PRIVACY POLICY

Who is the controller of your personal data? 

Controller	WAAKAT, S.L. (Hereinafter, the “Controller”)
Spanish Tax ID Number[N.I.F.]	B67851287
Registered office	Madrid, calle Serrano 33, 2 A-B, C.P. 28001
E-mail	legal@wamesports.com

 

What categories of data do we collect and process? 

The Controller will process the data you provide to us, which may correspond to the following categories:  

• Identification data, e.g., name, surname(s), date of birth, Spanish ID number [D.N.I.], passport, gender.  
• Contact details, e.g., e-mail, phone number. 
• Economic and financial data, e.g., payment or card details, bank account. 
• Personal data that can be extracted from the federative documents you provide. 
• Images or photographs you provide. 
• Physical data, e.g., height, weight, personal data that appear on psychotechnical tests.  
•  Activity, including date, time and geo-location information as well as your speed and pace.

 

For what purpose do we process your data and what lawful bases do we use? 

 

• To provide the services contracted by the User: 

In the event that the User provides personal data so that the Controller can provide the services indicated on the Website and/or the Application, the Controller will process these data in order to be able to provide its services and execute the agreement between the Controller and the Users who have contracted the services. In the event that the User does not provide any of these data, the Controller will not be in a position to provide some of its services.  

 

• Location Information

We collect and process location information only when you start a match to enable a core feature: calculating the distance run during a match. We don’t track your location outside of the app. To use this feature, you’ll need to allow us to access your device location while using the Services.

This information is used solely to calculate the distance on your device. We store the final distance traveled (in meters) for [duration]. You can stop location tracking at any time by adjusting your device settings.

 

• To manage payment of services: 

In the event that the User provides personal data so that the Controller can manage the payment of contracted services, the Controller will process these data to manage said payment and execute the agreement between the Controller and the Users that have contracted the services. In the event that the User does not provide any of these data, the Controller will not be in a position to provide some of its services. 

 

• To respond to your enquiries and send you the information requested and/or resolve any doubts or questions you may have:   

In the event that Users provide us with their personal data to make a request or enquiry, the Controller will process such data to respond to them and provide solutions that best suit their needs. The Controller undertakes to process the data obtained and provided by the data subject for as long as they are necessary for the purpose described.  

 The Controller deems that it has a legitimate interest in carrying out said data processing as it allows it to improve its services and the Users’ experience. 

 

• To carry out studies to improve the services offered to the Users: 

The Controller will process the Users’ personal data to assess how well the Website runs and the opinions on the services it provides. The Controller undertakes to process the data obtained and provided by the data subject for as long as they are necessary for the purpose described.  

 The Controller deems that it has a legitimate interest in carrying out such data processing as it allows it to improve its services and the Users’ experience. 

 

• Interpretation, analysis, and generation of personalised consulting plans: 

In the event the User provides personal data so that the Controller can provide the services contracted through the Website and/or the Application, the Controller will process such data to provide its services and execute the agreement between the Controller and the Users that have contracted the services. In the event that the User does not provide any of these data, the Controller will not be in a position to provide some of its services. 

 

• For purposes of marketing and sending communications: 

On the other hand, only in cases where data subjects have given us their prior and express consent, the Controller will process their data to send customised information about our products or services, newsletters and magazines through various means (both by ordinary and electronic means).  

 Whenever this processing is carried out by electronic means, it will be legitimised by fulfilling the legitimate interests of the Controller, by virtue of the provisions of Article 21 of Act 34/2002, of 11 July, on Information Society Services and Electronic Commerce (“LSSI”), as well as the EU Electronic Communications Code. 

 Pursuant to the LSSI, if Users wish to stop receiving commercial or promotional communications from the Controller, they may unsubscribe from the service by sending an e-mail to the following e-mail address: legal@wamesports.com, or by clicking the link provided for this purpose in the communications. 

 

• For commercial profiling: 

 Only in cases where data subjects have given us their prior and express consent, the Controller will process their data for commercial profiling of the User, based on the information provided to communicate information according to their interests, for example, by sending them advertising related to their preferences, or services similar to those they mainly interact with.  

 

How long will we store the data? 

Your data will be stored for the minimum time needed to fulfil the purposes for which you provided them, as well as to address any responsibilities that may arise from the data provided and any other legal requirements.  

In accordance with the above, data will be stored for the period established by law, as long as Users continue to use the Application and/or the Website and there is mutual interest in maintaining the purpose of the processing; when it is no longer necessary for such purpose, as long as there is a contractual relationship and until the data subject requests its erasure and the data do not need to be kept to comply with a legal obligation or for the preparation, exercise or defence of claims. They will be erased with appropriate security measures to ensure the pseudonymisation of the data or the total destruction thereof.  

