Home

Privacy Policy and Personal Data Processing

This is a courtesy translation. The Spanish version is the official text and prevails in case of any discrepancy.

PURPOSE:

To establish the criteria for the collection, storage, use, circulation and deletion of the personal data processed by LET’S FÚTBOL, guaranteeing the effective exercise of the constitutional right of habeas data and complying with Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and other applicable regulations of the Republic of Colombia.

SCOPE:

This Policy applies to the personal data of users registered with LET’S FÚTBOL, collected through its mobile applications (iOS and Android) and its official website, to that of those who visit its website, and to that of those who contact LET’S FÚTBOL through its support channels.

MANDATORY COMPLIANCE:

This Policy is mandatory for the Controller (Responsable) and for the collaborators, contractors and Processors (Encargados) who process personal data on behalf of LET’S FÚTBOL.

DATA CONTROLLER:

Jonathan Pacheco Urueta, a natural person, identified with citizenship card (cédula de ciudadanía) 1.045.692.269, who operates the platform under the trade name LET’S FÚTBOL. Address: Barranquilla, Atlántico, Republic of Colombia. Email address: privacy@letsfutbol.com. Telephone: +57 300 444 1402. Website: https://letsfutbol.com.

DATA COLLECTED:

  • Account data: first name, last name, email address and password (stored encrypted by the authentication provider). If the Data Subject signs in with Google or Apple, also the user identifier provided by that provider; with Apple, the email may be a private relay address.

  • Sports profile (optional): profile photograph, playing positions, preferred foot and date of birth. The date of birth is not shown to other users: it is used only to fill in the registration form for a tournament when the Data Subject registers for one.

  • Account mobile number (optional): the mobile number that the Data Subject adds in Profile › Edit profile and, if the Data Subject verifies it with the code received by text message (SMS), the date of verification. A given number can only be verified on one account: if another account verifies it, on the Data Subject’s account it becomes unverified. It is not shown to other users. For now it is kept only in the profile; if LET’S FÚTBOL later allows account recovery or signing in with the mobile number, it will state so in this Policy and, if the law requires it, will request authorization before using it for that purpose.

  • Activity on the platform: clubs to which the Data Subject belongs and their role, join requests, matches and series to which they are called up, attendance confirmations, waiting list, results and seasons, club crests they upload and, in tournaments, their “Are you going?” responses to their team’s matches.

  • Tournament data: when a club takes part in a tournament operated on LET’S FÚTBOL, the tournament organizer provides the roster of each team: full name, date of birth, position (goalkeeper or outfield player), jersey number and mobile number or email address of each player, and the name of the team delegate. During the tournament, the results, goals, cards and other sanctions, the suspensions of each player and each team, and the man of the match (MVP) chosen by the organizer are recorded. These data may refer to persons who do not have an account on LET’S FÚTBOL. The mobile number and email address on the registration form are used only so that the player can link their form to their account (see “Linking a tournament registration form”): LET’S FÚTBOL stores them in readable form, in a standardized format (not pseudonymized), in its database encrypted at rest, because the tournament administrators see them and can correct them; it does not publish them or show them to other players, and only the tournament administrators see them. The organizer may also upload the photograph for a player’s ID card (see “Tournament ID card and verification page”). LET’S FÚTBOL does not receive the players’ identity document, health insurance affiliation or address: the organizer keeps those data.

  • Linking a tournament registration form: if the email address of the Data Subject’s account, verified by the authentication provider, is the same as that on a registration form, the application offers to link it without a code (“It’s me”). If not, when the Data Subject asks to link their form, LET’S FÚTBOL processes the mobile number or email address entered in the application and the verification code received by text message (SMS) or by email. What is entered is used only to look up their form and send them the code, which is sent only if it matches the contact details provided by the organizer; the application’s response is the same whether or not there is a match. The name alone never links a form. If the Data Subject links with a code sent by SMS and their profile had no other number, that number becomes the verified mobile number of their account (see “Account mobile number”); if they had another one, the application asks whether they want to save it.

