Privacy Policy
Last updated on July 2025
DATA PROTECTION (PRIVACY POLICY)
Licampa 1617 S.L. (hereinafter, “Licampa”), Corporate Tax ID: B-98.955.503, in compliance with the provisions of applicable data protection regulations, and as the party responsible for the website, hereby informs all users who provide or intend to provide their personal data that such data will be processed as part of Licampa's processing activities, pursuant to Article 30 of Regulation (EU) 2016/679 of April 27, 2016, General Data Protection Regulation (hereinafter, GDPR), as well as Organic Law 3/2018 of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights.
This Privacy Policy governs the processing of personal data on the website, for which Licampa is responsible.
Identity and contact details of the data controller
Name and identity: Licampa 1617, S.L.
Corporate Tax ID: B-98.955.503
Address and post code: C/ Bomber Ramon Duart 12, Valencia (Valencia), 46013.
Contact information: rgpd@roigarena.es
This Privacy Policy governs the following processing of personal data:
- Ticketing
- Minors' data
- Guaranteed purchasing service
- Car park
- App
- Video surveillance
- Work with us
- Commercial communications
- Draws
- Social media
- Suppliers
- Contact us
- Chatbot
- Exercise of rights
➔ Ticketing
Data subject | Those interested in purchasing tickets for themselves and others to events held at the Roig Arena. |
Data | Identification and contact information (such as first name, last name, email address, phone number); Financial information required for payment; Other information such as date of birth, ID, supporting documents in relation to reduced mobility, and authorizations from legal guardians for minors to attend events to manage their attendance. Browsing data: IP address, browser. |
Purpose | Ticket purchase, event attendance and capacity management. Guaranteed ticket purchase service to manage ticket refunds, if applicable. In addition, to comply with legal obligations regarding tax and security matters and analyze and improve the use of the app/website. |
Legal basis | Execution of a contract. |
Recipients or transfers | We use service providers such as Salesforce, Enterticket, and Caixabank. We may share your data with public authorities and state forces if required. In addition, we may share your data to comply with tax obligations, as well as to Roig Arena Collaborators and Sponsors. List of Sponsors and Collaborators. |
International data transfers | Salesforce may transfer your data to its servers in the United States. They use mechanisms to ensure the security of your data. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ Minors' data
Data subject | Minors attending events held at Roig Arena. |
Data | Identification and contact information (such as first name, last name, email address, phone number); Other information such as date of birth, ID, and authorization from legal guardians to manage your attendance. |
Purpose | Ticket purchase, event attendance and capacity management. In addition, comply with legal and safety obligations. |
Legal basis | Consent must be expressly given by the parent/guardian for children aged under 16. |
Recipients or transfers | We use service providers such as Salesforce, Binarys, Enterticket, and Caixabank. We may also share your data with public authorities and state forces if required. |
International data transfers | Salesforce may transfer your data to its servers in the United States. They use mechanisms to ensure the security of your data. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ Guaranteed purchasing service
Data subject | Users taking out the guaranteed purchasing service. |
Data | Identification details, contact details, and any personal information that may be included in the documents that prove the reason for the ticket refund (health information, death certificates of family members, court summons information, traffic accident or vehicle breakdown reports, damage to property, etc.). |
Purpose | To provide the guaranteed ticket purchase service entitling you to obtain a refund for your tickets should any of the circumstances established affect the service. |
Legal basis | Execution of a contract. |
Recipients or transfers | We use service providers such as Salesforce, Enterticket, and Caixabank. We may also share your data with public authorities and state forces if required. |
International data transfers |
Salesforce may transfer your data to its servers in the United States. They use mechanisms to ensure the security of your data. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ Car park
Data subject | Users of the Car park. |
Data | Vehicle information (license plate, color, and model), identification information (first name, last name, email address, and optional phone number), and financial and payment information. Image data (video surveillance). |
Purpose | Management of the contractual relationship for the provision of parking services and booking management; Vehicle access, entry, and exit control. Compliance with the vehicle custody obligations established by Law 40/2002. Claims management. |
Legal basis | Enforcement of contractual measures. |
