Privacy Policy

Last updated on July 2025

DATA PROTECTION (PRIVACY POLICY)

Licampa 1617 S.L. (hereinafter, “Licampa”), Corporate Tax ID: B-98.955.503, in compliance with the provisions of applicable data protection regulations, and as the party responsible for the website, hereby informs all users who provide or intend to provide their personal data that such data will be processed as part of Licampa's processing activities, pursuant to Article 30 of Regulation (EU) 2016/679 of April 27, 2016, General Data Protection Regulation (hereinafter, GDPR), as well as Organic Law 3/2018 of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights.

This Privacy Policy governs the processing of personal data on the website, for which Licampa is responsible.

Identity and contact details of the data controller

Name and identity: Licampa 1617, S.L.

Corporate Tax ID: B-98.955.503

Address and post code: C/ Bomber Ramon Duart 12, Valencia (Valencia), 46013.

Contact information: rgpd@roigarena.es

This Privacy Policy governs the following processing of personal data:

-       Ticketing

-        Minors' data

-        Guaranteed purchasing service

-        Car park

-        App

-        Video surveillance

-        Work with us

-        Commercial communications

-        Draws

-        Social media

-        Suppliers

-        Contact us

-        Chatbot

-        Exercise of rights

➔  Ticketing

Data subject

Those interested in purchasing tickets for themselves and others to events held at the Roig Arena.

Data

Identification and contact information (such as first name, last name, email address, phone number);

Financial information required for payment;

Other information such as date of birth, ID, supporting documents in relation to reduced mobility, and authorizations from legal guardians for minors to attend events to manage their attendance.

Browsing data: IP address, browser.

Purpose

Ticket purchase, event attendance and capacity management.

Guaranteed ticket purchase service to manage ticket refunds, if applicable.

In addition, to comply with legal obligations regarding tax and security matters and analyze and improve the use of the app/website.

Legal basis

Execution of a contract.

Recipients or transfers

We use service providers such as Salesforce, Enterticket, and Caixabank.  We may share your data with public authorities and state forces if required. In addition, we may share your data to comply with tax obligations, as well as to Roig Arena Collaborators and Sponsors.  List of Sponsors and Collaborators.

International data transfers

Salesforce may transfer your data to its servers in the United States. They use mechanisms to ensure the security of your data.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  Minors' data

Data subject

Minors attending events held at Roig Arena.

Data

Identification and contact information (such as first name, last name, email address, phone number);

Other information such as date of birth, ID, and authorization from legal guardians to manage your attendance.

Purpose

Ticket purchase, event attendance and capacity management.

In addition, comply with legal and safety obligations.

Legal basis

Consent must be expressly given by the parent/guardian for children aged under 16.

Recipients or transfers

We use service providers such as Salesforce, Binarys, Enterticket, and Caixabank.  We may also share your data with public authorities and state forces if required.

International data transfers

Salesforce may transfer your data to its servers in the United States. They use mechanisms to ensure the security of your data.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  Guaranteed purchasing service

Data subject

Users taking out the guaranteed purchasing service.

Data

Identification details, contact details, and any personal information that may be included in the documents that prove the reason for the ticket refund (health information, death certificates of family members, court summons information, traffic accident or vehicle breakdown reports, damage to property, etc.).

Purpose

To provide the guaranteed ticket purchase service entitling you to obtain a refund for your tickets should any of the circumstances established affect the service.

Legal basis

Execution of a contract.

Recipients or transfers

We use service providers such as Salesforce, Enterticket, and Caixabank.  We may also share your data with public authorities and state forces if required.

International data transfers

 

Salesforce may transfer your data to its servers in the United States. They use mechanisms to ensure the security of your data.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  Car park

Data subject

Users of the Car park.

Data

Vehicle information (license plate, color, and model), identification information (first name, last name, email address, and optional phone number), and financial and payment information. Image data (video surveillance).

Purpose

Management of the contractual relationship for the provision of parking services and booking management;

Vehicle access, entry, and exit control.

Compliance with the vehicle custody obligations established by Law 40/2002.

Claims management.

Legal basis

Enforcement of contractual measures.

Recipients or transfers

Service providers such as: Dekalabs, Skidata, Global Payment, financial institutions.

Public authorities and state security forces in compliance with the corresponding legal obligations.

