFERS

FC Barcelona as an international organisation, has international suppliers that may provide their services from outside the EU, so it is possible for users’ data to be processed outside the European Union or the European Economic Area (for example, supplier that sends the newsletter, data storage, fraud management, etc.).
In any case, we will ensure that this data processing is always protected with the appropriate guarantees, which may include (i) Standard EU approved clauses: or (ii) Third party certifications.

6. DURATION OF THE PROCESSING

All the data provided will be processed throughout the period established in the second section of this Privacy Policy.
Notwithstanding these deadlines, your data may be kept in anonymised form for statistical or market research purposes, whenever possible, or duly blocked to comply with any legal obligation of FC Barcelona.

7. EXERCISE OF RIGHTS

You may also exercise your rights of access, rectification, deletion, opposition, limitation or portability by written communication addressed to the Data Protection Commission at the address Calle Arístides Maillol, S/N, 08028, Barcelona (Spain), or by email to proteccio.dades@fcbarcelona.cat.

If you have any doubt, question or complaint about the way in which we process your personal data, please contact our Data Protection Officer, at the email address dpo@fcbarcelona.cat or by regular written mail addressed to Calle Arístides Maillol, S/N, 08028, Barcelona (Spain), with the reference “DPO”. In the event that you do not get a response within a reasonable period, you may file a claim with the Spanish Data Protection Authority.