Privacy policy

1. Processing of personal data

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, “GDPR”), we hereby inform you that all personal data provided by the User through the Website (hereinafter, the “Website”) will be processed by FUNDACION PRIVADA JOHAN CRUYFF, (hereinafter, the “Foundation”) for the purposes described in this policy.

The personal data provided by the User will be used by the Foundation for the purpose of providing information and procedures (i.e., registration) for the sporting events organised through the Foundation, in particular the TRAM BCN OPEN and, if authorised to do so, to keep you informed, including by electronic means, about sponsors and sponsors, and third party companies participating in these events.

The completion of all the data requested through the Website is necessary for the optimum provision of the services made available to the User through the Website. Failure to provide all the data required by the Foundation does not guarantee that the information and services can be provided, that they are provided correctly or that they meet the User’s needs. The answers marked with * in the registration form are obligatory. Failure to answer them will prevent you from registering for our events.


2. Information on personal data protection

FUNDACION PRIVADA JOHAN CRUYFF, with registered office at: C/ Anna Maria Martinez Sagi, s/n, 08970, Sant Joan Despí, Barcelona will be responsible for processing the data of users coming from Spain, at the same time FUNDACION PRIVADA JOHAN CRUYFF will be responsible for uploading photographs of events in Spain, news or other activities carried out by the foundation. The email address to contact FUNDACION PRIVADA JOHAN CRUYFF is


Described purposes:

– Promotion of the Foundation’s foundational purposes and those of third parties linked to the Foundation.

– Create and manage a personal account on the Website in order to process registration for the sporting events registered on the Website.

– Market research, statistical data, in order to offer you information related to our foundational purposes that may be of interest to you.

– Manage requests for information and complaints from users.

– To keep you informed about our events and our foundational purposes.

– Surveys to improve our services.

– Profiling and analysis of the behaviour of our Users when using our website, but only if you have given us your consent.

– Participants in events and events

– Other contacts with whom the Foundation receives personal data, such as volunteers, partners, sponsors or users.


Legitimation: For the processing of your personal information we rely on legitimacy for several reasons:

– To process your registration for our sporting events (event registration and request for information).

– For compliance with various legal obligations.

– For legitimate interest, for example, for security reasons, fraud prevention, to improve our foundational purposes and the User’s experience through the Website, or to handle requests, queries or possible complaints that may arise.


Recipients: In order to fulfil the purposes indicated in this Privacy Policy, it is necessary for us to give access to your personal data to entities with which we maintain a commercial relationship and to third parties that support us in the foundational purposes that we offer you, namely:

– Sports partners (persons/entities/sports federations involved in the organisation of the events we participate in)

– Financial entities

– Logistic, transport and delivery service providers and partners

– Fraud detection and prevention entities

– Providers of technology services

– Marketing and advertising related service providers and partners

– Users and participants


2.1. Retention of data

In accordance with applicable law, we store personal information about our Users only to the extent necessary to use it for the purpose for which it was collected and in accordance with the legal basis for processing it.


The personal data provided will be retained until their deletion is requested by the interested party or, where appropriate, for a period of 5 years from the last confirmation of the User’s interest, in which case they must be destroyed or returned to the person responsible for the same; the same destination will be given to any support or documents containing any personal data that is the object of the processing. This is without prejudice to the existence of a legal provision requiring the retention of certain data.


We will keep this personal information for as long as there is a contractual and/or commercial relationship with the Client, or for as long as the Client does not exercise their right to delete and/or limit the processing of their data. In such cases, we will keep the aforementioned data duly blocked, as long as they may be necessary for the exercise or defence of claims or may derive from their processing some type of judicial, legal or contractual liability, which must be attended to and for which their recovery is necessary.


In this regard, we will process the data:

– registration data on the Website for as long as the User maintains the status of registered User (i.e. until he/she decides to unsubscribe).

– contractual data, for the time necessary to manage the registration to the event, including possible associated claims.

– usability and quality, for as long as we proceed to carry out a specific action or quality survey or until we anonymise your browsing data.


2.2. Exercise of rights

The User may exercise the following rights, provided for in the applicable regulations, in relation to the processing of his or her personal data:

– Right to request access to personal data relating to the data subject.
– The right to request their rectification or deletion.
– The right to request the limitation of their processing,
– The right to object to the processing.
– The right to data portability.
– The right not to be subject to automated individualised decisions.

These rights may be exercised by means of a written communication addressed to FUNDACION PRIVADA JOHAN CRUYFF, with registered address at C/ Anna Maria Martinez Sagi, s/n, 08970, Sant Joan Despí, Barcelona, or via the contact e-mail address: . In both cases, the User concerned must enclose a copy of his/her national identity card, passport or other valid document that identifies him/her. The communication must be made immediately and in no case later than the working day following receipt of the request, together, where appropriate, with other information that may be relevant to resolving the request.


2.3. Security measures and levels of security

The Foundation has adopted the necessary measures to maintain the required level of security, according to the nature of the personal data processed and the circumstances of the processing, in order to avoid, as far as possible and always according to the state of the art, their alteration, loss, unauthorised processing or access.


Likewise, the Foundation guarantees that it has implemented mechanisms to:

  1. guarantee the permanent confidentiality, integrity, availability and resilience of the systems and foundational purposes of processing.
  2. Restore the availability of and access to personal data in a timely manner in the event of a physical or technical incident.
  3. Regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.


2.4. Consent of the User

The User declares that he/she has read and expressly accepted this Privacy Policy when registering with the Foundation, giving his/her unequivocal and express consent to the Foundation to process the data in accordance with the purposes and services set out herein.


The User expressly authorises the transfer of his/her data to third parties in order for the Foundation to carry out the purposes set out in this privacy policy. In the event that the User provides the Foundation with personal data of third parties, the User declares that said data is true and that he/she has informed and requested the consent of these third parties, whose data he/she provides, that their personal data will be processed by the Foundation in the same terms as the User has been informed and has given his/her consent in this privacy policy.


2.5. Changes to the security and data protection policy

The Foundation reserves the right to modify its privacy policy in order to adapt it to new legislative or jurisprudential developments, as well as those that may derive from existing standard codes on the subject, or due to strategic corporate decisions, with effect from the date of publication of said modification on the Website.


2.6. Cookies policy

The Foundation uses cookies in order to improve its foundational purposes, facilitate navigation, maintain security, verify the User’s identity, facilitate access to personal preferences and track their use of the Store. Cookies are files installed on the hard disk of the computer or in the memory of the browser in the folder pre-configured by the operating system of the User’s computer to identify him/her.

If the User does not want a cookie to be installed on his or her hard drive, he or she should configure his or her Internet browser not to receive them. Likewise, the User may freely destroy cookies. If the User decides to deactivate cookies, the quality and speed of the service may be reduced and the User may even lose access to some of the fundamental purposes offered in the Store.

For more information see our Cookie Policy.


2.7. Links

The Website may contain links to third party websites, whose privacy policies are unrelated to that of the Foundation. When accessing such websites, the User may decide whether to accept their privacy and cookie policies. In general, if you browse the Internet, you can accept or reject third-party cookies from the configuration options of your browser.

In the event that a website outside our Website intends to establish a link to our Website, it must do so with our prior authorisation.


2.8. Governing Law and Jurisdiction

This privacy policy and conditions of use of the Website are governed by Spanish law. Any dispute arising from the interpretation or execution that may arise in relation to the validity, interpretation, fulfilment or termination of this contract shall be subject to the Jurisdiction and Jurisdiction of the Courts and Tribunals of the City of Barcelona, waiving any other jurisdiction that may correspond to the user, provided that the applicable legislation so permits.