Privacy Policy

PRIVACY POLICY

IDENTIFICATION

• Data Controller: SMARTNET SL (hereinafter, "SMARTNET")
• Tax ID: B86133360
• Registered Office: CALLE INVESTIGACION 1, 28906 GETAFE, MADRID, SPAIN.
• Email:

INFORMATION

• By accepting this Privacy Policy, the user (hereinafter, the "User" or, where applicable, the "Users") is informed that the personal data provided through the website located at the URL https://shop.rfef.es/ (hereinafter, the "Website"), will be processed by SMARTNET, as well as data derived from their browsing and any other data that the User may provide in the future.
• The User must carefully read this Privacy Policy, which has been drafted clearly and simply, to facilitate its understanding, allowing the User to freely and voluntarily determine whether they wish to provide their personal data to SMARTNET.

OBLIGATORY NATURE OF PROVIDING DATA

• The data requested in the forms on the Website are, in general, mandatory (unless otherwise specified in the required field) to fulfill the purposes for which they are being collected.
• Therefore, if the User does not provide them or does not provide them correctly, the User's requests cannot be met, without prejudice to the fact that they may freely view certain content on the Website.

ORIGIN OF THE DATA

• The data processed by SMARTNET for the purposes listed in the next section come from:
• The User themselves: the data provided by the User themselves through the different forms on the Website, the data obtained from the User's use of the Website and their browsing through it (through cookies or data storage and retrieval devices), taking into account the consents that, where appropriate, they give to SMARTNET.
• Third-party sources: only in those cases where the User gives their consent for it, because the User has accepted that SMARTNET creates a profile with their personal data in order to send them commercial communications adjusted to their tastes and preferences. Specifically, SMARTNET may obtain information about the User's browsing.

WHAT PROCESSING WILL SMARTNET CARRY OUT WITH THE USER'S DATA?

• The personal data provided through the Website or other means made available to Users will be processed by SMARTNET in accordance with the following:
• Management of official store product sales:
• Purpose: to manage the sales process of official store products, as well as to provide the user with the necessary information to correctly complete the purchase and its subsequent processing.
• Legal basis: the data processing derived from this purpose will be based on the fulfillment of the contractual relationship.
• Type of data processed: Identification data, Contact data, Professional data, Economic and financial data, and other data related to the query or request made.
• Retention period: the data will be processed for this purpose until the contractual relationship ends and, once it has ended, during the limitation period for legal actions that may arise from it.
• Responding to questions raised by the User through the enabled contact channels:
• Purpose: to manage, process and support the User's requests, inquiries, incidents, claims or questions made through the different communication channels made available to them.
• Legal basis: the data processing derived from this purpose is the consent that the user may withdraw at any time. If the User withdraws consent, the query or question raised cannot be processed.
• Type of data processed: Identification data, Contact data, and any other data provided in relation to the query or request.
• Retention period: the data will be kept for the necessary period to process and respond to your request and, once completed, during the limitation period for legal actions arising from the said request.
• Sending commercial and promotional communications from third parties:
• Purpose: sending commercial communications by electronic means (SMS, email, etc.) related to products and services offered by collaborating third parties.
• Legal basis: the processing derived from this purpose is based on the consent that the User grants by ticking the box enabled for this purpose, which can be withdrawn at any time.
• Type of data processed: Identification data and Contact data.
• Retention period: the data will be processed for this purpose until the User revokes their consent.
• Sending commercial and promotional communications by SMARTNET about products and services similar to those contracted:
• Purpose: SMARTNET may send commercial communications by electronic means (SMS, email, etc.) for products similar to those contracted, provided that the User has not expressed their opposition to it.
• Legal basis: the processing derived from this purpose is legitimate interest based on the exception provided in article 21.2 of the Information Society Services Law and the provisions of recital 47 of the General Data Protection Regulation. This legitimate interest is based on direct marketing to achieve customer loyalty, and the User has the right to object at any time.
• Type of data processed: Identification data and Contact data.
• Retention period: the data will be processed for this purpose until the User objects to their sending.
• Creating a commercial profile of the User based on the User's preferences, using third-party sources:
• Purpose: to use the information obtained from the User's browsing on the Website to offer the User products and services according to their interests, if the User authorizes it by ticking the box enabled for this purpose. In case of authorization, it will be carried out automatically in order to adjust commercial communications, and consent can be revoked at any time.
• Legal basis: the processing will be based on the consent provided by the User by ticking the corresponding box.
• Type of data processed: Identification, contact, location, economic and financial data, data on contracted services, provided content and browsing data.
• Retention period: the data will be processed for this purpose until the User revokes their consent.
• Creating a commercial profile based on the information provided by the User to SMARTNET:
• Purpose: to send you commercial communications that may be of interest to you, and the User may object at any time.
• Legal basis: the processing will be based on legitimate interest in order to offer communications that may be of interest to you, recognizing the right to object.
• Type of data processed: Identification, contact, location, economic and financial data, data on contracted services, provided content and any other data provided.
• Retention period: the data will be processed for this purpose until the User objects to the processing and, in no case, will refer to a period longer than one (1) year.
• Conducting quality and satisfaction surveys with Users:
• Purpose: to ascertain the Users' opinion regarding the services provided by SMARTNET, as well as to carry out analysis of the reports and statistics obtained.
• Legal basis: the processing will be based on the legitimate interest of being able to offer services with the highest quality and best possible experience. Personal information will be deleted once the anonymous statistical report is prepared.
• Type of data processed: Identification data, Contact data, Data about contracted services or products, and opinions or comments provided.
• Retention period: the data provided will be kept for the duration of the surveys and, once completed, during the limitation period for legal actions that may arise.
• Use of Artificial Intelligence (AI) chatbots:
• Purpose: to use automated assistance tools based on Artificial Intelligence (chatbots) to manage queries, improve User experience, offer personalized support, and optimize internal processes.
• Legal basis: the data processing derived from this purpose will be based on the Customer's consent, as well as SMARTNET's legitimate interest to detect and improve the attention provided.
• Type of data processed: Identification data, contact data, data derived from interaction with the chatbot (queries, messages, and metadata), and any other information provided voluntarily.
• Retention period: the data will be kept for the necessary period to process and respond to the request and, once completed, during the limitation period for legal actions.
• In the event that the User provides third-party data, they declare to have their consent and undertake to transfer the information in this Privacy Policy to them, exempting SMARTNET from any responsibility. SMARTNET may carry out appropriate verifications according to regulations.

