Active Prosecution of Piracy

In order to combat the various forms of audiovisual piracy related to LALIGA audiovisual content, LALIGA uses applications and technological tools that enable the prevention and active enforcement of such unlawful activities. The use of these applications may involve the processing of personal data relating to alleged infringers of the intellectual property rights over which LALIGA holds exploitation rights.

Likewise, under certain circumstances, LALIGA may initiate legal action against data subjects in respect of whom there are reasonable grounds to presume that they have engaged in infringing conduct.

Who is the controller of the personal data?

Personal data will be processed by the Liga Nacional de Fútbol Profesional (hereinafter, “LALIGA”), with Tax ID No. G-78069762 and registered address at Calle Torrelaguna 60, 28043, Madrid, Spain.

Contact details of LALIGA’s Data Protection Officer: dpo@laliga.es

From where do we obtain the personal data?

 

LALIGA will process data obtained through the use of the various applications and technological tools available to it, including:

• Username(s) used across different applications,

• Pseudonymised data (unique identifiers associated with each username),

• IP addresses (including, in certain cases, residential IP addresses).

 

As well as additional data that may be provided to LALIGA by internet access service providers:

• Full name of the internet access service contract holder,

• Identification document number (DNI, NIE or equivalent),

• Postal address relating to the installation and billing of the internet line,

• Email address.

 

For what purposes do we process the personal data?

• Active anti-piracy enforcement: Please be informed that personal data (in this case, the data collected through the various applications and technological tools available to LALIGA identified above) will be processed by LALIGA for the purpose of carrying out investigations aimed at combating acts of audiovisual piracy involving LALIGA content.

 

• Sending confidential binding offers (an instrument for out-of-court dispute resolution negotiations), within the meaning of Organic Law 1/2025 of 2 January on measures to improve the efficiency of the Public Justice Service, and, where applicable, initiating legal actions against alleged infringers: Please be informed that personal data (in this case, the data communicated by internet access service providers identified above) will be processed by LALIGA for the purpose of sending the corresponding confidential binding offers and, where appropriate, initiating legal actions against those infringers in respect of whom there are reasonable indications that they are making available or distributing, directly or indirectly, content, works or performances protected by intellectual property rights without complying with the requirements established by applicable law.

The legal basis for the purposes described above is that the processing is necessary for the purposes of the legitimate interests pursued by LALIGA pursuant to Article 6(1)(f) of the General Data Protection Regulation, consisting of protecting LALIGA audiovisual content in order to prevent its commercial exploitation from being adversely affected by unlawful piracy practices.

In this regard, please be informed that LALIGA has carried out a balancing test between its legitimate interest and the rights and freedoms of the data subjects. You may request the conclusions of this assessment by contacting lopd@laliga.es.

With regard to these processing purposes, the right to object to the processing of personal data shall not apply pursuant to Article 21(1) GDPR, since:
(i) compelling legitimate grounds for the processing exist which override the interests, rights and freedoms of the data subject; and
(ii) the processing is necessary for the establishment, exercise or defence of legal claims.

How long will we retain the personal data?

The personal data processed will be retained for as long as the purposes that justified their collection remain applicable and provided that no request for erasure, objection or restriction of processing is exercised.

Once such period has elapsed, LALIGA will keep the personal data duly blocked solely for the purpose of addressing any liabilities of any nature that may arise:

• Active anti-piracy enforcement: The data used for active anti-piracy enforcement will be retained for as long as such purpose remains applicable and once fulfilled, for the applicable limitation period relating to any legal actions that may arise therefrom.

• Sending confidential binding offers and, where applicable, initiating legal actions against alleged infringers. The personal data will be retained as follows:

  • Where it is decided not to send a confidential binding offer or initiate legal action, the data will be immediately deleted from all systems in which they are stored, without any blocking period applying.

  • Where a confidential binding offer has been sent, two scenarios may arise:

    • If, within 7 days from the issuance of the confidential binding offer, the offer has been accepted by the recipient, the personal data will be retained for the duration of the payment processing of the requested compensation. Thereafter, the data will remain duly blocked for a period of 5 years from the date payment was made, pursuant to Article 1964 of the Spanish Civil Code, for the purpose of addressing any potential legal liabilities.

    • If, within 7 days from the issuance of the confidential binding offer, the offer has not been accepted or responded to by the recipient, the personal data will be retained for a period of 5 years from the occurrence of the unlawful act, pursuant to Article 1964 of the Spanish Civil Code, for the purpose of potentially initiating the corresponding legal actions and, if applicable, throughout the duration of the relevant proceedings.

• Rights management: The personal data processed by LALIGA in order to manage requests relating to data protection rights, as described in the section “What are your rights when you provide us with your personal data?”, will be retained for as long as necessary for such purpose and, thereafter, blocked for a period of 3 years.

Personal data will be permanently deleted once the aforementioned limitation periods have expired.

To whom will the personal data be disclosed?

LALIGA may disclose personal data and any other user information where required by public authorities in the exercise of their legally assigned powers and in accordance with applicable legal provisions.

Likewise, LALIGA may share personal data with law firms and court representatives for the purpose of exercising any legal actions to which it may be entitled.

Similarly, LALIGA engages certain subcontracted entities that will access personal data and information as processors or sub-processors in order to provide services necessary for LALIGA. Accordingly, LALIGA uses technical providers and technical and business consultancy providers in order to carry out the purposes described in the section “For what purposes do we process the personal data?”

These service providers enter into agreements requiring them to use personal information solely for the provision of the services described in this policy.

What rights are recognised under data protection regulations?

Please be informed that, at any time, you may exercise your rights of access, rectification, erasure, restriction of processing, objection, not to be subject to automated decision-making and portability before LALIGA.

 

What do these rights consist of?

• Right of access: you have the right to obtain confirmation as to whether LALIGA processes your personal data and, where applicable, access to such data.

• Right to rectification: you may request the amendment or rectification of inaccurate personal data.

• Right to erasure: you may request the deletion of your personal data.

• Right to restriction of processing: under certain circumstances, you may request the restriction of the processing of your data, in which case they will only be retained for the establishment, exercise or defence of legal claims.

• Right to object: you may object to the processing of your data for the specific purpose you indicate. LALIGA will cease processing the data unless compelling legitimate grounds exist or where processing is necessary for the establishment, exercise or defence of legal claims.

• Right not to be subject to automated individual decisions: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

• Right to data portability: where technically feasible, you may exercise your right to data portability in a structured, commonly used and machine-readable format and transmit those data to another controller.

How can I exercise my rights?

By sending an email to derechos@laliga.es. The exercise of these rights is free of charge.

Finally, if you consider that your rights have not been satisfactorily addressed or that the processing of your data has not been carried out in accordance with applicable regulations, you may contact LALIGA’s Data Protection Officer at dpo@laliga.es or lodge a complaint with the Spanish Data Protection Agency (AEPD) via its website: www.aepd.es

This English version has been generated using artificial intelligence for convenience purposes only. In the event of any discrepancy or inconsistency between this translation and the original Spanish version, the Spanish version shall prevail.