Privacy Policy

  1. Identity and contact details of the joint controllers.

Pursuit 3 Marketing Group S.L., domiciled at Calle Alicante, 3, 28523, Rivas Vaciamadrid (Madrid), España, with company registration number 67991307, and telephone number +1 604 551 7633 ("P3") and Real Madrid domiciled at Avenida de Concha Espina, nº 1 de Madrid, España, 28036, with employer identification number G-28034718, and telephone number +34 91 398 43 00 ("Real Madrid"). P3 and Real Madrid ("Companies") are the joint-controller of the personal data processed in the context of the Marketplace (as defined below). The Companies are, in turn, joint controllers of the treatment as indicated in this Policy.

The purpose of this Privacy Policy is to provide information on:

  • The use that the Companies will make of your personal data through the Official Memorabilia Santiago Bernabéu Stadium Marketplace https://memorabilia.realmadrid.com(the "Website", "Web" or "Marketplace").
  • Where Companies are processing your data jointly and where each of them process your data separately.
  • The legal basis that enables the Companies to process your data for each of the uses indicated.
  • The retention period of your data by the Companies.
  • Who we share your data with.
  • Your rights under the General Data Protection Regulation ("GDPR").

If you have any questions regarding the processing of your data, or if you want to know more about the joint-controllership agreement, please contact the Companies at:

P3 Legal: Calle Alicante, 3, 28523, Rivas Vaciamadrid (Madrid), España, mailto:[email protected]

Real Madrid's Data Protection Officer: Avenida de las Fuerzas Armadas, 402, 28055, Madrid, [email protected].

  1. Purposes and legal basis of the processing

All personal data will be directly obtained from the Client and User.

2.1. Your data will be processed exclusively by Real Madrid for the following purposes as the independent data controller:

  1. Ensuring business continuity as well as in order to supervise and control the activity developed by P3. This is all based on the legitimate interest of Real Madrid in guaranteeing the appropriate development and evolution of its official Marketplace. Real Madrid has undertaken a balancing test (available upon request) to ensure that its legitimate interest is not overcome by the rights and interests of the data subjects.
  2. To send you information and commercial communications, according to the preferences selected in your subscription manager, including by electronic means and after profiling, referring to products, services and activities of Real Madrid and of its sponsors and collaborators, and the subsequent statistical analysis relating to these communications exclusively by the Club (without any data transfer).
  3. For the accounting and tax management of the activity, since it is necessary to comply with the respective legal obligations applicable to Real Madrid (mainly those provided in the Commercial Code and tax regulations).
  4. Very exceptionally, for control and security purposes, own legal advice and regulatory compliance, as it is necessary to satisfy the legitimate interest in defending the interest and rights of Real Madrid, and to comply with the legal obligations to which Real Madrid is obliged to (audit, compliance with criminal regulations and data protection).

2.2. Your data will be processed jointly by P3 and Real Madrid, as joint controllers, for the following purposes:

  1. The provision of the service requested by the Clients and Users, which includes:
  • The registration as a User on the Website, if you opt so, to remember your details for future transactions.
  • The management of the purchases: Handling the order placed, shipping of the order and managing the billing and debt collection.

This is all based on the performance of contract (the Marketplace Terms and Conditions) established with User.

  1. The management of the relationship with Client and Users, which includes:
  • Customer service and the processing of communications necessary for the provision of products and requests made by Customers and Users.
  • The management of claims and requests for information made in relation to products purchased on the Store.
  • To carry out loyalty actions consisting in sending satisfaction survey as well as reminders of purchases initiated on the Web and not completed (without promotional or marketing alike content).
  • The statistical analysis of transactions, complaints and claims, as part of a process of continuous improvement of our services

This is all based on the legitimate interest of both Real Madrid and P3 in ensuring business continuity and in keeping with our Clients and Users a relationship as satisfactory as possible for them. Both entities have undertaken a balancing test (available upon request) to ensure that their legitimate interests are not overcome by the rights and interests of the data subjects.

  1. Analytics of the use and web traffic on the Website, as it is needed to satisfy our legitimate interest in improving the Marketplace, the user experience and the offer of products and services. Both entities have undertaken a balancing test (available upon request) to ensure that their legitimate interests are not overcome by the rights and interests of the data subjects.

2.3. Your data will be processed exclusively by P3 for the following purposes as the independent data controller:

  1. For the accounting and tax management of the activity, since it is necessary to comply with the respective legal obligations applicable to P3 (mainly those provided in the Commercial Code and tax regulations).
  2. Very exceptionally, for control and security purposes, own legal advice and regulatory compliance, as it is necessary to satisfy the legitimate interest in defending the interest and rights of P3. P3 has undertaken a balancing test (available upon request), to ensure that their legitimate interests are not overcome by the rights and interests of the data subjects and to comply with the legal obligations to which P3 is obliged to (audit, compliance with criminal regulations and data protection).

Please also note that, if you have consented cookies through the Website, your data will also be processed for the purposes indicated for each type of cookie, in accordance with our Cookie Policy.

  1. Necessary, up-to-date information

Completion of all the fields marked with an asterisk (*) or regarding which the system requires completion in the forms provided is compulsory. Failure to fill out any of these fields could prevent you receiving the services. This does not include cases where your consent is requested (purposes are detailed above).

In order to ensure that the information provided is always up to date and does not contain errors, you should inform the Companies as soon as possible of any amendments to or changes in your data at reception or via the following email: mailto:[email protected].

  1. Retention period of your data

We will store your data for the duration of the relationship with the Marketplace and after that, we remain the data blocked, for the legal period provided in each case and time for the potential formulation or defense of claims.

