Skip to content
ESEN
Pre-register

Privacy and personal data protection policy
III Cádiz Global Cup

Last updated: 14 October 2026

This policy explains how personal data is processed for users of the website cadizglobalcupinternational.com and for participants in the III Cádiz Global Cup international youth football tournament.

1. Data controllers

In compliance with current personal data protection regulations (Regulation (EU) 2016/679 and Spanish Organic Law 3/2018), we inform you that the personal data provided will be processed jointly by Cádiz Club de Fútbol, S.A.D., Nomadar Corp, Branch in Spain, and Nomadar Corp, as the parent company of the former (hereinafter, the Data Controllers). The website is owned by Nomadar Corp, Branch in Spain (see Legal notice).

Data Protection Officer of Cádiz Club de Fútbol and of Nomadar Corp, Branch in Spain: Grupo Datcon Sur S.L.U., C/ Dr. Duarte Acosta 7, 11500 El Puerto de Santa María, Cádiz, Spain.

2. What data we process, why and on what legal basis

2.1 Pre-registration and information requests (form on this website)

Details of the club or academy and its country, the name and contact details of the person in charge (email address and phone number) and organisational information: age groups, approximate number of teams, players and staff members, accompanying persons, dates of stay and the content of the message. No player data is collected at this stage.

Purpose: to handle the request, contact the club and prepare and send a participation proposal. Legal basis: steps taken at the request of the data subject prior to entering into a contract (art. 6.1.b GDPR). Pre-registration does not constitute registration of the team or any commitment.

2.2 Team registration

Once the proposal is accepted, the team manager formalises the registration and provides the player and staff data needed for the competition, accommodation, insurance and medical assistance: identification, date of birth, proof of age, contact details and the information strictly necessary to provide these services.

By checking the box accepting this policy during the registration process, the team manager (hereinafter, the "Manager") expressly accepts the terms described herein on their own behalf and on behalf of all players and technical staff members whose data they provide, and declares and guarantees under their sole responsibility that:

Purpose: to manage the participation of the team and the data subjects in the tournament, organised by the Data Controllers and Global Soccer Development (GSD). Legal basis: the performance of the contract to take part in the tournament and the consent given by the data subjects, or by their parents or legal guardians in the case of minors, through the team Manager.

2.3 Sponsors, institutions and press

Professional contact details of people who contact the organisation on behalf of a company, institution or media outlet. Purpose: to manage the sponsorship or partnership relationship. Legal basis: pre-contractual steps and performance of the contract (art. 6.1.b GDPR) and legitimate interest in maintaining the relationship (art. 6.1.f GDPR).

2.4 Communications about the tournament

Communications about future editions will only be sent to those who have consented or who have a prior participation relationship with the tournament, and always with a simple, free means of objecting in every message.

2.5 Images and browsing

The capture and dissemination of images of the tournament is governed by the Guarantee of use and image rights, formalised at registration. The use of cookies is described in the Cookie policy.

3. Recipients and international transfers

Data may be communicated to the tournament co-organiser, Global Soccer Development (GSD), with the express authorisation and unequivocal consent of the data subjects (and their parents or legal guardians in the case of minors).

The Manager expressly accepts that this communication may involve an international transfer of data to the United States of America, where GSD is located, acknowledging that this country may not have the same data protection measures and safeguards as those established in the European Economic Area (EEA). The transfer is carried out in accordance with the applicable data protection regulatory framework. The Manager shall also hold the Data Controllers harmless and assume any claim arising from the lack of such consent or prior information.

To provide the services, we use providers acting as data processors under a contract in accordance with Article 28 of the GDPR: HighLevel Inc. (forms, CRM and email platform; United States, under the safeguards applicable to international data transfers), Hostinger (website hosting) and, once registration is confirmed, the accommodation, transport and insurance companies contracted for the teams' stay, to the extent necessary. No data is disclosed to other third parties unless required by law.

4. Data retention

Pre-registration data that does not lead to registration will be kept for a maximum of 24 months from the last contact. Registration data will be processed for as long as necessary to manage the tournament and will subsequently be kept duly blocked for the legally established periods to meet possible legal obligations or any claims arising from the relationship. Once these limitation periods have elapsed, the data will be deleted.

5. Exercise of rights and withdrawal of consent

Any data subject (or their legal guardians) may exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability, the right not to be subject to automated individual decisions (including profiling), and the right to withdraw consent.

To exercise these rights, you may contact:

If you consider that your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Minors

This website is not aimed at minors and its forms must be completed by adults on behalf of a club, academy, company or institution. Data of minor players is collected only through the club, with the authorisation of their parents or legal guardians.

7. Security

The Data Controllers apply appropriate technical and organisational measures to protect data, including an encrypted connection (HTTPS) throughout the website and restricted access to management systems by authorised personnel.

8. Updates

This policy may be updated to reflect regulatory changes or new website features. The current version is always the one published on this page.