Privacy Notice

1. Who we are

Madrid Cricket Club ("the Club", "we", "us") is an amateur sports club based in Madrid, Spain. We are affiliated to Cricket España, the national governing body for cricket in Spain.

Our contact email for data-related enquiries is secretary@madridcricketclub.es.

2. What data we collect

When you apply for membership we collect:

• Full legal name and preferred name
• Date of birth and nationality
• Gender (as required by Cricket España)
• Identity document type and number (DNI/NIE/Passport)
• Residential address
• Mobile number and email address
• Emergency contact name, relationship and phone number
• Relevant medical information and dietary requirements
• Playing information (role, previous clubs, kit size)
• Photo and media consent
• Parent/guardian details for members under 18

We also collect usage data when you use the members' platform (availability responses, payment declarations, etc.).

3. Why we collect it (legal basis)

4. Who we share it with

Cricket España: We share your registration data with Cricket España annually for insurance and affiliation purposes. This is sent as a secure, encrypted file. We maintain a disclosure log of all data shared.

We do not sell, rent or otherwise share your personal data with third parties for marketing or commercial purposes.

5. How long we keep it

At the start of each membership year, sensitive identity data (identity document numbers, date of birth, medical information) from the previous year is deleted. You will be asked to provide this again at renewal. Your name, contact details and club history are retained indefinitely to support re-joining and historical records.

6. Your rights

Under the GDPR and Spanish data protection law (LOPDGDD) you have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to our retention obligations)
• Object to or restrict our processing
• Data portability
• Lodge a complaint with the Spanish data protection authority (AEPD) at www.aepd.es

To exercise any of these rights, contact us at secretary@madridcricketclub.es.

7. Data security

We use industry-standard security practices: passwords are stored using a computationally-hard hashing algorithm (argon2id), sensitive data is encrypted at rest and in transit, and access to personal data is restricted by role. Two-factor authentication is mandatory for all administrators.