We will also store your data to comply with our legal obligations requiring us to keep it for a period of time (e.g. 6 years in relation to our obligations under the Commercial Code).

If you have given us your consent to send you commercial communications, your data will be processed for this purpose as long as you do not object. At any time, you can request the cancellation of this type of communication, either as indicated in the section "Exercise of your rights", or through the unsubscribe system provided in each of the electronic communications we send you.

If you simply visit our Website, please note that the necessary cookies, as well as any other cookies you have accepted, also collect personal data from you. In such a case, that data will be kept for the periods of time indicated in the cookie banner and in the Marketplace's Cookies Policy.

  1. Who we share your data with

We may disclose your personal data to:

  • Between the Companies for the purposes of performing the relation with Users (the Marketplace Terms and Conditions).
  • Tax authorities and other public bodies and entities authorized by law, when required by law.
  • Exceptionally with judges, courts or other bodies for the resolution of conflicts, Security Forces and Notaries based on our legal obligation or our legitimate interest in defending our rights as indicated above).

In addition, our following providers acting as data processors (i.e. processing personal data on behalf of the Companies or one of them) may have access to some of your data in order to perform their functions, but we make sure that they put in place high level protection guarantees and that they can only use your data for what is strictly necessary in relation to the purposes detailed above.

P3' providers:

– Providers that authenticate the Products that you register and/or validate with us.

– Providers that perform payment processing activities.

– Providers that help us manage the website.

– Providers that provide customer service.

– IT and storage service providers.

– Providers of product manufacturing and order fulfillment services.

– Professionals or companies providing legal advice, contracting, consultancy and/or auditing.

– Other suppliers that may complement or replace the above.

Real Madrid's providers:

– Providers of services related to data integration and the sending of commercial communications.

– IT and storage services providers.

– Professionals or firms of legal advice, procurement, consultancy and/or auditing.

– Other suppliers that may complement or replace the above.

You may request more detailed information on the recipients of your data by sending an email to [email protected] indicating the specific processing for the recipients in relation to which you require information.

International Transfer of your data

Your data may be accessed by data managers established outside the European Economic Area.

  • In particular, P3 may carry out the following international transfers of your data:
    • Specifically, your personal data will be accessed by systems, logistic and technology service providers located in the USA and Canada, with whom the Companies have formalized the standard contractual clauses approved by the European Commission as appropriate safeguards for the rights of the data subjects.
    • These data managers may also be located in Canada. This country has been designated by the European Commission as having an adequate level of data protection comparable to that of the European Union and therefore already has sufficient guarantees to carry out international transfers of personal data.
    • These data managers may also be located in the United Kingdom. This country has been designated by the European Commission as having an adequate level of data protection comparable to that of the European Union and therefore already has sufficient guarantees to carry out international transfers of personal data.
  • Real Madrid, may carry out the following international transfers of your data:
    • In most cases your data will not be transferred outside of the European Economic Area, nor will your data be accessed outside of said territory, except for our supplier Microsoft Ireland Operations Limited, that may transfer your personal data to its servers in the United States of America. For these data transfers, the Standard Contractual Clauses approved by the European Commission are applied which, after the necessary assessments, have been deemed to provide sufficient guarantees regarding your data protection rights in the country of destination.
  • Very exceptionally both P3 and Real Madrid may need to transfer your personal data to judges, courts or other bodies for the resolution of conflicts outside de European Economic Area, the transfer being legitimated as it is necessary for the formulation, exercise or defence of claims, as the case may be.
  • You may request more detailed information on the international transfers of your data by sending an email to [email protected]indicating the specific recipients, destination or applied safeguards in relation to which you require information.
  1. Confia

In order to offer you Confia’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Confia, in order for Confia to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Confia’s own privacy notice.

  1. Exercise of your rights

You may exercise the following rights:

  • the right of access to your personal data to know which data are being processed and the processing operations that are being performed with that data, and request a copy of them.
  • the right to rectification of any inaccurate / incomplete data;
  • the right to erasure of your personal data, where possible;
  • the right to request the restriction of the processing of your personal data in the cases permitted by the data protection laws;
  • the right to object to the processing of your personal data, when the legal basis that enables us to process them, of those indicated in point 2, is legitimate interest. The Companies will cease to process your data unless it has a compelling legitimate interest to do so or it is necessary for the defense of claims;
  • the right to data portability, when the legal basis that enables us to process your data, set out in point 2, is the existence of a contractual relationship or your consent;
  • the right to revoke your consent, when the legal basis that enables us to process your data, set out in the table included in point 5, is your consent.

You may exercise your rights at any time, without charge, by sending an email to P3 at [email protected], indicating the right you wish to exercise and your personal particulars. Having said this, you may exercise your rights in respect of and against each of the Companies.

You may also lodge a complaint with the Spanish Data Protection Agency if you consider that data protection legislation has been breached in the processing of your personal data. Other European Supervisory Authorities can be accessed here.

  1. Confidentiality

The personal data we may collect will be processed as confidential and we undertake to keep such data confidential in accordance with applicable legislation.

In respect to your account, you are solely responsible for the accuracy of the information provided on the Marketplace and the maintenance of confidentiality in relation to the password and login information of your account. If you believe the security of your password has been compromised or it has been used in an unauthorised manner, you must inform us immediately

  1. Updates to the privacy policy

This Privacy Policy may need to be updated. You should therefore review this policy periodically and if possible every time you make a reservation with us in order to ensure that you are duly informed of the type of information collected and its processing. We will inform you of any changes to this privacy policy that affect the processing of your personal data.