International data transfers

No international transfers are made.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  App

Data subject

Users of the App.

Data

Identification data (name, surname, email and optional telephone number) and financial and payment data.

Purpose

Allow access to and use of the App;

Manage the user profile and its features (e.g., tickets, bookings, notifications).

Legal basis

Enforcement of contractual measures.

Recipients or transfers

Service providers such as: Dekalabs, Covermanager, Global Payment, financial institutions.

International data transfers

No international transfers are made.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  Video surveillance

Joint controllers

●    Name and identity: Valencia Basket Club S.A.D. for sporting events in which it participates and/or which are organized by the club and held at the Roig Arena.

      Corporate Tax ID: A-46.406.930

Address and post code: Avenida Hermanos Maristas 16, Valencia (Valencia), 46013.

Contact information: rgpd@roigarena.es

 

●    Name and identity: Licampa 1617 S.L., as the owner of the facility, for shows and events organized and held at the Roig Arena.

Corporate Tax ID: B-98.955.503

Address and post code: C/ Bomber Ramon Duart 12, Valencia (Valencia), 46013.

Contact information: rgpd@roigarena.es

 

Data subject

All attendees within the Roig Arena, including the Car park.

Data

Image.

Purpose

Security during events, both at the venue and in the car park.

Legal basis

Our legitimate interest in maintaining the security of the venue during events and compliance with a legal obligation.

Recipients or transfers

Competent authority, such as the security coordinator and, where applicable, the State Security Forces and/or Courts. Some service providers (IT specialists, legal advisors, etc.), Prosegur, may have access to the data.

International data transfers

No international transfers are made.

Retention period

Recordings will be retained for one month after they are made, except in the event that a right of access is exercised, in which case the recording will be kept until a response has been issued, and no longer than the period established by the Data Protection Regulation for providing a response. They may also be retained for a longer period than indicated when required for submission as part of a judicial proceeding.

➔  Work with us

Data subject

Potential candidates.

Data

Identification and contact information (name, surname, email, phone number), academic and professional information (CV), and LinkedIn profile.

Purpose

Process your application to work with us, as well as manage the selection process for vacancies and conduct interviews, with a view to you joining our company.

Legal basis

Undertake pre-contractual measures at the request of the data subject when you apply via LinkedIn. Your consent when sending us your CV by email, via our website, or in person.

Recipients or transfers

We use service providers such as LinkedIn or Typeform, Bizneo Solutions S.L., temporary employment agencies.

International data transfers

Yes, LinkedIn may transfer data to the US, implementing mechanisms that guarantee data protection. Typeform stores its data in the US.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  Commercial communications

Data subject

Website users.

Data

Identification and contact information (first name, last name, email address, phone number.)

Purpose

Sending commercial communications about all activities at the venue.

Sending commercial and transactional communications related to products or services previously purchased.

Legal basis

For us to send you these communications, you must provide us with your consent. However, we may send you commercial and transactional communications related to products previously purchased, provided you have a contractual relationship with us and the products are related to them, pursuant to Article 21 of the Law on Information Society Services and Electronic Commerce.

Recipients or transfers

Service providers such as Salesforce.

International data transfers

Salesforce may transfer your data to its servers in the United States. They use mechanisms to ensure the security of your data.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  Draws

Data subject

Participants in the draw.

Data

Name, surname, email address, gender, and date of birth, and when required by the draw, voice and images.

Purpose

Manage your participation in the draw (including registration, communications regarding relevant aspects of the draw, prize selection, and delivery).

Legal basis

Execution of a contract.

Recipients or transfers

Your data may be shared with third-party service providers for the aforementioned purpose, such as Typeform and Easypromos, and social media.

International data transfers

Yes, Typeform transfers your data to the US, which implements appropriate mechanisms to ensure the security of these transfers.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

 

For non-winning participants, their data will be retained until the end of the draw. For winners, their data may be retained for an additional period, as required to process the delivery of the prize and comply with applicable legal obligations.

 

➔  Social media

Data subject

Event attendees and social media users who interact with Roig Arena profiles.

Data

Identifying data (name, social media username) and images.

Purpose

Address queries or concerns raised by users;

Disseminate images, videos, or other content related to events organized;

Publish and manage draws.

Legal basis

Legitimate interest in managing Roig Arena's presence on social networks, promoting its activities, and providing customer service.

