Behind data are people. We understand the importance of people being in control of their
information, identity, and personal data. Although we do not collect particularly sensitive
data that may pose a relevant risk to you, we are very respectful of the privacy of our
customers, users and suppliers. Our entire data protection policy revolves around these
three cornerstones:
CLARITY
Under no circumstances will we process your data in an unwanted, covert, or abusive way.
Whether a third party provides us with your consent or whether you provide it voluntarily
and directly, you will be informed about who will be processing your data, what the
purpose for processing is, what the lawful basis for the processing is, how long it will be
retained, what your rights are, and how you may exercise them. As you will see below, we
have written our legal notices in clear, direct, and easily understandable language. Our aim
is for you to understand exactly what we do with your data, why we do it, how we do it, and
for which purposes we do it.
RESPECT
Your data belongs only to you. You are the only person who can control the use of your
data. You are the only person who can know it, erase it, rectify it, or restrict its use. We
provide you with the tools so that you can always decide how you want us to process your
data, including when and how you may access and update your personal information.
SECURITY
Physical security and computer security. We guarantee the security, integrity, and
confidentiality of your data and personal information by taking the necessary measures to
prevent its loss, alteration, misuse, or unauthorised access. To this end, we implement all
the necessary and appropriate security measures, both on a technical and on an
organisational level.
OVERVIEW OF OUR PRIVACY POLICY
AIBALL LOVELACE, S.L. is committed to the privacy of its users, customers and
suppliers, as well as to the secrecy and security of their personal data, in compliance with
EU Regulation 2016/679 of the European Parliament and the Council Regulation of 27
April 2016 on the protection of natural persons with regard to the processing of personal
data and on the free movement of such data, with Spanish Organic Law 03/2018 of 5
December on the protection of personal data and guarantee of digital rights, and with other
regulations in force.
WHO IS THE DATA CONTROLLER IN CHARGE OF PROCESSING YOUR PERSONAL
DATA?
As a rule, when you interact with AIBALL, the data controller is AIBALL LOVELACE, S.L.,
holder of tax code B-44969202. AIBALL LOVELACE (hereinafter, AIBALL) is a company
registered in the Companies Registry of Barcelona, Volume 48804, Folio 85 and Sheet B
number 596859, with registered office in Barcelona (postcode: 08014) and with the
following email address for contact or communication purposes: datos@aiball.io.
In some specific cases, your padel club will be the data controller. In these cases, AIBALL
plays the role of DATA PROCESSOR as we work with the data that the club provides us
with in order to provide you with statistical data about your game and tips to improve your
performance.
In addition to the email address for communication purposes, we also have a Data
Protection Officer (DPO) who ensures compliance with the regulations. You may contact
the DPO for any questions, concerns and/or complaints you have regarding your personal
data or this Privacy Policy by writing to datos@aiball.io.
WHAT DATA DO WE PROCESS, FOR WHICH PURPOSES DO WE PROCESS IT, AND
WHY DO WE PROCESS IT?
Depending on how you interact with us, we will collect one type of data or another and use
it for different purposes. In some cases, we will be the data controller and in other cases
we will merely be the data processor. For example, if you contact us using a form on our
website, our role is the data controller, so we will save your name and email address and
use that data to answer your question. However, if you are a member of a padel club that
has contracted our services to improve the performance of its students, then our role will
be the data processor, with the club being the data controller. Therefore, there are different
ways to process your data in which we assume different roles. Below is the full Privacy
Policy of AIBALL, with details of all the data processing activities we conduct.
Remember that if you have any questions or need further information, you may contact our
Security Officer or our DPO whenever you want.
PROCESSING ACTIVITIES ACTING AS DATA CONTROLLER
In general, we act as data controllers when you are the person providing us with the
information directly and when there is no intermediary between you and AIBALL. For
example, you provide us with data directly when you contact us via the website, when you
write us an email, or when you download our application. Below is an explanation of all the
data processing activities we conduct as the data controller (the alphanumeric code
included in brackets next to each activity is an internal processing classification code. For
example: C1 is a code that refers to processing activity 1 in our role as the data controller).
