Privacy policy

This policy explains which personal data is collected when you buy, open an account or write to us, what it is used for and which rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.

Data controller

ROTULOS Y EVENTOS JEREZ SL, Spanish tax number B22591242, registered address Calle Parque Alto, Primera Fase, 24, 11408 Jerez de la Frontera (Cádiz), Spain, recorded in the Cádiz Companies Register, email administracion@rotulosjerez.com. It is the company that runs the official shop of the Escuela de Fútbol Paquete U.D. football school at efpaqueteud.es.

For any data protection matter you can write to administracion@rotulosjerez.com.

Data we process

• Contact and account details: name, email address, telephone and password (encrypted).
• Shipping and billing addresses and, where applicable, tax details for invoicing.
• Order, payment and related communication history.
• Technical browsing data needed for the site to work (IP address, browser, session).

Card details never pass through this shop: they are entered on the Redsys gateway and processed by the bank.

Purposes and legal bases

• Managing orders, payment, delivery and returns: performance of the contract.
• Issuing invoices and meeting tax and accounting obligations: legal obligation.
• Managing the customer account and address book: performance of the contract.
• Answering enquiries sent through the contact form: legitimate interest in replying to those who write to us.
• Keeping the site secure and preventing fraud: legitimate interest.

No automated decisions with legal effects are taken and no marketing communications are sent without prior consent.

Recipients and processors

• Redsys and the bank, to charge orders.
• The carrier, for home delivery (name, address and contact telephone).
• Holded, as invoicing and accounting tool.
• The hosting provider of the site and the email provider, acting on behalf of the controller under a data processing agreement.

Data is not disclosed to third parties for other purposes, and no international transfers outside the European Economic Area take place except with the safeguards provided by the GDPR.

Retention periods

Account data is kept while the account remains open and, afterwards, blocked for the statutory limitation periods. Invoicing data is kept for the periods required by tax and commercial law (generally six years). Contact form enquiries are kept for one year after they are answered.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to administracion@rotulosjerez.com or by post to the controller’s address, enclosing a copy of your identity document. You may also lodge a complaint with the Spanish Data Protection Agency.

Cookies

The use of cookies is described in the cookie policy.