Recipients or transfers

Service providers such as Meta.

International data transfers

Meta may transfer your data to other countries, such as the United States where one of its data centers its located or to other countries where its service providers are located.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  Suppliers

Data subject

Suppliers.

Data

Identification and contact information (first name, last name, email address) and financial data.

Purpose

Establish and manage the contractual relationship with our suppliers.

Legal basis

Execution of pre-contractual measures and execution of a contract.

Recipients or transfers

Service providers, such as Sage.

International data transfers

Sage may transfer your data to its servers in the United States. Sage uses mechanisms that guarantee the protection of your data.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  Contact us

Data subject

Website users.

Data

Identification and contact details (email, name).

Purpose

Respond to your requests for more information about the programs and services we provide, using available means, such as the online form, email (eventos@roigarena.es), contact phone numbers, and WhatsApp Web.

Legal basis

Consent.

Recipients or transfers

Service providers, such as Meta or Tess Quality, Landbot, Agencia Lobo.

International data transfers

In case of contact via WhatsApp Web. Meta may transfer your data to other countries, such as the United States where one of its data centers its located or to other countries where its service providers are located.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  Chatbot

Data subject

Website users.

Data

Identification information (full name and email address).

Purpose

Answer questions related to ticket purchases (requesting invoices, modifying tickets, resolving reported issues, etc.).

Legal basis

Consent.

Recipients or transfers

Service providers: Landbot.

International data transfers

No international transfers are made.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

➔  Exercise of rights

Data subject

Event attendees, car park and app users, and any other users listed in our database.

Data

Identification and contact information (full name and email address).

Purpose

Respond to requests about the exercise of rights.

Legal basis

Comply with a legal obligation.

Recipients or transfers

No data shall be transferred to third parties, unless there is a legal requirement to do so.

International data transfers

No international transfers are made.

Retention period

Generally, we will retain your data for the time strictly necessary to fulfill the purpose for which it was collected or, where applicable, for the legally established periods.

 

Recipients of Personal Data

Regarding the recipients of your personal data, you are hereby informed that Licampa takes the necessary measures to ensure compliance with the principles of data protection and privacy with the third parties with whom it maintains relationships, and that its primary purpose is to fulfill its duty of care in such activities.

The communication of personal data to third parties is subject to appropriate data protection measures and based on an appropriate legal basis. Licampa guarantees that third parties with whom it shares personal data comply with applicable data protection laws and regulations and implement appropriate security and data protection measures to guarantee the privacy and security of personal data.

To fulfill the purposes indicated in this Privacy Policy, it is necessary, on certain occasions, for third parties to provide support in the services offered.

These third parties, depending on their nature, may include:

-        Public authorities, regulators, or government agencies: These parties will be recipients of the data in cases in which the transfer thereof is required by law, local regulations or in compliance with regulatory obligations.

-        Security forces: law enforcement agencies and security forces that may require access to personal data in the performance of their duties and responsibilities.

-        Service providers: These are companies that provide services to Licampa and may be provided with access to the personal data required to provide those financial or online payment services, such as web hosting providers, email service providers, customer service providers, and other organizations with which Licampa has partnership agreements.

Licampa will ensure that providers are selected that offer appropriate safeguards and that their responsibilities regarding personal data are determined.

-        Financial institutions: financial institutions that may require access to personal data to process transactions, payments, and other financial services.

-        Sponsors: Third-party collaborators of Licampa who may require images of events and draws for marketing purposes and with whom we maintain a commercial relationship. List of Sponsors and Collaborators.

-        Media: Media outlets that may distribute images of events held at the venue.

Your data protection rights

Licampa recognizes and guarantees the exercise, free of charge in the cases established by current legislation, at any time and in an effective and accessible manner, of the following rights:

●      Access. You have the right to access your data, as well as to know whether or not your personal data is being processed. In this regard, you can obtain a copy of your personal data, although exercising this right cannot adversely affect the rights of other people and their right to data protection.

●      Rectification. As a data subject, you have the right to obtain, without undue delay, the rectification of inaccurate data or the completion of incomplete data.

●      Limitation. You have the right to obtain a limitation on the processing of your data, provided that any of the following circumstances apply:

-          You contest the accuracy of the data, for a period that allows us to verify its accuracy.

-          When you prefer limitation to deletion of the data.