ANSWERING QUESTIONS SENT VIA WEBSITE FORM (C1)
For which purpose? – Purposes of the processing activity: the purpose of the processing
activity is to deal with and answer questions asked by website users.
Why? – Applicable lawful basis: the lawful basis of this purpose is the consent given
voluntarily by you when you contact us.
What data? – Type of data: the data we process for this purpose is your identity, your
contact and/or professional details, and the information contained in the question sent, the
processing of which is necessary to give you an answer.
Where did it come from? – Source: the data we process for this purpose is obtained from
you, when you complete the contact forms included on the website or send us an email to
our contact address.
Who does it belong to? – Categories of data subjects: the data we process for this purpose
refers to the users of the website who send questions and any other data subjects whose
data has been provided by the sender of the question.
How long is it processed for? – Retention periods: the data we process for this purpose will
be subject to the general retention criteria described in the following section of this Policy.
Do we send the data to anyone else? – Data disclosure and/or transfer: we do not disclose
data to anyone outside AIBALL or transfer it to any third parties.
ACCOUNT CREATION - LOGIN - PROFILE MANAGEMENT (C2)
For which purpose do we process your data? The purpose of this processing activity is to
properly manage the creation of your account and the management of your profile.
With which right do we process your data? The lawful basis for this processing activity is
your explicit consent and compliance with the contract you sign when downloading the
application.
What kind of your data do we use? The data we use is basically identification, payment
and management details (full name, image, means of contact, credit card).
Where do we get your personal data from? You provided the data when you download the
app and fill in the necessary information to complete your profile.
Who does the data belong to? The data processed belong exclusively to data subjects.
We do not obtain additional data from other platforms or applications, cross-reference it
with other types of data, or combine it with data obtained from other sources.
How long is the data stored for? As a rule, we keep the data until the user requests its
erasure, with it being possible to keep it — duly encrypted to prevent its use — for the
statutory retention period in which we are subject to possible liabilities (10 years).
Do we send the data to anyone else? We do not disclose data to anyone outside AIBALL
or transfer it to any third parties.
Other recipients by legal enforcement: none.
Security measures: those reflected in the SECURITY MEASURES section.
EXTRACTING STATISTICS FROM YOUR GAME AND CREATING IMPROVEMENT
TIPS (C3)
In this case, when we talk about "your data" we are always referring to the recording of
your padel matches, i.e., your image.
For which purpose do we process your data? The purpose of the processing activity is to
offer you the service contracted with your padel club. This service consists of analysing
your game and providing you with game statistics and tips to improve your style of play.
With which right do we process your data? The lawful basis for this processing activity is
your explicit consent and compliance with the service you have contracted as a member or
user of your padel club.
What kind of your data do we use? The data we use is your image, captured on video.
Where do we get your personal data from? You provide the data as a member or user of
your padel club and authorise the video recording of the game. We video the game and all
the information about your game is automatically extracted, without human intervention,
from that recording.
Who does the data belong to? The data processed belong exclusively to data subjects.
We do not obtain additional data, cross-reference it with other types of data, or combine it
with data obtained from other sources. The processing activity is strictly limited to
recording the game, storing it, and extracting statistical information about your game from
the recording, in an automated way and without human intervention.
How long is the data stored for? The recording of the game is stored in two ways:
- On a physical hard drive: the data is stored anonymously for 30 days on this hard
drive. New data is then recorded over it, permanently erasing existing records. This
hard drive is physically located on the premises of your padel club and is secured
with the necessary security measures to protect it from both physical and cyber
attacks.
- In a backup on a cloud server: the data remains stored on this server until you ask
us to erase it. The server complies with the maximum security measures to
preserve the integrity and availability of your data.
