1. Data controller
Club Balonmano Puerto Sagunto, tax ID G46824439, Alfambra 24 Bajo, 46520 Puerto de Sagunto, Valencia. Privacy email: protecciondedatos@cbmpuertosagunto.com.
2. Data, purposes and legal bases
- Browsing and security: IP address, technical data and logs to provide and protect the service, based on the club's legitimate interests.
- Enquiries: data provided by email, telephone or WhatsApp to answer requests, based on consent or pre-contractual measures.
- Store: identity, contact, address, order and payment data needed to manage purchases, delivery, invoicing and after-sales service, based on the contract and legal obligations.
- Analytics and external services: enabled only with the consent selected in the cookie manager.
3. Recipients
Service providers may access data on behalf of the club, including hosting and IT support, Microsoft 365 and Graph for email, Stripe for payments, carriers and, where consent is given, Metricool and Google Maps. Data will also be disclosed to public authorities where legally required.
4. International transfers
Some providers may process data outside the European Economic Area. In such cases, adequacy decisions, standard contractual clauses or other safeguards provided by law will apply.
5. Retention
Data will be retained for as long as necessary for each purpose and to meet legal liabilities. Accounting and order records will be kept for the applicable tax and commercial periods. Analytics identifiers will be kept for no more than thirteen months; aggregated reports may be retained without directly identifying visitors.
6. Rights
You may request access, rectification, erasure, objection, restriction and portability, or withdraw consent, by writing to protecciondedatos@cbmpuertosagunto.com and identifying your request. You may also lodge a complaint with the Spanish Data Protection Agency. www.aepd.es.
7. Minors and security
Purchases must be made by adults or legal representatives. Personal data relating to under-age athletes is managed through the club's specific procedures. Technical and organisational measures are applied to protect information.
Last updated: 25 August 2026.