Legends Hospitality España, S.L. Privacy Policy

Identity and contact details of the controllers.

Legends Hospitality España, S.L., domiciled at Paseo de la Castellana, número 53, 1-b, 28046 Madrid, with employer identification number B-88644299, and telephone number +1 212 317 3200 ("Legends"), and Real Madrid, domiciled at Avenida de Concha Espina, nº 1, Madrid, España, 28036, with employer identification number G-28034718, and telephone number +34 91 398 43 00 ("Real Madrid"). Legends and Real Madrid ("Companies") are the joint controllers of the personal data.

The purpose of this Privacy Policy is to provide information on:

  • The use that the Companies will make of your personal data through the web page https://madridista-platinum.realmadrid.com (the "Website", "Web" or "Store").

  • Where Companies are processing your data jointly and where each of them processes your data separately.

  • The legal basis that enables the Companies to process your data for each of the uses indicated.

  • The retention period of your data by the Companies.

  • Who we share your data with.

  • Your rights under the General Data Protection Regulation ("GDPR").

If you have any questions regarding the processing of your data, or if you want to know more about the joint-controller agreement, please contact the Companies at:

Legends Legal: 61 Broadway, Suite 2400, New York, NY 10006, dataprivacy@legends.net
Real Madrid's DPO: Avenida de las Fuerzas Armadas, 402, 28055 Madrid, protecciondedatos@corp.realmadrid.com.

  1. Purposes and legal basis of the processing

2.1. Your data will be processed exclusively by Legends for the following purposes:

  1. The provision of the service requested by the Clients and Users, which includes:

  2. The registration as a User on the Website, if you opt to do so, to remember your details for future transactions.

  3. The management of purchases: handling the order placed, shipping of the order, and managing billing and debt collection.

This is all based on compliance with the Store Terms and Conditions.

  1. The management of the relationship with Clients and Users, which includes:

  2. Customer service and the processing of communications necessary for the provision of products and requests made by Customers and Users.

  3. The management of claims and requests for information made in relation to products purchased on the Store.

  4. Carrying out loyalty actions, including sending satisfaction surveys and reminders of purchases initiated on the Web and not completed.

  5. Statistical analysis of transactions, complaints, and claims, as part of a process of continuous improvement of our services.

This is all based on the legitimate interest of Legends in ensuring business continuity and maintaining a satisfactory relationship with Clients and Users.

  1. Accounting and tax management of the activity, as necessary to comply with legal obligations applicable to the owner of the Store.

2.2. Your data will be processed exclusively by Real Madrid for the following purposes:

  1. Ensuring business continuity and supervising and controlling the activity developed by Legends, based on the legitimate interest of Real Madrid in guaranteeing the appropriate development and evolution of its official Online Store.

  2. If you have given your consent, Real Madrid, C.F. will process your data to send you information and commercial communications, including by electronic means and after profiling, referring to products, services, and activities of Real Madrid, including the Online Store, and those of its sponsors and collaborators, as well as related statistical analysis.

2.3. Your data will be processed jointly by Legends and Real Madrid, as joint controllers, for the following purposes:

  1. Only if you have given your consent, sending commercial communications concerning the Online Store and its products, including by electronic means and after profiling, and subsequent statistical analysis.

  2. Analytics of the use and web traffic on the Online Store, based on legitimate interest in improving the Online Store, user experience, and product and service offerings.

In addition, exceptionally, Companies may process your data for control and security purposes, legal advice, and regulatory compliance, as necessary to protect their interests and comply with legal obligations.

If you have consented to cookies, your data will also be processed in accordance with the Cookie Policy.

  1. Necessary, up-to-date information

Completion of all mandatory fields in forms is compulsory. Failure to do so may prevent access to services.

You must inform the Companies of any changes to your data as soon as possible via dataprivacy@legends.net.

  1. Retention period of your data

Your data will be stored for the duration of the relationship with the Online Store and thereafter blocked for legally required periods for potential claims.

If you have consented to receive commercial communications, your data will be processed until you object. You may unsubscribe at any time.

Newsletter subscriber data will be stored until cancellation is requested.

Cookies collect personal data in accordance with the Cookie Policy and applicable retention periods.

  1. Who we share your data with

We may disclose your personal data to:

  • Tax authorities and other public bodies when required by law.

  • Judges, courts, security forces, and notaries when necessary.

Service providers may access data strictly for necessary purposes, under appropriate safeguards.

Legends’ providers include:

  • Shopify (store platform)

  • Weglot (translation services)

  • Third Blink Software, Inc. (Rewind) (backup solution)

  • Essentiel (customer service)

  • Infor Inc. (ERP system, cloud hosted in Frankfurt)

  • Third-party logistics providers:

    • Makito (Madrid, Spain)

    • WFDS (Victoria, Australia)

    • Legends Hospitality, LLC dba Legends Global Merchandise (Indianapolis, USA)

Real Madrid’s providers include:

  • Cheetah (commercial communications)

  • Microsoft Ireland Operations Ltd. (storage)

  • M2C Consulting Procedures (data integration)

  • Sogeti España, S.L.U. (IT services)

  • Legal, consulting, and auditing firms including Garrigues, Ernst & Young, and others

  • Audisec, S.L. (data protection incident registration)

  • Other complementary or replacement suppliers

You may request further details on data recipients by emailing dataprivacy@legends.net.