In accordance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, the “GDPR”) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (hereinafter, the “LOPDGDD”), this Privacy Policy (hereinafter, the “Privacy Policy” or the “Policy”) aims to inform all users (hereinafter, the “Users”) subject to it about the possible processing of their personal data.
When Users visit www.celtaexperience.invbit.system (hereinafter, the “Website”) and when they request information through the forms available on the Website, GALICIA SPORT 360, S.L (hereinafter, the “Company” or “GS360”) may process their personal data. Likewise, this Privacy Policy shall apply to any communication between Users and GS360.
This Privacy Policy is intended to help you understand what data GS360 collects and what it does with it. In this regard, this Privacy Policy explains, among other matters:
- what information GS360 collects and for what purposes;
- how GS360 uses such information; and
- the options GS360 offers in relation to the information collected.
For the purposes of this Policy, a User shall be understood as any natural person who accesses, browses, uses or interacts with the Website and/or the services offered through it, whether free of charge or through registration.
1. Identification of the Data Controller
Data Controller: GALICIA SPORT 360, S.L.
Registered address: Calle Príncipe 44, 36202 Vigo (Pontevedra), Spain
Tax ID (NIF): B10528479
Email: lopd@gs360.es
2. Personal data we process
GS360 collects personal data in the following ways:
- Personal data that the User provides to us: when filling in the form available on the Website or when contacting GS360.
- Through Cookies and similar technologies: when visiting the Website, GS360 uses various technologies to collect and store information, which may include the use of cookies or similar technologies to identify your browser or device. You can obtain more information about how GS360 processes personal data obtained through cookies in the Cookie Policy.
Such personal data may generally be grouped into the following categories:
- Identification data: first name, surname(s), postal address, email address and telephone number.
3. Purposes of processing and legal basis
At GS360, we will process your data for the following purposes:
| Purpose | Description | Legal basis |
| Management of requests | The information provided allows us to manage more efficiently the requests of those candidates who begin the admission process for a programme offered by GS360, as well as to assess their skills for inclusion in the programme for which they are applying. | Legitimate interest in responding to the User’s requests through the forms and/or contact channels. We understand that the processing of these data is also beneficial to the User insofar as it enables us to assist them properly.
|
| Management of applications
| We use your contact details, in the event that the candidate has been admitted, to initiate the enrolment process.
| The processing is necessary and essential in order to carry out the preparatory (pre-contractual) steps aimed at entering into a contract, following a prior request for information by the end customer who gets in touch with us. |
| Delivery of training activities | If you are admitted to the programme, we will process your personal data for the management and delivery of the training activities.
| If the interactions initiated through the website lead to the formalisation of a contract with the User, the data will be processed on the basis of the performance of that contract and compliance with legal obligations. |
| Sending commercial communications about products and services that may be of interest to you. | Occasionally, we may send you Company updates, promotions or information related to products or services similar to those contracted or in which you have shown interest. You may unsubscribe at any time using the link provided for this purpose in each communication. | Legitimate interest supported by the Information Society Services Act (Article 21 of the LSSI) to send information about products and/or services similar to those initially contracted.
In all other cases, the legal basis is the consent given by the User, which may be withdrawn at any time by sending an email to lopd@gs360.com |
4. Retention period
The retention period of your data will depend on the purposes for which we process them:
| Type of data | Retention period |
| Browsing data | For more information about cookies, please refer to our Cookie Policy. |
| Candidate data | We will process the data while the relationship between the programme candidate and GS360 is maintained; if subsequently admitted, for the duration of the contractual relationship. Once this has ended, until the expiry of the associated legal liabilities. |
| Data used for commercial communications | We will process the data as long as the User does not object to such processing or, where applicable, until consent is withdrawn (without this affecting the lawfulness of the processing carried out prior to withdrawal). |
5. Recipients
Certain data may be disclosed to other entities within the CELTA GROUP (Real Club Celta de Vigo, S.A.D., Afouteza e Corazón S.L.U. and Fundación Celta) for the proper administrative management of our services. These entities act as data processors and are therefore subject to our instructions, do not use the data for their own purposes, and are bound by confidentiality agreements and compliance with the applicable data protection regulations.
As a general rule, GS360 does not carry out international data transfers outside the European Economic Area (EEA). In the event that it is necessary to transfer personal data to recipients located in countries outside the EEA, an adequate level of protection will be ensured in accordance with Article 46 of the GDPR, by adopting one or more of the following safeguards: (i) the destination country has an adequacy decision issued by the European Commission; (ii) the recipient has signed the standard contractual clauses approved by the European Commission; (iii) the processing is covered by duly approved binding corporate rules; or (iv) any other mechanism recognised by the GDPR that ensures a level of protection equivalent to that of the EEA.
6. Rights
Users may exercise the following rights before GS360 in relation to their personal data: access; rectification; erasure; restriction of processing; data portability; and objection, by sending a written request accompanied by documentation and/or information proving their identity, expressly indicating which of the above rights they wish to exercise, to lopd@gs360.es.
Likewise, where the processing of the data subject’s personal data is based on the consent given by the data subject, they have the right to withdraw such consent at any time, without this affecting the lawfulness of the processing based on consent prior to its withdrawal.
In any case, the User has the right to lodge a complaint with the relevant supervisory authority if they deem it appropriate to do so.
7. Changes or modifications to our Privacy Policy
We may revise this Privacy Policy from time to time and publish the most up-to-date version on our Website. We will inform you if your rights are materially affected as a result of any revision.