Bring Your
Club to Spain

How we use your information

1. Controller. Odisea Sports Management, L.L.C., established in Cary, North Carolina, United States ("Odisea"), is the controller of the personal data submitted through this form — that is, the company responsible for how it is used. Its affiliate Odisea Sport Management, S.L.U., established in Castellón de la Plana, Spain, delivers in Spain the program to which this enquiry relates. Correspondence concerning this notice, or the exercise of the rights set out at clause 10, may be addressed to info@odiseasports.com.

2. Purposes and legal basis. The personal data submitted through this form is processed to answer the enquiry and to prepare and send the proposal it requests. The legal basis for that processing is that it is necessary in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR). The declaration below records the data subject's agreement to be contacted in reply and their acknowledgment of Odisea's privacy policy; it is not itself the legal basis for the processing.

3. Recipients. The personal data submitted through this form is not disclosed to any third party. It is accessible to the personnel of Odisea and of its affiliate Odisea Sport Management, S.L.U., which delivers the program in Spain, and to the processors engaged by Odisea to host the enquiry infrastructure and to send electronic mail, each acting solely on Odisea's documented instructions.

4. Location of processing. The infrastructure by which the personal data is received and stored is located within the European Union. The controller is established in the United States.

5. Retention. Where an enquiry does not result in a booking, the enquiry and all personal data submitted with it are erased 24 months after the date of submission.

6. Information concerning the group. This form requests the contact details of the person making the enquiry. The information it requests about the group itself does not identify any individual, and no personal data concerning the players is requested by this form.

7. Data recorded on submission. On submission, Odisea additionally records the internet protocol (IP) address from which the form was sent and the identifier reported by the browser used to send it. That data is processed to limit the number of submissions accepted from a single source, and so to protect the form against automated abuse, on the basis of Odisea's legitimate interest in the security and integrity of its systems (Article 6(1)(f) GDPR).

8. Automated decision-making. No decision concerning an enquiry is taken solely by automated means, and no profiling within the meaning of Article 22 GDPR is carried out.

9. Provision of the data. The provision of the personal data requested in this form is neither a statutory nor a contractual requirement. It is, however, necessary for Odisea to answer the enquiry and to prepare the proposal; an enquiry in respect of which it is not provided cannot be answered.

10. Rights of the data subject. The data subject has the right to request from Odisea access to and rectification or erasure of the personal data concerning them; restriction of processing — a pause in Odisea's use of the data; and its transmission to another organization (data portability); and has the right to object to the processing (Articles 15 to 21 GDPR). Where processing is based on consent, the data subject may withdraw that consent at any time, without affecting the lawfulness of processing carried out before its withdrawal (Article 7(3) GDPR). Requests may be addressed to info@odiseasports.com. The data subject further has the right to lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos, at www.aepd.es.

11. Further information concerning Odisea's processing of personal data is set out in its privacy policy at odiseasports.com/privacy.