Please bear in mind that it is not just you playing in a game. Even if all players have
consented to the game being recorded, all participants must be in agreement for it to be
downloaded. Therefore, if any of your fellow players do not consent to the video being
downloaded, you will not be able to access it.
Please note: remember that if all players consent to the download, you can only use the
video for personal domestic purposes and you cannot publish or broadcast it.
Meanwhile, the statistical report with tips to improve your game is processed in exactly the
same way as the recording of the game.
Please bear in mind that reports may be available on the club's app for you to review or
download for longer than we have indicated. To learn more about this, check the club's
privacy policy.
Security measures: those reflected in the SECURITY MEASURES section.
PAYMENT OF SERVICES (C4)
For which purpose do we process your data? The purpose of the processing activity is to
invoice the contracted service.
With which right do we process your data? The lawful basis for this processing activity is
your explicit consent and compliance with the service you have contracted.
What kind of your data do we use? The data we use is your credit card information.
Obviously, we store it encrypted and anonymised.
Where do we get your personal data from? You provide the data directly when
downloading the app and contracting the service.
Who does the data belong to? The data processed belong exclusively to data subjects.
The processing activity is strictly limited to payment of the contracted service.
How long is the data stored for? As a rule, we keep it for as long as we are subject to
possible liabilities or may be required by supervisory authorities.
Security measures: those described in the SECURITY MEASURES section.
EXERCISE OF RIGHTS
INFORMATION ON THE EXERCISE OF RIGHTS
As a data subject, the data protection regulations give you certain rights over your data.
Below is information about what they are and how you may exercise them.
Right to withdraw consent
You have the right, at any time and in straightforward way, to withdraw the consent granted
for the processing of your data for the corresponding purposes and lawful basis.
Form to exercise your right to withdraw
Right of access
You have the right to ask us for details of the data we hold about you and how we process
it, as well as to obtain a copy of it.
Form to exercise your right of access
Right to rectification
You have the right to rectify any inaccurate or erroneous data concerning you, as well as to
have incomplete data completed.
Form to exercise your right of rectification
Right to erasure
You have the right to request the erasure of your data and information in certain
circumstances. However, please note that there are certain occasions where we are
legally entitled to continue retaining and processing your data, for example to comply with
a legal data retention obligation.
Form to exercise your right to erasure
Right to restriction of processing
You have the right to restrict or limit the processing of your data in certain circumstances.
For example, if data erasure is applicable and, instead of erasing it, you prefer us to
encrypt it and process it solely for retention purposes because you will need it to lodge a
complaint. Please note that there may be occasions where we are legally entitled to refuse
your request for restriction of processing.
Form to exercise your right to restriction of processing
Right to object
You have the right to object to us processing your data for a specific purpose, in certain
circumstances provided for in the regulations and related to your personal situation.
Form to exercise your right to object
Right to data portability
You have the right to receive your personal data in a structured, commonly used, machine-
readable and interoperable format, and you can transmit it to another data controller,
provided that we process your data by automated means.
Form to exercise your right to data portability
Right not to be subject to automated individual decision-making
You have the right not to be the subject of a decision based solely on the automated
processing of your data, including profiling, which produces legal effects concerning you or
significantly affects you in a similar way if you do not explicitly authorise it.
As a rule, you may exercise your rights at any time and completely free of charge by
contacting our Security Officer (Jordi Fortuny Profitós).
Please bear in mind that when you exercise a right, you must provide a copy of a
document proving your identity (Spanish ID card, Spanish residency card, or passport).
Any exercise of rights will be answered within a maximum period of 10 (ten) days.
If you do not agree with how we are processing your data and your complaints are not
being addressed, you have the right to lodge a complaint with the national supervisory
authority by contacting the Spanish Data Protection Agency (AEPD), using the following
contact details:
Street Jorge Juan 6, 28001 Madrid.
www.aepd.es
FORMS FOR THE EXERCISE OF RIGHTS
- Right of access
- Right of cancellation
- Right to object
- Right to portability
- Right to rectification