Recipients or transfers | Service providers such as: Dekalabs, Skidata, Global Payment, financial institutions. Public authorities and state security forces in compliance with the corresponding legal obligations. |
International data transfers | No international transfers are made. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ App
Data subject | Users of the App. |
Data | Identification data (name, surname, email and optional telephone number) and financial and payment data. |
Purpose | Allow access to and use of the App; Manage the user profile and its features (e.g., tickets, bookings, notifications). |
Legal basis | Enforcement of contractual measures. |
Recipients or transfers | Service providers such as: Dekalabs, Covermanager, Global Payment, financial institutions. |
International data transfers | No international transfers are made. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ Video surveillance
Joint controllers | ● Name and identity: Valencia Basket Club S.A.D. for sporting events in which it participates and/or which are organized by the club and held at the Roig Arena. Corporate Tax ID: A-46.406.930 Address and post code: Avenida Hermanos Maristas 16, Valencia (Valencia), 46013. Contact information: rgpd@roigarena.es
● Name and identity: Licampa 1617 S.L., as the owner of the facility, for shows and events organized and held at the Roig Arena. Corporate Tax ID: B-98.955.503 Address and post code: C/ Bomber Ramon Duart 12, Valencia (Valencia), 46013. Contact information: rgpd@roigarena.es
|
Data subject | All attendees within the Roig Arena, including the Car park. |
Data | Image. |
Purpose | Security during events, both at the venue and in the car park. |
Legal basis | Our legitimate interest in maintaining the security of the venue during events and compliance with a legal obligation. |
Recipients or transfers | Competent authority, such as the security coordinator and, where applicable, the State Security Forces and/or Courts. Some service providers (IT specialists, legal advisors, etc.), Prosegur, may have access to the data. |
International data transfers | No international transfers are made. |
Retention period | Recordings will be retained for one month after they are made, except in the event that a right of access is exercised, in which case the recording will be kept until a response has been issued, and no longer than the period established by the Data Protection Regulation for providing a response. They may also be retained for a longer period than indicated when required for submission as part of a judicial proceeding. |
➔ Work with us
Data subject | Potential candidates. |
Data | Identification and contact information (name, surname, email, phone number), academic and professional information (CV), and LinkedIn profile. |
Purpose | Process your application to work with us, as well as manage the selection process for vacancies and conduct interviews, with a view to you joining our company. |
Legal basis | Undertake pre-contractual measures at the request of the data subject when you apply via LinkedIn. Your consent when sending us your CV by email, via our website, or in person. |
Recipients or transfers | We use service providers such as LinkedIn or Typeform, Bizneo Solutions S.L., temporary employment agencies. |
International data transfers | Yes, LinkedIn may transfer data to the US, implementing mechanisms that guarantee data protection. Typeform stores its data in the US. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ Commercial communications
Data subject | Website users. |
Data | Identification and contact information (first name, last name, email address, phone number.) |
Purpose | Sending commercial communications about all activities at the venue. Sending commercial and transactional communications related to products or services previously purchased. |
Legal basis | For us to send you these communications, you must provide us with your consent. However, we may send you commercial and transactional communications related to products previously purchased, provided you have a contractual relationship with us and the products are related to them, pursuant to Article 21 of the Law on Information Society Services and Electronic Commerce. |
Recipients or transfers | Service providers such as Salesforce. |
International data transfers | Salesforce may transfer your data to its servers in the United States. They use mechanisms to ensure the security of your data. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ Draws
Data subject | Participants in the draw. |
Data | Name, surname, email address, gender, and date of birth, and when required by the draw, voice and images. |
Purpose | Manage your participation in the draw (including registration, communications regarding relevant aspects of the draw, prize selection, and delivery). |
Legal basis | Execution of a contract. |
Recipients or transfers | Your data may be shared with third-party service providers for the aforementioned purpose, such as Typeform and Easypromos, and social media. |
International data transfers | Yes, Typeform transfers your data to the US, which implements appropriate mechanisms to ensure the security of these transfers. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.