WITH WHOM WILL THE USER'S DATA BE SHARED?

• All personal data provided by the User through the Website may be communicated to:
• Public Administrations, in cases provided by law, based on compliance with a legal obligation.
• Courts and Tribunals, in cases provided by law, based on compliance with a legal obligation.
• The Royal Spanish Football Federation, so that it can send its own commercial communications, based on the consent granted by means of the enabled box.
• In addition, SMARTNET will collaborate with third-party service providers who may have access to your personal data as data processors (legal advice and technological and IT services), under strict contracts according to Art. 28 of the GDPR.

INTERNATIONAL DATA TRANSFERS

• To execute the described processing purposes, authorized subcontractors (internet providers, hosting, technical support, etc.) acting as data processors may be used.
• When these are located outside the European Economic Area, an international transfer will be made in accordance with data protection regulations.
• In general, these will be avoided, and data will be processed within the European Economic Area. If necessary, organizational, technical, and contractual measures (such as European Commission Standard Contractual Clauses or "SCCs", impact assessments, encryption, pseudonymization, etc.) will be adopted to ensure security.

COMMERCIAL AND PROMOTIONAL COMMUNICATIONS

• Law 34/2002, of July 11, on information society services and electronic commerce, allows for identifiable commercial communications through the internet and electronic means.
• If the User has authorized it or has not objected, SMARTNET will process the data to send information related to products, services, promotions, offers, events, or relevant news.
• If you wish to unsubscribe, the User can request it by sending an email or by clicking on the link at the bottom of the communications received.

USER RESPONSIBILITY

• The User guarantees that they are over fourteen (14) years of age and that the data they provide are true, accurate, complete, and up-to-date, being responsible for their veracity and maintenance.
• Likewise, they guarantee that they have informed and obtained the authorization of third parties whose data they provide, if applicable.
• In any case, the User will be responsible for false or inaccurate information and for direct or indirect damages that they cause to SMARTNET or to third parties.

EXERCISE OF RIGHTS

• As the data owner, the User can send a written request to SMARTNET, to the address indicated in the heading, or by email to dpo@gfmservicios.com, proving their identity free of charge to exercise the following rights:
• Right of access: To know if SMARTNET is processing your data and to access information about the purposes, categories, recipients, and retention period, among others.
• Right to rectification: To request the rectification of inaccurate data concerning you.
• Right to erasure: To request the deletion of your personal data when the legal requirements are met.
• Restriction of processing, withdrawal of consent, and objection: To request the restriction of processing in certain circumstances, withdraw the consent granted, or object to the processing for reasons related to your particular situation when it is based on legitimate interest (including direct marketing and profiling). SMARTNET will cease processing unless there are compelling legitimate grounds.
• Data portability: To receive the data provided in a structured, commonly used, and machine-readable format to be able to transmit them to another controller in the cases provided by law.
• Automated individual decision-making: Right to obtain human intervention from SMARTNET, express your point of view, and challenge decisions based on automated processing or profiling.
• Other rights and complaints: Right to be informed about the safeguards for transfers to third countries. You may also lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 - Madrid) if you believe that SMARTNET has violated your rights.

SECURITY MEASURES

• SMARTNET will process the User's data at all times with absolute confidentiality and maintaining the mandatory secrecy, adopting the necessary technical and organizational measures to guarantee security and prevent alteration, loss, processing, or unauthorized access.

CHANGES

• SMARTNET reserves the right to review its Privacy Policy when it deems it appropriate, communicating it to Users. Please regularly check this statement to read the most recent version.

ACCEPTANCE AND CONSENT

• The User declares to have been informed of the conditions on personal data protection, accepting the content of this Privacy Policy.

CLOSING INFORMATION

• Last updated: April 2026
• All rights reserved.