Privacy Policy
Last updated: 29 July 2026
Pending legal review. This document follows the EU GDPR (Regulation 2016/679) and Spain’s LOPDGDD. Because the programme processes the data of minors, a qualified lawyer must review it — and the parental-consent mechanism in particular — before publication.
This Privacy Policy explains how Sancom Iberia S.L. (trading as “Total Sports Soccer Academy”; “the Academy”, “we”, “us”) processes the personal data of website visitors, players, parents and legal guardians, clubs and partners.
1. Data Controller
- Entity: Sancom Iberia S.L.
- Tax ID (CIF): B70824792
- Registered address: Calle Nuria 80, Escalera B, planta 7, 28034 Madrid, Spain
- Email: privacy@totalsportsgroup.es
2. What data we collect
- Enquiry and pre-registration data: name, email, phone, country, the player’s age and position, the program of interest, and anything you write in the message field.
- Admissions data, once an application progresses: identity and travel documents, academic records, medical and dietary information, emergency contacts, and the details required for the visa process.
- Technical data: IP address, browser and device type, and pages visited.
We do not collect payment card data through this website.
3. Data concerning minors
Most of our players are under 18. Where the person concerned is a minor, enrolment data is provided and authorised by a parent or legal guardian, who is also our point of contact for exercising the rights set out in section 6. We do not knowingly collect data directly from a minor without that authorisation.
Health and dietary information is special-category data under Article 9 GDPR. We process it only to safeguard the player’s vital interests and to deliver the medical, nutritional and insurance services described on this site, on the basis of explicit consent given by the parent or guardian.
4. Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering enquiries and processing pre-registrations | Steps prior to a contract (Art. 6.1.b) |
| Managing admission, enrolment, residence and the visa process | Performance of a contract (Art. 6.1.b) |
| Health, dietary and insurance management | Explicit consent (Art. 9.2.a) and vital interests (Art. 6.1.d) |
| Meeting legal, tax and safeguarding obligations | Legal obligation (Art. 6.1.c) |
| Improving the website and measuring traffic | Consent (Art. 6.1.a) — see the Cookies Policy |
5. Who we share it with
- ESC American School Madrid and the education partner, for schooling, residence and campus access.
- Insurers and healthcare providers, where an incident or a policy requires it.
- Consulates, embassies and immigration authorities, for visa applications.
- Service providers (hosting, email, form handling) acting as processors under a data-processing agreement.
We do not sell personal data. Where a provider is outside the European Economic Area, transfers are covered by an adequacy decision or by Standard Contractual Clauses.
6. Your rights
You may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw any consent at any time, by writing to privacy@totalsportsgroup.es with proof of identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. How long we keep it
Enquiry data is kept for up to 12 months from the last contact. Data relating to an enrolled player is kept for the duration of the program and for the periods required by tax, accounting and safeguarding law thereafter, then deleted or anonymised.
8. Security
We apply appropriate technical and organisational measures — encryption in transit, access control and staff confidentiality undertakings — to protect personal data against unauthorised access, loss or disclosure.