For non-winning participants, their data will be retained until the end of the draw. For winners, their data may be retained for an additional period, as required to process the delivery of the prize and comply with applicable legal obligations.
|
➔ Social media
Data subject | Event attendees and social media users who interact with Roig Arena profiles. |
Data | Identifying data (name, social media username) and images. |
Purpose | Address queries or concerns raised by users; Disseminate images, videos, or other content related to events organized; Publish and manage draws. |
Legal basis | Legitimate interest in managing Roig Arena's presence on social networks, promoting its activities, and providing customer service. |
Recipients or transfers | Service providers such as Meta. |
International data transfers | Meta may transfer your data to other countries, such as the United States where one of its data centers its located or to other countries where its service providers are located. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ Suppliers
Data subject | Suppliers. |
Data | Identification and contact information (first name, last name, email address) and financial data. |
Purpose | Establish and manage the contractual relationship with our suppliers. |
Legal basis | Execution of pre-contractual measures and execution of a contract. |
Recipients or transfers | Service providers, such as Sage. |
International data transfers | Sage may transfer your data to its servers in the United States. Sage uses mechanisms that guarantee the protection of your data. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ Contact us
Data subject | Website users. |
Data | Identification and contact details (email, name). |
Purpose | Respond to your requests for more information about the programs and services we provide, using available means, such as the online form, email (eventos@roigarena.es), contact phone numbers, and WhatsApp Web. |
Legal basis | Consent. |
Recipients or transfers | Service providers, such as Meta or Tess Quality, Landbot, Agencia Lobo. |
International data transfers | In case of contact via WhatsApp Web. Meta may transfer your data to other countries, such as the United States where one of its data centers its located or to other countries where its service providers are located. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ Chatbot
Data subject | Website users. |
Data | Identification information (full name and email address). |
Purpose | Answer questions related to ticket purchases (requesting invoices, modifying tickets, resolving reported issues, etc.). |
Legal basis | Consent. |
Recipients or transfers | Service providers: Landbot. |
International data transfers | No international transfers are made. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
➔ Exercise of rights
Data subject | Event attendees, car park and app users, and any other users listed in our database. |
Data | Identification and contact information (full name and email address). |
Purpose | Respond to requests about the exercise of rights. |
Legal basis | Comply with a legal obligation. |
Recipients or transfers | No data shall be transferred to third parties, unless there is a legal requirement to do so. |
International data transfers | No international transfers are made. |
Retention period | Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods. |
Recipients of Personal Data
Regarding the recipients of your personal data, you are hereby informed that Licampa takes the necessary measures to ensure compliance with the principles of data protection and privacy with the third parties with whom it maintains relationships, and that its primary purpose is to fulfill its duty of care in such activities.
The communication of personal data to third parties is subject to appropriate data protection measures and based on an appropriate legal basis. Licampa guarantees that third parties with whom it shares personal data comply with applicable data protection laws and regulations and implement appropriate security and data protection measures to guarantee the privacy and security of personal data.
To fulfill the purposes indicated in this Privacy Policy, it is necessary, on certain occasions, for third parties to provide support in the services offered.
These third parties, depending on their nature, may include:
- Public authorities, regulators, or government agencies: These parties will be recipients of the data in cases in which the transfer thereof is required by law, local regulations or in compliance with regulatory obligations.
- Security forces: law enforcement agencies and security forces that may require access to personal data in the performance of their duties and responsibilities.
- Service providers: These are companies that provide services to Licampa and may be provided with access to the personal data required to provide those financial or online payment services, such as web hosting providers, email service providers, customer service providers, and other organizations with which Licampa has partnership agreements.
Licampa will ensure that providers are selected that offer appropriate safeguards and that their responsibilities regarding personal data are determined.
- Financial institutions: financial institutions that may require access to personal data to process transactions, payments, and other financial services.
- Sponsors: Third-party collaborators of Licampa who may require images of events and draws for marketing purposes and with whom we maintain a commercial relationship. List of Sponsors and Collaborators.
- Media: Media outlets that may distribute images of events held at the venue.
Your data protection rights
Licampa recognizes and guarantees the exercise, free of charge in the cases established by current legislation, at any time and in an effective and accessible manner, of the following rights:
● Access. You have the right to access your data, as well as to know whether or not your personal data is being processed. In this regard, you can obtain a copy of your personal data, although exercising this right cannot adversely affect the rights of other people and their right to data protection.
● Rectification. As a data subject, you have the right to obtain, without undue delay, the rectification of inaccurate data or the completion of incomplete data.
● Limitation. You have the right to obtain a limitation on the processing of your data, provided that any of the following circumstances apply:
- You contest the accuracy of the data, for a period that allows us to verify its accuracy.
- When you prefer limitation to deletion of the data.
