How we use your information
1. Controller. Odisea Sports Management, L.L.C., established in Cary,
North Carolina, United States ("Odisea"), is the controller of the personal data
submitted through this form — that is, the company responsible for how it is used. Its
affiliate Odisea Sport Management, S.L.U., established in Castellón de la Plana, Spain,
runs the showcase in Spain. Correspondence concerning this notice, or the exercise of
the rights set out at clause 10, may be addressed to showcase@odiseasports.com.
2. Purposes and legal basis. The personal data submitted through this
form is processed in order to register the player for the showcase, to organize the
matches and the player's participation in them, and to correspond about the event. The
legal basis for that processing is that it is necessary in order to take steps at the
request of the data subject prior to entering into a contract, and to perform that
contract once a place is confirmed (Article 6(1)(b) GDPR). Where the player is under
the age at which they may act for themselves, the guardian named at clause 6 makes that
request on their behalf.
3. Recipients — the attending college coaches. The purpose of the
showcase is to present the player to the college coaches who attend it. Odisea
therefore discloses to those coaches, and to the institutions they represent, the
player's name, date of birth, nationality, position, current club, playing level,
expected graduation, the academic information given in this form, and the highlight
video linked in it. Odisea also shares the film and photographs of the matches, as
described at clause 7. The coaches and their institutions decide for themselves what
they then do with that information: in respect of it they are independent controllers,
not processors acting on Odisea's instructions, and Odisea cannot direct or withdraw
what they hold. Beyond those recipients the data is not disclosed to any third party;
it is accessible to the personnel of Odisea and of its affiliate, and to the processors
that host the website, the database and the club's email.
4. Transfer outside the European Economic Area. The institutions
described at clause 3 are established in the United States, a country for which the
European Commission has not issued a general adequacy decision covering them, and
Odisea has not put in place standard contractual clauses or any other Article 46
safeguard with them. The disclosure is nevertheless necessary for the performance of
the contract between the data subject and Odisea — the purpose of registering for the
showcase being to be seen by those institutions — and takes place on that basis
(Article 49(1)(b) GDPR). The data subject should be aware that the country of
destination affords no protection equivalent to that of the European Economic Area,
and that once the information has been disclosed each institution holds it as an
independent controller which Odisea can neither direct nor recall.
5. Retention. Where a registration does not result in a place, the
registration and all personal data submitted with it are erased 24 months after the
date of submission. Where a place is taken up, the registration is retained for the
period Odisea retains its participant records for the corresponding edition of the
showcase, and is erased at the end of it.
6. Players under 18. Where the date of birth given indicates that the
player is under 18, this form additionally requests the name, email address and
telephone number of a parent or guardian, and the registration is made by that adult on
the player's behalf. The rights set out at clause 10 are exercised by the guardian for
as long as the player is a minor. Odisea does not verify the date of birth given at the
point of registration; it is verified against identity documents when a place is
confirmed.
7. Film and photography. The matches are filmed and photographed. The
resulting material shows the player and is shared with the player, with the attending
coaches described at clause 3, and used by Odisea on its own channels to describe the
event. This is done on the basis of the separate consent given on this form, which may
be withdrawn at any time by writing to showcase@odiseasports.com; withdrawal does not
require Odisea to recall material already shared with a coach or already published,
though Odisea will cease further use.
8. Data recorded on submission. On submission, Odisea additionally
records the internet protocol (IP) address from which the form was sent and the
identifier of the browser used, for the purpose of preventing automated abuse of the
form. That record is erased 30 days after submission.
9. Automated decision-making. No decision concerning a registration is
taken solely by automated means, and no profiling within the meaning of Article 22 GDPR
is carried out. Whether a player is offered a place is decided by Odisea's staff.
10. Provision of the data and rights of the data subject. The
provision of the personal data requested in this form is neither a statutory nor a
contractual requirement. It is, however, necessary in order to register: a registration
cannot be processed without it. The data subject has the right to request from Odisea
access to and rectification or erasure of the personal data concerning them, or
restriction of its processing, and to object to its processing, as well as the right to
data portability. Where processing rests on consent, that consent may be withdrawn at
any time without affecting the lawfulness of processing carried out before its
withdrawal. These rights are exercised by writing to showcase@odiseasports.com. The
data subject also has the right to lodge a complaint with a supervisory authority — in
Spain, the Agencia Española de Protección de Datos (www.aepd.es).
11. Further information concerning Odisea's processing of personal
data is set out in its privacy policy at odiseasports.com/privacy.
