This policy explains which personal data is processed on unionmultisport.com, for what purposes and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights. This is a translation; in case of discrepancy, the Spanish version prevails.
1. Data controller
- Owner: Roberto Romero Rodríguez (self-employed), trade name Spain Union Multisport
- Spanish ID (DNI): 44246097P
- Address: Calle Rafael Alberti, 20, Escacena del Campo (Huelva, Spain)
- Email: info@rugbyspain.es
2. What data is processed and why
The website has no forms or user accounts. Personal data only reaches the owner in these cases:
- When you write or call (email, WhatsApp or phone): your name, your contact details and whatever you say, to reply and handle your request: information about the league, registering a club, becoming a member, sponsorship or sending news. Legal basis: your consent when you write and, if a relationship starts (member, club or sponsor), the performance of that relationship.
- Membership fees and donations: they are paid through Stripe, which passes on the name, email address and amount to manage the membership, the fees and the receipts. Card details are processed by Stripe and never reach this website. Legal basis: the relationship with the member or donor and accounting and tax obligations.
- Browsing and security: the server and Cloudflare process your IP address and technical browser data to serve the website and protect it from attacks. Legal basis: the legitimate interest in the website working and being secure.
- Statistics: if you accept statistics cookies, Google Analytics measures how the website is used (page views and clicks on buttons such as WhatsApp or Support us). If you do not accept them, it only receives activity signals, without cookies or identifiers, used to estimate the number of visits. Legal basis: your consent, which you can withdraw at any time from the Manage cookies button at the bottom of the page, and, for the cookieless signals, the legitimate interest in knowing how many visits the website receives.
The Shop links to shops with which the website has an affiliate agreement: Decathlon, through its own programme; Amazon, through the Amazon Associates programme; and other shops, through the Awin affiliate network. When you click one of these links, the destination shop and, where applicable, the affiliate network place and read cookies on your browser, or use similar technologies, to know that you come from this website and to calculate the commission if you buy. This website does not pass any of your data to them: that processing is theirs and is governed by their own policies, such as the Amazon privacy notice or the Awin privacy policy. You can reject those cookies in each shop’s cookie notice and delete them from your browser settings.
The YouTube videos in some news articles only load if you accept marketing cookies. From then on, YouTube (Google) processes the playback data under its own policy.
3. How long data is kept
- Enquiries: as long as needed to answer them and, at most, one year afterwards, unless they lead to a relationship.
- Members and donations: while the relationship lasts and, afterwards, for the periods required by law (six years for accounting records).
- Google Analytics statistics: 14 months.
- Server technical logs: 14 days.
4. Who else processes the data
Data is not passed on to third parties unless required by law. These providers process it on behalf of the owner to provide their service:
- IONOS: server and email hosting, in the European Union.
- Cloudflare: website delivery network and protection against attacks.
- Google: Google Analytics statistics.
- Stripe: payment of fees and donations.
- WhatsApp (Meta): if you choose to write via WhatsApp.
Some of them may process data in the United States. Those transfers are covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.
5. Your rights
You can ask for access to your data, its rectification or erasure and the restriction of its processing, object to it, ask for portability and withdraw your consent at any time. Write to info@rugbyspain.es with Data protection as the subject.
If you think your data has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Minors
The website is not aimed at children under 14 and does not knowingly collect data from minors.
7. Security
The website uses an encrypted connection (https), up-to-date software and restricted access to its administration.
8. Changes to this policy
This policy may change to adapt to the law or to new services on the website. The version in force is always the one published on this page.
Last updated: 22 October 2026.