Privacy policy
1. Identity and contact details of the data controllers
Legends Hospitality España, S.L., with registered office at Paseo de la Castellana, number 53, 1-B, 28046 Madrid, holder of tax ID number B-88644299 and telephone +1 212 317 3200 («Legends»), and Real Madrid, with registered office at Avenida de Concha Espina, no. 1, 28036 Madrid, Spain, holder of tax ID number G-28034718 and telephone +34 91 398 43 00 («Real Madrid»). Legends and Real Madrid (the “Companies”) are joint data controllers with respect to the processing of personal data.
The purpose of this Privacy Policy is to inform you about:
The use that the Companies will make of your personal data through the Real Madrid Online Store https://shop.realmadrid.com (the “Website”, the “Web” or the “Store”).
The situations in which the Companies process your data jointly and those in which each processes data independently.
The legal basis that enables the Companies to process your data for each of the purposes indicated.
The retention period of your data by the Companies.
With whom your data is shared.
Your rights under the General Data Protection Regulation (“GDPR”).
If you have any questions regarding the processing of your data or wish to know more about the joint controllership agreement, you may contact the Companies at the following addresses:
Legends Legal: 61 Broadway, Suite 2400, New York, NY 10006, dataprivacy@legends.net
Real Madrid Data Protection Officer: Avenida de las Fuerzas Armadas, 402, 28055 Madrid, protecciondedatos@corp.realmadrid.com
2. Purposes and legal basis for processing
2.1. Your data will be processed exclusively by Legends for the following purposes
Provision of the services requested by Customers and Users, including:
Registration as a User on the Website, if desired, to save your information for future transactions.
Management of purchases: processing of orders, shipment, invoicing, and payment collection.
All of the above is based on compliance with the Store’s General Terms and Conditions.
Management of the relationship with Customers and Users, including:
Customer service and management of communications necessary for providing products and responding to requests submitted by Customers and Users.
Handling complaints and information requests related to products purchased in the Store.
Conducting loyalty actions, including sending satisfaction surveys and reminders for purchases started on the Web but not completed.
Statistical analysis of transactions, complaints, and claims, as part of an ongoing improvement process of our services.
All of the above is based on Legends’ legitimate interest in ensuring business continuity and maintaining the best possible relationship with Customers and Users.
Accounting and tax management of the activity, insofar as necessary to comply with the legal obligations applicable to the owner of the Store.
2.2. Your data will be processed exclusively by Real Madrid for the following purposes
Ensuring business continuity, as well as supervising and controlling the activity carried out by Legends, based on Real Madrid’s legitimate interest in ensuring the proper operation and evolution of its official Online Store.
If you have given your consent to Real Madrid, C.F. in the registration or purchase form, the Club will process your data to send you information and commercial communications, including by electronic means and based on profiling, relating to products, services, and activities of Real Madrid, including the Online Store, as well as those of its sponsors and partners, and for subsequent statistical analysis of such communications.
2.3. Your data will be processed jointly by Legends and Real Madrid, as joint data controllers, for the following purposes
Only if you have given your consent, sending commercial communications, including by electronic means and based on profiling, relating to the Online Store and its products, as well as the subsequent statistical analysis of such communications.
Analysis of the use and traffic of the Website, necessary to satisfy our legitimate interest in improving the Online Store, user experience, and the range of products and services offered.
Additionally, and on a very exceptional basis, the Companies, individually or jointly, may process your data for purposes of control and security, legal advice, and regulatory compliance, when necessary to satisfy their legitimate interest in defending their rights and interests and complying with legal obligations (audits, compliance with criminal law, and data protection).
Likewise, if you have consented to the use of cookies through the Website, your data will be processed for the purposes indicated for each type of cookie, in accordance with our Cookies Policy.
3. Required and up-to-date information
Completion of all fields marked with an asterisk (*) or required by the system in the forms is mandatory. Failure to complete these fields may prevent the provision of services.
To ensure the information provided is accurate and up to date, you must notify the Companies of any changes or updates to your data as soon as possible, via email at dataprivacy@legends.net.
4. Data retention period
We will retain your data for the duration of the relationship with the Online Store and, subsequently, will keep it properly blocked for the legally applicable periods and for as long as necessary to establish, exercise, or defend potential claims.
If you have consented to receive commercial communications, your data will be processed for this purpose until you withdraw your consent. You may request the cancellation of such communications at any time, as indicated in the section “Exercise of your rights” or through the unsubscribe mechanism included in each electronic communication.
Regarding the newsletter, subscriber data will be retained until the user requests cancellation of the subscription.
If you simply visit our Website, note that necessary cookies, as well as those you have accepted, also collect personal data. Such data will be retained for the periods indicated in the cookies banner and in the Store’s Cookies Policy.
5. With whom we share your data
We may communicate your personal data to:
Tax authorities and other public bodies and entities authorized by law, when required or necessary.
Exceptionally, to judges, courts, or other bodies for dispute resolution, law enforcement authorities, and notaries.
Certain service providers may access part of your data for service provision, ensuring a high level of protection and limiting use strictly to what is necessary for the stated purposes.
Legends’ providers:
- SHOPIFY, as the Store platform provider.
- WEGLOT, as the translation tool.
- THIRD BLINK SOFTWARE, INC (Rewind), as a backup solution.
- ESSENTIEL, as the integrated customer service provider.
- INFOR Inc., as cloud-hosted ERP in Frankfurt for storing customer data necessary for order management.
- External logistics providers: Logisfashion Spain SL.
- FRESHDESK, as the CRM provider for customer service.
Real Madrid’s providers:
- CHEETAH, for sending commercial communications.
- Microsoft Ireland Operations Ltd. (data storage).
- M2C Consulting Procedures (data integration).
- SOGETI ESPAÑA, S.L.U. (IT services).
- Willis Consulting, S.L., Garrigues, Ernst & Young, Estudio Jurídico Rodríguez Mourullo, Elzaburu S.L.P., and other legal advisors, consultants, and auditors.
- Audisec, S.L., for logging data protection incidents.
- Other providers that may complement or replace the above.
You may request more detailed information regarding recipients of your data by writing to dataprivacy@legends.net, specifying the processing activity for which you are requesting information.
International data transfers
Your data may be processed by processors located outside the European Economic Area.
In particular, your personal data may be accessed by technology and logistics service providers in the United States and Australia, with whom the Companies have executed the standard contractual clauses approved by the European Commission as adequate safeguards.
Certain processors may also be located in Canada, recognized by the European Commission as providing an adequate level of data protection.
Exceptionally, your data may be transferred to judges, courts, or other bodies outside the EEA when necessary for the establishment, exercise, or defense of claims.
You may request additional information regarding international transfers by writing to dataprivacy@legends.net, indicating the recipients, destination country, or safeguards applied.
6. Exercise of your rights
You may exercise the following rights:
- The right to access your personal data.
- The right to rectify inaccurate data.
- The right to request the erasure of personal data, where applicable.
- The right to request restriction of processing when there is doubt about accuracy, lawfulness, or necessity.
- The right to object to processing when the legal basis is legitimate interest.
- The right to data portability when the legal basis is a contractual relationship or your consent.
- The right to withdraw your consent when consent is the legal basis for processing.
You may exercise your rights at any time and free of charge by sending an email to dataprivacy@legends.net or oposicion@corp.realmadrid.com, indicating the right you wish to exercise and your identifying information.
You may also lodge a complaint with the Spanish Data Protection Agency or other competent European authorities.
7. Confidentiality
Any personal data collected will be treated as confidential and we commit to maintaining it as such in accordance with applicable law.
8. Updates to the privacy policy
This Privacy Policy may be updated. We recommend reviewing it periodically, especially before making a purchase, to stay informed about the type of information collected and how it is processed. Any changes affecting the processing of personal data will be duly communicated.