1. Data controller

• Controller: Arena360 SL
• Tax ID (CIF): B21895438
• Address: Calle Sector de los Pueblos, OTR 39, Puerta Bis, 28760 Tres Cantos (Madrid), Spain
• Email: [email protected]

2. What data we process

We process the data you give us directly, for example through the contact form or by email:

• Identification data: first name and surname.
• Contact data: email and, where applicable, phone number.
• Professional data: the club, venue or company you work for.
• The content of your message.
• If you apply through our Careers page: your CV, phone number, LinkedIn profile and any information you include.

We do not process special categories of data or make automated decisions based on your data.

Browsing data. To know how many visits the website receives, we use Burst Statistics, an analytics tool installed on our own server and set up without cookies. It records technical data about each visit, such as pages viewed, the referring website and the type of device and browser, and groups them with an anonymous identifier that changes every day. It does not allow us to identify you and this data is not shared with third parties.

3. Why we process it and on what legal basis

• To answer your enquiries sent through the form or by email. Legal basis: your consent, given by ticking the box on the form.
• To manage the business relationship and provide the services you hire (administrative, accounting and tax management). Legal basis: performance of a contract or pre-contractual steps.
• To send you information about our services if you are already a client or professional contact. Legal basis: legitimate interest. You can object at any time.
• To comply with our legal obligations. Legal basis: legal obligation.
• To manage your job application if you send us your CV through our Careers page. Legal basis: your consent, given by ticking the box on the form.
• To measure how the website is used, in aggregate, in order to improve it. Legal basis: legitimate interest.

4. How long we keep it

We keep your data for as long as the relationship lasts or until you ask us to delete it, and then for the periods required to meet our legal obligations. Data from enquiries that do not lead to a business relationship is deleted within 12 months at the latest. CVs we receive are kept for as long as the selection process lasts and deleted when it ends.

5. Who we share it with

We do not share your data with third parties, except where required by law (for example, the Spanish Tax Agency) or where needed to provide the service (for example, banks for invoicing).

Our technology providers, such as web hosting and email, have access to the data as data processors, under the contracts required by law.

6. International transfers

No transfers of data outside the European Economic Area are planned. If one became necessary, it would be made with the safeguards required by the GDPR.

7. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to [email protected] and stating which right you wish to exercise.

If you believe we have not handled your rights correctly, you may lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access or alteration.

9. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The current version will always be published on this page.