- When your data is not being processed and must be deleted, but it is needed to file a complaint or respond to a request.
- When you have objected to the processing, but the legitimate grounds for doing so are being verified.
● Objection. You have the right to object at any time, for reasons related to your particular situation, to the legitimate processing of your personal data.
● Erasure. You have the right to have your data erased without undue delay, provided there is a justified reason for doing so.
● Portability. As the data subject, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, provided that this is technically feasible. This right may not adversely affect the rights and freedoms of others.
● Not to be subject to automated decisions. As the data subject, you have the right not to be subject to decisions made as a result of automated processing, including profiling, that may have a significant impact on you.
Furthermore, if Licampa's processing of your personal data is based on consent, pursuant to Article 7 of the GDPR, you have the right to withdraw that consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal. Withdrawing consent is just as easy as granting it.
Likewise, Licampa hereby informs you that, pursuant to Article 77 of the General Data Protection Regulation (GDPR), you have the right, as a data subject, to file a complaint with the Spanish Data Protection Agency if you believe that our processing of your personal data violates said Regulation.
You can find more information about your rights at the following link.
How to exercise your rights
Any data subject who wishes to exercise any of the rights described above may do so at the following email address: rgdp@roigarena.es.
Following the recommendations established in current legislation and the guidelines of the Spanish Data Protection Agency, you are hereby informed that in relation to minors under 16, the exercise of these rights will always be carried out by the person holding parental authority or their guardians, and that those over 16 years of age may fully exercise them by following the instructions described in this section.
The Spanish Data Protection Agency provides updated information to users to ensure they are fully aware of their data protection rights at all times.
Existence of automated decision-making or profiling and information on the use of artificial intelligence
We may personalize our commercial and promotional offers based on your interests and preferences, provided you give your consent. This profiling will be carried out with the aim of optimizing the offers we offer you, without generating any negative impact on you.
Likewise, you may object to the processing of your data at any time by sending an email to the contact indicated in the previous section (rgpd@roigarena.es).
Security measures applied to personal data
At Licampa, we are committed to implementing and maintaining appropriate technical and organizational security measures to protect personal data against destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
These security measures include, among others, data encryption, restricted access to personal data, the implementation of strong password policies, backups, and regular security assessments. In addition, our staff is provided with training and awareness regarding personal data protection and information security.
However, it is important to note that no security measures are completely foolproof, and no system can guarantee the absolute security of personal data.
Therefore, we cannot guarantee that personal data is completely secure and we disclaim any liability for any security breach that may occur, notwithstanding compliance with our legal obligations regarding data breaches.
Minors
Licampa hereby informs users that, in relation to the processing of data pertaining to individuals aged under 16, as provided by the Spanish Data Protection Agency, when the collection and processing of such data is based on consent, it must be kept in mind that it must be express and must be given by your parents or guardians.
The processing of personal data of minors aged under 16 will be based on the express consent given by their parents or legal guardians.
Those over this age may provide their own consent for the collection of their data, except in cases where the law requires them to be assisted by their parents or guardians.
As the data controller, Licampa will make reasonable efforts to verify that consent was given or authorized by the holder of parental authority or guardianship over the child, taking into account costs and available technology.
Third-party data
If the user provides the personal data of third parties (for example, when purchasing tickets on behalf of other people), they declare that they have previously informed said persons of the details contained in this Privacy Policy and, where applicable, have obtained their consent where necessary.
Furthermore, the user guarantees that the personal data provided is true, accurate, complete, and up-to-date, and undertakes to communicate any changes that may affect its correct processing.
The personal data of third parties provided will be processed solely for the purpose of properly managing the service requested (such as the issuance or sending of tickets) and will not be used for any other purposes, except where legally required or with the express consent of the data subject.
Changes and updates to our Privacy Policy
At Licampa, we may update and modify our Privacy Policy at any time and when we deem so appropriate to accurately reflect our privacy practices.
In this regard, we recommend that you review this Privacy Policy frequently to ensure you are aware of any changes or modifications.
If you have any queries about our Privacy Policy, you can contact us at: rgpd@roigarena.es.
Information about cookies
Briefly, we also want to inform you that we use cookies to facilitate your experience on the Platform and understand how you interact with us. Please read our Cookie Policy to learn more about the cookies we use, their purposes, and other information of interest.