Privacy policy

This privacy policy (the “Policy”) explains what information the Orlegi Group collects from you through the websites, apps and digital platforms on which this Policy is placed (each a “Service,” and collectively, the “Services”). The “Orlegi Group” means the companies, affiliates and/or properties owned and managed by Orlegi, including Atlas FC, Club Santos Laguna, Real Sporting de Gijón, Orlegi USA or any Academy or Tournament under the brand Orlegi or its affiliates. The Orlegi Group is also referred to in this Policy as “we” “our,” and “us.”

01. Purposes of the processing

We inform that all personal data provided by the User through the Services will be processed by Orlegi Group, as a Data Controller, for the following purposes:

  1. Enable the provision of requested services; The legal basis for carrying out this data processing is the execution of the contractual obligations assumed by the User and Orlegi Group in the Services. The personal data processed for this purpose will be kept as long as that relationship is maintained and, once it has finalized, during the conservation and prescription periods of the legal liabilities.
  2. Keep you informed, including by electronic means, about news and events related to the Orlegi Group, as well as The Orlegi Group products and services. The legal basis for carrying out this data processing is the freely given consent of the User. Personal data processed for this purpose will be kept until the User withdraws the given consent. The User may indicate expressly whether or not it authorizes the processing of their data at any time.

02. Recipients, Data Processors and personal data transfers

Personal data may be communicated to the following third-party recipients: Public Administrations for compliance with legal obligations; and to the following categories of Data Processors: Providers of electronic communications; Suppliers of IT development and online office automation, hosting, SaaS services such as CRM/ERP, accounting, auditing and lawyers. Orlegi Group may also transfer the personal data to Data Processors located in the United States of America who are members of the Privacy Shield, which has a decision to adopt the European Commission (Execution Decision (EU) 2016/1250 of the Commission).

03. Rights of the Users

The data subject is, at any time, entitled to exercise the rights of access, rectification, erasure, restriction of processing, data portability and object by sending an email addressed to contact@orlegi.com or by letter addressed to 25420 Kuykendahl Rd. Suite B200-27 Tomball, TX 77375.. The users have the right to withdraw consent given at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The users have, as well, the right to lodge a complaint before a supervisory authority.

04. Display of User data by other Users

The User knows and accepts that when registering in the Services, other Users will be able to visit and view their profile.

05. Physical control and performance data

The User Player knows and accepts that their vital signs together with other physical performance data may be monitored and shared with the User Coach, when the User Player has given the corresponding consent thereto.

On the other hand, sports data may also be monitored so that other users can see the statistics of the User Player, when he or she consents to them such processing of their data for that purpose. The User Coach may use sports data that are not considered sensitive without the need for any permission.

When the User Player is a minor, the processing of their data for the aforementioned purpose will be subject to the authorization of their legal guardian. The Coach User may use sports data that are not considered sensitive without the need for any permission.

06. Public data

Most of the activity in the Service is public, which includes part of the activity carried out by the User in the Services. The information published about the User by other people who use our services may also be public. For example, other people can tag you in a photo (if your configuration allows it) or mention it in a publication.

The User is responsible for their publications and other information provided through the Services and must think carefully about what to publish, especially if it is sensitive information.

In addition to providing its public information, Orlegi Group also uses technologies such as application programming interfaces (APIs) and integrations to allow this information to be used by websites, apps and others (for example, to display publications on a news website or analyze what people comment on the App).

07. Chat

Orlegi Group provides certain features that allow the User to communicate in a more private way or in a way that controls who sees their content. For example, the User can use the Chat to hold conversations that are not public in the Services. When the user communicates with others by sending or receiving Messages, Orlegi Group will store and process their communications and related information. This includes the scanning of links to detect malicious content, detection of spam and forbidden images and review of reported issues. Orlegi Group also uses information about who has been contacted and when (but not the content of these communications) to better understand the use of the services provided, protect the security and integrity of our platform and display more relevant content. DV7 will share the content of its messages with the people to whom it was sent. When the User uses features such as the Chat to communicate with the recipients, he or she must remember that the recipients have their own copy of their communications in the Services (even if the User deletes their copy of those messages from their account), which they can duplicate, store or share.

08. Orlegi Group as a Data Processor

Orlegi Group will be the Data Processor of all those User’s personal data that needs to be accessed for the correct provision of the requested services, except those already treated in section 1 of this Privacy Policy.

Said personal data may be classified into the following categories of data:

  1. Identification data.
  2. Personal characteristics data.
  3. Academic and professional data.
  4. Health data.

In this sense, Orlegi Group undertakes: a) Processing personal data only following documented instructions from the User, including with regard to transfers of personal data, unless required to do so by Union or Member State law; in such case, the Processor will inform User of that legal requirement before processing, unless that Law prohibits such information on important grounds of public interests. b) Ensure that the persons authorised to process personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality. c) Take all measures required pursuant to Article 32 of the Regulation. d) When the Data Processor turns to another person in charge to carry out certain treatment activities, he will impose on the other person in charge, by contract, the same data protection obligations as those stipulated in this Contract. e) Assist the User, taking into account the nature of the processing, by appropriate technical and organisational measures, insofar as this is possible, for the fulfilment of the User’s obligation to respond to requests for exercising the data subject’s rights. In this case, the Processor must communicate it by email to the following address. The communication must be made immediately. f) Assists the User in ensuring compliance with the obligations pursuant to Articles 32 to 36 taking into account the nature of processing and the information available to the Processor. g) At the choice of the User, deletes or returns all the personal data to the User after the end of the provision of services relating to processing, and deletes existing copies unless Union or Member State law requires storage of the personal data. h) Makes available to the User all information necessary to demonstrate compliance with the obligations laid down in Article 28 of the Regulation. i) Inform the User immediately if, in the opinion of the Processor, when an instruction infringes the Regulation or other data protection rule from the Union or Member State. j) Comply with any other obligation set by the current data protection regulations. k) Notify to the User, without undue delay and where feasible, through email, any personal data breach with all the relevant information for the documentation, resolution and communication of the incident.