Privacy Policy
1. Information for the user
GureMedia S.L., as Data Controller, hereby informs you that, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights (LOPDGDD), we will process your data as set out in this Privacy Policy.
In this Privacy Policy we describe how we collect your personal data and why we collect it, what we do with it, with whom we share it, how we protect it and your options regarding the processing of your personal data.
This Policy applies to the processing of your personal data collected by the company for the provision of its services, both through the website setpiecescoach.com and through the «Set Pieces Coach» mobile application (available for iOS and Android). If you accept the measures of this Policy, you accept that we process your personal data as defined therein.
2. Data Controller
- Company name: GureMedia S.L.
- CIF: B05331103
- Trade name: Set Pieces Coach
- Registered address: C/ Javier de Barkaiztegui, 3 (este) – Entlo. B, 20010 San Sebastián (Gipuzkoa)
- Email: contacto@setpiecescoach.com
3. Key principles
We have always been committed to providing our services to the highest standard of quality, which includes processing your data securely and transparently. Our principles are:
- Lawfulness: we will only collect your personal data for specified, explicit and legitimate purposes.
- Data minimisation: we limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it is collected.
- Purpose limitation: we will only collect your personal data for the stated purposes and only in accordance with your wishes.
- Accuracy: we will keep your personal data accurate and up to date.
- Data security: we apply technical and organisational measures that are appropriate and proportionate to the risks in order to ensure that your data does not suffer harm, such as unauthorised disclosure or access, accidental or unlawful destruction, accidental loss or alteration, and any other form of unlawful processing.
- Access and rectification: we have means in place for you to access or rectify your data whenever you consider it appropriate.
- Retention: we retain your personal data lawfully and appropriately, and only for as long as is necessary for the purposes for which it was collected.
- International transfers: where it occurs that your data is to be transferred outside the EU/EEA, it will be adequately protected.
- Third parties: access to and the transfer of personal data to third parties is carried out in accordance with the applicable laws and regulations and with appropriate contractual safeguards.
- Direct marketing and cookies: we comply with the applicable legislation on advertising and cookies.
4. Data we process and purposes
The types of data we collect and process depend on the channel through which you interact with us. We distinguish between the processing carried out through the website and that carried out through the mobile application.
4.1. Through the website
The categories of data that may be requested and processed are:
- Identifying data (for example, the data you provide when completing contact or subscription forms).
- Browsing data collected automatically about your visit to our website, as described in the Website's Cookie Policy.
In general, we collect and process this data for the purpose of:
- Providing information, services, products, relevant information and news in the sector.
- Managing the sending of communications that you request from us or to which you subscribe.
4.2. Through the «Set Pieces Coach» application
The application requires the creation of a user account in order to use it. In this context we process the following categories of data:
- Account data: email address and password. The password is always stored encrypted (by means of hash functions) and never in plain text. Optionally, the first name and surname that you choose to provide.
- Content generated by you: the sporting information that you create and manage within the application —teams, players, set-piece plays, match plans, match records and settings—. This content is securely synchronised between your devices through our servers so that you can access it from any of them.
- Technical and usage data: device identifier, platform (iOS/Android), application version, IP address, and connection and usage data (date and time of login and time of use). This data is processed for the purposes of operation, security and internal statistical analysis.
The purposes of processing in the application are:
- To provide the service: create and manage your account and synchronise your content between devices.
- To ensure the security of the service and prevent fraudulent or abusive use.
- To handle your support requests.
- To carry out our own statistical analysis of usage in order to maintain and improve the application.
The application does not display advertising, does not use advertising identifiers and does not share your data with third parties for commercial purposes. The usage analysis is our own and is not transferred to advertising networks.
The application is intended for persons over 16 years of age. We do not knowingly collect data from minors under that age.
5. Legal basis
In accordance with the applicable data protection regulations, your personal data may be processed on the following legal bases:
- Performance of a contract: the processing of account data and of the content that you create in the application is necessary to provide you with the service you request (the account and synchronisation).
- Consent: where you grant it to us for a specific purpose, such as the sending of commercial communications or the newsletter. You may withdraw your consent at any time.
- Legitimate interest: to ensure the security of the service, prevent abuse and carry out internal statistical analysis, provided that your rights and freedoms do not prevail; and to send commercial information to customers in relation to similar products or services.
- Compliance with a legal obligation where applicable.
6. Data retention
We will retain your personal data for as long as the relationship with you is maintained and you do not request its deletion. In the case of the application, we will retain your account data and your content for as long as your account remains active.
You may delete your account and the associated data from within the application itself, or by requesting it through the contact address indicated. Once the account has been deleted, we will erase your data, except for any data that we must retain by legal obligation for the legally established periods.
7. Disclosure of data and data processors
For the provision of the services we rely on trusted providers that act as Data Processors, with the contractual safeguards required by the regulations:
- Hosting providers: our servers are located in the European Union, where the application's data is securely stored.
- Application distribution platforms: the application is distributed through Apple App Store and Google Play. Downloading and, where applicable, the management of payments or subscriptions through these platforms are additionally governed by the privacy policies of Apple and Google.
- Payment gateways: where applicable, payments are processed through payment providers that process the data necessary to manage the transaction.
Beyond the above, the company will not make any disclosure of data to third parties, except by legal obligation.
8. Your rights
In relation to the collection and processing of your personal data, you may contact us at any time in order to:
- Access your personal data and any other information indicated in Article 15(1) GDPR.
- Rectify your personal data that is inaccurate or incomplete, in accordance with Article 16 GDPR.
- Erase your personal data in accordance with Article 17 GDPR.
- Restrict the processing of your personal data in accordance with Article 18 GDPR.
- Request the portability of your data in accordance with Article 20 GDPR.
- Object to the processing of your personal data in accordance with Article 21 GDPR.
If you have given your consent for a specific purpose, you have the right to withdraw the consent granted at any time, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.
You may exercise these rights by sending a reasoned and substantiated communication to contacto@setpiecescoach.com.
You also have the right to lodge a complaint with the competent supervisory authority (www.aepd.es) if you consider that the processing does not comply with the regulations in force.
9. Data security
We apply appropriate technical and organisational measures to protect your data. Communications between the application and our servers are encrypted using HTTPS/TLS, passwords are stored encrypted and access to your content is protected by your account. We periodically review our security measures in order to adapt them to the risks.
10. Legal information
The requirements of this Policy supplement, and do not replace, any other existing requirements under the applicable data protection law, which shall prevail in any case.
This Policy is subject to periodic review and the company may modify it at any time. When this occurs, we will notify you of any change and ask you to read again the most recent version of our Policy and to confirm your acceptance.