-          When your data is not being processed and must be deleted, but it is needed to file a complaint or respond to a request.

-          When you have objected to the processing, but the legitimate grounds for doing so are being verified.

●      Objection. You have the right to object at any time, for reasons related to your particular situation, to the legitimate processing of your personal data.

●      Erasure. You have the right to have your data erased without undue delay, provided there is a justified reason for doing so.

●      Portability. As the data subject, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, provided that this is technically feasible. This right may not adversely affect the rights and freedoms of others.

●      Not to be subject to automated decisions. As the data subject, you have the right not to be subject to decisions made as a result of automated processing, including profiling, that may have a significant impact on you.

Furthermore, if Licampa's processing of your personal data is based on consent, pursuant to Article 7 of the GDPR, you have the right to withdraw that consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal. Withdrawing consent is just as easy as granting it.

Likewise, Licampa hereby informs you that, pursuant to Article 77 of the General Data Protection Regulation (GDPR), you have the right, as a data subject, to file a complaint with the Spanish Data Protection Agency if you believe that our processing of your personal data violates said Regulation.

You can find more information about your rights at the following link.

How to exercise your rights

Any data subject who wishes to exercise any of the rights described above may do so at the following email address: rgdp@roigarena.es.

Following the recommendations established in current legislation and the guidelines of the Spanish Data Protection Agency, you are hereby informed that in relation to minors under 16, the exercise of these rights will always be carried out by the person holding parental authority or their guardians, and that those over 16 years of age may fully exercise them by following the instructions described in this section.

The Spanish Data Protection Agency provides updated information to users to ensure they are fully aware of their data protection rights at all times.

Existence of automated decision-making or profiling and information on the use of artificial intelligence

We may personalize our commercial and promotional offers based on your interests and preferences, provided you give your consent. This profiling will be carried out with the aim of optimizing the offers we offer you, without generating any negative impact on you.

Likewise, you may object to the processing of your data at any time by sending an email to the contact indicated in the previous section (rgpd@roigarena.es).

Security measures applied to personal data

At Licampa, we are committed to implementing and maintaining appropriate technical and organizational security measures to protect personal data against destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

These security measures include, among others, data encryption, restricted access to personal data, the implementation of strong password policies, backups, and regular security assessments. In addition, our staff is provided with training and awareness regarding personal data protection and information security.

However, it is important to note that no security measures are completely foolproof, and no system can guarantee the absolute security of personal data.

Therefore, we cannot guarantee that personal data is completely secure and we disclaim any liability for any security breach that may occur, notwithstanding compliance with our legal obligations regarding data breaches.

Minors

Licampa hereby informs users that, in relation to the processing of data pertaining to individuals aged under 16, as provided by the Spanish Data Protection Agency, when the collection and processing of such data is based on consent, it must be kept in mind that it must be express and must be given by your parents or guardians.

The processing of personal data of minors aged under 16 will be based on the express consent given by their parents or legal guardians.

Those over this age may provide their own consent for the collection of their data, except in cases where the law requires them to be assisted by their parents or guardians.

As the data controller, Licampa will make reasonable efforts to verify that consent was given or authorized by the holder of parental authority or guardianship over the child, taking into account costs and available technology.

Third-party data

If the user provides the personal data of third parties (for example, when purchasing tickets on behalf of other people), they declare that they have previously informed said persons of the details contained in this Privacy Policy and, where applicable, have obtained their consent where necessary.

Furthermore, the user guarantees that the personal data provided is true, accurate, complete, and up-to-date, and undertakes to communicate any changes that may affect its correct processing.

The personal data of third parties provided will be processed solely for the purpose of properly managing the service requested (such as the issuance or sending of tickets) and will not be used for any other purposes, except where legally required or with the express consent of the data subject.

Changes and updates to our Privacy Policy

At Licampa, we may update and modify our Privacy Policy at any time and when we deem so appropriate to accurately reflect our privacy practices.

In this regard, we recommend that you review this Privacy Policy frequently to ensure you are aware of any changes or modifications.

If you have any queries about our Privacy Policy, you can contact us at: rgpd@roigarena.es.

Information about cookies

Briefly, we also want to inform you that we use cookies to facilitate your experience on the Platform and understand how you interact with us. Please read our Cookie Policy to learn more about the cookies we use, their purposes, and other information of interest.