If Users withdraw their consent or exercise their rights of cancellation or erasure, their personal data will be kept blocked at the disposal of the Administration of Justice for the periods established by law to address potential liabilities arising from their processing. Subsequently, they will be erased with appropriate security measures to ensure the pseudonymisation of the data or the total destruction thereof.  

Finally, and provided that you have not withdrawn your consent for this purpose, the Controller will store your data in order to keep you updated on the products, events and services that could be of interest to you.  

 

To whom will we disclose your data? 

The personal data collected through the Website and/or the Application will not be transferred to any third party to be used for their own purposes other than those for which the User has consented to their processing.  

However, the User’s personal data may be accessed by the authorised staff of the Controller and other third parties or collaborators that provide services to the Controller to manage the provision of services as well as the contractual and/or precontractual relationship with the Users. In cases where access to other collaborating companies is allowed, such access to data by third parties will be regulated in the corresponding agreement, as required by the current regulations. 

To process personal data, the Controller may use the services of data processors or sub-processors that host some of your data outside the European Union and the European Economic Area. This could involve an international transfer of data to countries that the European Union deems not to have an adequate level of data protection. For example, their laws may not guarantee the data subject the same rights, or there may be no data protection supervisory authority capable of addressing your complaints. 

Notwithstanding the above, the Controller ensures that, in the event that data sharing outside the European Economic Area, the international transfers are subject to one of the appropriate guarantees described in the applicable regulations, such as the signing of the standard data protection clauses.  

The Controller may also disclose personal data collected in specific cases in which such transfer is established and required by the applicable regulations; or when required by the competent authorities.  

 

What security measures have we put in place to ensure the safety of your data? 

In order to protect the safety of your personal data, we inform you that the Controller has adopted all the technical and organisational measures necessary to guarantee the security of the personal data provided. All this is to avoid their alteration, loss and/or processing and unauthorised access, although absolute security does not exist. 

 Likewise, the Controller informs you that all our staff, regardless of the stage of the processing they are involved in, have committed to process your data with the utmost care and confidentiality.   

 However, the User must bear in mind that the security measures on the Internet, due to their nature and global scope, are not impenetrable. 

 

What are your rights when you provide us with your data?   

Any person is entitled to obtain confirmation as to whether or not we process personal data concerning them.  

 The data protection rights held by the data subjects are: 

 

• Right to request access to the personal data concerning the data subject. 
• Right to rectification or erasure. 
• Right to object. 
• Right to request restriction of processing. 
• Right to data portability. 

 

Data subjects may exercise their personal data protection rights by sending written communication to the Controller’s registered office or to the e-mail address provided for this purpose (legal@wamesports.com), including, in both cases, a photocopy of their D.N.I. or other equivalent ID document.  

 In addition, we inform you that the corresponding models, forms and other information about your rights are available on the website of the national supervisory authority of the Spanish Data Protection Agency [AEPD], www.agpd.es.  

 

Duty of confidentiality 

The Controller undertakes to maintain the confidentiality of the data and information provided and to instruct all its staff or collaborators to follow the Controller’s instructions regarding the processing of these personal data and any other information or circumstances that they become aware of or have access to in the exercise of the functions entrusted to them. 

 

Obligation of the data subject 

The User guarantees that the data provided are true, accurate, complete and up-to-date, and is responsible for any direct or indirect damage that may be caused as a result of the breach of such obligation. In the event that the data provided belong to a third party, the User guarantees that they have informed said third party of the aspects contained herein and obtained their authorisation to give their data to the Controller for the indicated purposes.  

 

Can I withdraw consent? 

You have the possibility and the right to withdraw consent for any specific purpose granted at the time without affecting the lawfulness of the processing based on consent prior its withdrawal. 

 To do so, you only need to notify us by sending an e-mail to legal@wamesports.com or by regular mail to the Controller, including a photocopy of your D.N.I., passport or other equivalent ID document.  

 

Where can I complain if I believe that my data are not being processed correctly? 

If you believe that your data are not being processed correctly by the Controller, you can address your complaints to legal@wamesports.com or to the competent supervisory authority, the Spanish Data Protection Agency. 

 

Mailing Address: c/ Jorge Juan, 6, Madrid, 28001. 

Website: www.agpd.es 

Phone: +34 912 66 35 17 

 Phone (from Spain):  901 100 099