SD Huesca, S.A.D. informs users of the website about its policy regarding the processing and protection of personal data of users and customers that can be collected by browsing or contracting services through its website. In this sense, SD Huesca, S.A.D. guarantees compliance with current regulations on the protection of personal data, reflected in the General Data Protection Regulation (GDPR) (EU) 2016/679 and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights.

Who is responsible for the processing of personal data?

SD Huesca, S.A.D., with C.I.F. number A-22009518, with registered office at C/ Cocorón S/N, Estadio Alcoraz C.P. 22004, Huesca, telephone 974212679 and email

For what purpose is personal data processed?

The SD Huesca S.A.D. may process your personal data for different purposes depending on the contractual, commercial or other relationship established between the two parties:

  1. To carry out the membership and its subsequent renovations, maintenance of the relationship with the partners and control of access to sports venues and compliance with regulations on the prevention of violence in sports venues.
  2. If you are an amateur participant in any of our activities, events or sports, social or cultural projects we use your data to manage the registration and participation in the activities and events promoted or organized by SD Huesca

It is also reported that in the events and activities you can take photographs and / or videos that can be published on this website, in our profiles on any social networks, as well as on youtube to inform about the event / activity, document it, and be part of the photographic / videographic memory of the same.

  1. If you are a user of our ecommerce website we process personal data to manage online purchases, requests or services made to us online.
  2. Sending information about the club (news, activities...) that may be of interest to you, and sending commercial information in case you have given us your consent.
  3. The data that can be collected through the cookies stored on the web portal, are used to distinguish the users of the website, record their consent, know how long the visitor remains on the page and the other purposes mentioned above in each cookie.

The personal data provided will be kept for as long as the relationship of provision of the service is maintained or until the interested party requests the deletion thereof, and even requested, we may maintain them, limiting their processing, solely for the fulfillment of legal obligations and/or the exercise or defense of claims, for the years necessary to comply with legal obligations, those provided for the limitation of any liability on our part and/or exercise or defense of claims arising from the relationship between the parties.

Will commercial information be sent?

SD Huesca will not use the data it has in its possession to send information about the Club (news, events and / or organized activities...) or the sending of commercial information unless you have given us your express consent.

How long will the data be retained?

The personal data provided will be kept for as long as the relationship of provision of the service is maintained, until it requests the deletion by the interested party or for the years necessary to comply with the legal obligations.

Subsequently, the data will be deleted in accordance with the provisions of the data protection regulations, which implies its blocking, being available only at requests of Judges and Tribunals, Ombudsman, Public Prosecutor's Office or the competent Public Administrations during the period of limitation of actions that may arise and, after this time, will proceed to its complete elimination.

What is the legitimacy to use your data?

The basis for the processing of data is:

  • The need for processing arising from the execution of a contract for the provision of services between the parties (online sale, subscriber discharge...)
  • Your consent to the use of cookies and/or processing of your data: management of requests made through the website; sending commercial information; sending information about club activities, events, and news; registration in different activities and/or events derived projects, social, cultural or sporting that we develop well directly, through agreements with other entities or organizations
  • Compliance with a legal obligation such as Law 19/2007 of 11 July against violence, racism, xenophobia and intolerance in sport.

To which recipients will the data be communicated?

SD Huesca will communicate your personal data to different assignees for the fulfillment of the directly related purposes:

  1. Collaborating banks for the management of collections and payments,
  2. Third parties that impose anti-violence regulations and the Professional Football League for access control and compliance with anti-violence regulations in sports venues.
  3. The company that is in charge at all times of the shipments and distribution of the products purchased in the online store for the management of such shipments.
  4. To entities or bodies to which there is a legal obligation to make data communications (Tax Administration, Social Security...).
  5. To the Occupational Safety and Health Cabinet, DGA Town Halls, Colleges of Engineers, Ministry of Industry and Agriculture, Authorized Control Agencies, for the conduct of technical inspections by control agencies.
  6. To the Security Corps and Forces, to exercise the security, control and protection functions assigned to them.
  7. To the Royal Spanish Football Federation, for the Management of requests for press accreditations, match entries and courses, completing and processing forms in general, as well as sending communications about activities, products or services offered by the RFEF.

Are there international data assignments?

We inform you that we may use providers, who may have access to personal data, for the purpose of providing us with services ancillary to our activity (such as Marketing services), located both within and outside the European Union. In the case of transfer outside the EU it will be regulated by specific contracts designed to require the recipient to comply with guarantees equal to or greater than those established in the European Union.

The Website uses Google Analytics, a web analytics service of Google Inc. Google Analytics uses "cookies" that allow an analysis of the use of the website. The information generated by the cookie about the use of the website is usually transferred and stored to a Google Inc. server which is a certified entity under the EU-US Privacy Shield Decision (EU) 2016/1250 of the Commission of July 12, 2016, so it has an adequate level of protection. For more information, please refer to the following

What are your rights when you provide your consent?

Anyone has the right to obtain confirmation as to whether SD Huesca S.A.D., their personal data is being processed.

Interested persons have the right to:

  • Request access to personal data relating to the data subject
  • Request rectification or deletion
  • Requesting the limitation of your treatment
  • Oppose treatment
  • Request data portability

The interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data are no longer necessary for the purposes that were collected by contacting

In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. SD Huesca will stop processing the data, except for overriding legitimate reasons, or the exercise or defense of possible claims. They may also request the portability of their data.

Data subjects will also have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them violates the Regulations.

How can rights be exercised?

The data controller informs that he/she can materially exercise these rights by providing him/her with a model or form, through which he/she will contact SD Huesca at the contact address described in the basic data of the Data Controller, in order to formalize the request.

The data subject may also contact the competent Supervisory Authority for additional information on his rights.

How has personal data been obtained?

When the personal data is provided to us by the data subject himself, the SD Huesca at the time they are obtained, will provide you with all the information indicated in the law and that is contained in this Privacy Policy.

When you provide us with your personal data, you warrant that you are authorized to provide this information and that the information is true, truthful, accurate and up-to-date, that it is not confidential, that it does not violate any contractual restrictions or rights of third parties, you agree not to impersonate other Users using your registration data to the various services and/or contents of the Website.

Where the personal data are not provided by the data subject himself but a third party, the latter expressly guarantees that he/she has the authorization of the interested party for such contribution, exonerating us of any liability in case of any claim by the data subject, responsibility assumed solely and exclusively by the person who has communicated the data to us on behalf of or in the interest of the data subject.

Which body can you claim from?

You may file a complaint with the competent Data Protection Control Authority, especially where you have not obtained satisfaction in the exercise of your rights, by writing to the Spanish Data Protection Agency, C/Jorge Juan no 6, 28001 Madrid or by accessing its electronic headquarters: