LegalPrivacy policy

Your data, well defended.

What personal data we process, why, for how long, who we share it with and how you can exercise your rights.

Updated on 19 October 20269 min read

In short

Controller: Global Football Total, S.L.
Why: To answer your enquiries, manage registrations and programmes, share our activities if you give us permission and, if you accept analytics cookies, measure how the website is used.
Legal basis: Your consent, the programme contract and our legal obligations.
Who with: We do not sell your data. We only share it with those who need it to deliver the programme or when the law requires us to, and it is processed by providers who work for us.
Your rights: Access, rectification, erasure, objection, restriction, portability and withdrawal of consent, by writing to manager@globalfootballtotal.com.

01Data controller

Controller: GLOBAL FOOTBALL TOTAL, S.L.
Tax ID (NIF): B40528127
Registered office: C/ Carboner, 40 – Parque Empresarial Táctica, Paterna (Valencia), Spain
Registration: Valencia Commercial Registry, volume 10562, book 7843, folio 129, section 8, sheet V-184154
Phone: +34 635 919 786
Email: manager@globalfootballtotal.com

For any question about your data, write to that address with the subject “Data protection”.

This policy complies with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).

This English version is provided for convenience. If there is any discrepancy between versions, the Spanish version prevails.

02What data we process and why

We only process the data you give us (or that your family gives us, if you are a minor) and, if you accept analytics, the data generated by Google Analytics cookies. Each use has its own purpose, legal basis and retention period:

Enquiries and contact form

Data: Name, email, phone, country, language, profile (player, family, club, coach or team), the programme you are interested in, the player's year of birth or the club's name, sports CV and video links (if you add them), and your message.
Purpose: To reply to you, assess your sporting profile if you send us your CV or videos, and send you the information you ask for about the programmes.
Legal basis: Your consent when you send us your enquiry (art. 6.1.a GDPR) and, if you ask for information in order to register, taking pre-contractual steps at your request (art. 6.1.b GDPR).
Retention: As long as needed to deal with your enquiry and, at most, one year from our last contact, unless you register for a programme (section B).

Registration and participation in the programmes

Data: About the player: name, date of birth, nationality, passport number and copy, address, email, phone and Instagram (optional); position, current club and who holds their federation registration rights; kit size, and travel dates and tickets. About their mother, father or legal guardian and a second contact: name, relationship, phone and email. About the person accepting the terms: name and relationship to the player.
Health data: Medication, allergies, chronic illnesses, injuries and any other information you tell us about (intolerances, diet, glasses or contact lenses).
Purpose: To manage registration and the stay: accommodation at the residence, training sessions and matches, transport, tutoring, care in case of illness or emergency, invoicing and payment, and the formalities with clubs and federations needed to train and compete.
Legal basis: Performance of the programme contract (art. 6.1.b GDPR) and compliance with legal obligations, such as tax and accounting obligations (art. 6.1.c GDPR). Health data, with the explicit consent of the player or their mother, father or legal guardian (art. 9.2.a GDPR) and, in an emergency, to protect their vital interests (art. 9.2.c GDPR).
Retention: For the duration of the programme and, afterwards, as long as needed to deal with any possible liabilities (up to six years for accounting records, under the Spanish Commercial Code). Health data and passport copies are deleted when the programme ends, unless they are needed to deal with an incident or claim.

Photos and videos

Data: Your image and voice in photos and videos of training sessions, matches and programme activities.
Purpose: To share Global Football Total's activities on this website, on our social media and Levante UD's, and in promotional materials for the programmes.
Legal basis: Your consent or, if you are a minor, that of your mother, father or legal guardian (art. 6.1.a GDPR and Spanish Organic Law 1/1982 on the protection of the right to one's own image).
Retention: Until you withdraw your consent. When you do, we will stop using your images and remove those published on our channels; this does not affect anything lawfully published beforehand.

Information about programmes

Data: Name, email and phone.
Purpose: To send you information about new programmes, campus and news from Global Football Total.
Legal basis: Your consent (art. 6.1.a GDPR) or, if you have already taken part in a programme, our legitimate interest in telling you about similar programmes (art. 21.2 LSSI-CE).
Retention: Until you unsubscribe, which you can do from any message or by writing to us.

Website analytics

Data: Google Analytics cookie identifier, pages visited, visit duration, where the visit came from, device and browser type, language and approximate location (country or city). Google Analytics 4 does not log or store your IP address.
Purpose: To understand, in aggregate, how the website is used so we can improve it.
Legal basis: Your consent, which you give or refuse in the cookie banner (art. 6.1.a GDPR and art. 22.2 LSSI-CE).
Retention: 14 months in Google Analytics. More details in the cookie policy.

Fields marked with an asterisk in the forms are required: without them we cannot deal with your request or process the registration. If you give us another person's data (for example, a family member's), you must have informed them first.

We do not make decisions based solely on automated processing, nor do we create profiles from your data.

03Minors

Many of our players are minors, so we take special care with their data:

If you are under 14, you cannot give us your data yourself: the contact form must be filled in by your mother, father or legal guardian (art. 7 LOPDGDD).
The registration of anyone under 18 is accepted by their mother, father or legal guardian, who also gives consent, where applicable, for health data and for the use of their image.
If we find that we have received data from a child under 14 without that permission, we will delete it.

04Who we share your data with

We do not sell your data or pass it on for commercial purposes. We only share it when necessary:

With the organisations we run the programmes with, to the extent needed for you to train, compete or stay with us: Levante UD (International Training department), Patacona CF Academy, Iale Sport Center and the sports federations that process player licences.
With insurers, medical centres and emergency services, if necessary for your care.
With banks and payment institutions, to manage payments.
With public authorities, courts and law enforcement, when required by law.

In addition, some providers process data on our behalf, under a contract that obliges them to use it only to provide their service to us and to protect it (art. 28 GDPR):

Providers that process data on our behalf
Provider	Service	Where
Vercel Inc.	Website hosting	United States, with a network of servers worldwide
Supabase Inc.	Database and files for registrations and contact messages	Servers in the European Union
Google Ireland Limited	Company email (Google Workspace), where we receive your messages	European Union and United States
Google Ireland Limited	Google Analytics, only if you accept analytics	European Union and United States

05International transfers

Some of our providers (Google, Vercel and Supabase) are US companies or have servers there. When your data leaves the European Economic Area, the transfer is covered by the adequacy decision for the EU-US Data Privacy Framework, if the company is certified under it, or by the standard contractual clauses approved by the European Commission.

You can check which companies are certified at dataprivacyframework.gov (opens in a new tab).

06Your rights

You can exercise these rights over your data at any time:

Access

Find out whether we process your data and get a copy.

Rectification

Correct inaccurate data or complete incomplete data.

Erasure

Ask us to delete it when it is no longer needed, among other cases.

Objection

Object to a type of processing, for example receiving information about programmes.

Restriction

Ask us to keep it without using it while a complaint is being resolved.

Portability

Receive the data you gave us in a commonly used format, or have us send it to another controller.

Withdraw consent

Whenever you like, without affecting what we did with it beforehand.

Complain

To the Spanish Data Protection Agency (AEPD) if you believe we have not handled your request properly.

How to exercise them

Write to us at manager@globalfootballtotal.com with the subject “Data protection”, or by post to our registered office, and tell us which right you want to exercise. If we cannot verify your identity in any other way, we will ask you for a document that proves it. If you are acting on behalf of someone else (for example, your son or daughter), please say so.

We will reply within one month, which we may extend by a further two months in complex cases; if so, we will let you know within the first month.

If you are not satisfied with our reply, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (opens in a new tab) (C/ Jorge Juan, 6, 28001 Madrid) or with the supervisory authority of the EU country where you live.

07How we protect your data

We apply technical and organisational measures appropriate to the risk, taking particular care with health data and identity documents:

The website always runs over an encrypted connection (HTTPS).
Registrations and messages are stored in a database with restricted access: only authorised Global Football Total staff can see them, using a personal username and password.
The documents you send us (passport, tickets) are kept in private storage that cannot be accessed from the internet without authorisation.
Everyone who accesses your data is bound by a duty of confidentiality.

If a security breach were to occur that posed a high risk to your rights, we would inform you without undue delay and notify the Spanish Data Protection Agency.

08Changes to this policy

We may update this policy because of changes in the law or in the way we process data. We will publish the current version here, with its date, and if the change is significant we will let you know.

Last updated: 19 October 2026. It replaces the version of 11 June 2020.