  • Tournament registration from the application: when a tournament organizer allows teams to register with their LET’S FÚTBOL clubs, the club owner or a captain pre-registers the club and each member fills in their own registration form. The form stores the first name, last name, date of birth, position and preferred jersey number, and the answers to the questions that the organizer configures for their tournament (up to three; for example, the name and category of a son or daughter enrolled in the school that organizes the tournament). It also stores the record of the Data Subject’s authorization: the date and time at which it was given, the version of the text that was accepted, the organizer and the questions that were shown, and whether it included data of a minor. For the person who pre-registers the club, the record shows that they were the one who pre-registered it.

  • Reports and blocks: the reports that the Data Subject submits (reason, optional comment and a copy of what was reported: name, photograph or crest and match details) and the users they block. If the Data Subject is reported, the report stores that copy of their name, their photograph or the details of the reported club or match; the reported Data Subject is not notified of the report.

  • Notifications: device identifier (token) for sending push notifications and the notices generated within the application.

  • Technical data: IP address and server access and operation logs.

  • Crash reports: device model and operating system, application version and installation identifier. These reports are not linked to the Data Subject’s name, email address or account.

LET’S FÚTBOL does not collect device location, identity documents, health data or payment data; it only processes the date of birth that the Data Subject adds to their profile, the date of birth and the mobile number and email address of the players registered in a tournament and the mobile number that the Data Subject adds to their account, and the answers to the questions of a tournament organizer, as explained in this document, and it does not use the profile photograph or the tournament ID card photograph for facial recognition or biometric purposes.

PROCESSING AND PURPOSE:

  1. Provision of the service: managing registration and sign-in, the profile, the creation and administration of clubs, invitations and join requests, the calling up of matches and weekly series, attendance, the waiting list, results and seasons.

  2. Visibility within the community: showing the name, photograph and sports profile details (except the date of birth) to the other members of the Data Subject’s clubs and to the participants in their matches, together with their attendance and the results in which they took part. The web pages of invitation links show to anyone who has the link the club’s name, color and crest and, for a match, its name, date, time and venue, without any personal data; the link for a match stops showing data when it expires. The public page of a tournament and the verification page of a player’s ID card do show data of the registered players, as indicated in the purpose “Tournaments” and in “Tournament ID card and verification page”.

  3. Service communications: sending push notifications and in-app notices about the Data Subject’s clubs, matches and tournaments (call-ups, changes, cancellations, reminders, requests and results; in tournaments, published dates, rescheduled matches, results, announcements, the selection of the man of the match and the status of the photograph of their ID card), emails necessary to operate the account (email verification, password recovery and notices about access to the account) and, when the Data Subject requests it, the verification code by text message (SMS) or by email to link their tournament registration form or verify the mobile number of their account. Notices about matches, results, announcements, the man of the match and the ID card of a tournament are only delivered to the accounts linked to a registration form of that tournament. LET’S FÚTBOL does not send advertising or commercial messages. The Data Subject may disable push notifications at any time from the settings of their device, and pause or mute them by match, series or tournament from Profile › Notices.

  4. User support: handling inquiries, petitions, complaints, claims and habeas data requests.

  5. Security and quality: protecting the platform against unauthorized access, enforcing the Terms and Conditions, and detecting and correcting technical failures.

  6. Moderation: receiving and reviewing reports of content and conduct, applying the measures of the Terms and Conditions (removing or modifying content and suspending or cancelling accounts), applying blocks between users (hiding the photograph, the requests and the notices originating from the blocked user) and automatically analyzing profile photographs, tournament ID card photographs and crests when they are uploaded in order to detect sexual, violent or offensive content; if it is detected, the image is not published. This analysis looks for types of content; it does not identify people or perform facial recognition.

  7. Tournaments: organizing the competition (groups, fixtures, scheduling and brackets), calculating league tables, fair play scores, suspensions and awards, and publishing on the tournament’s public web page, for anyone, the name, position and jersey number of the players on each roster, their goals, the cards and sanctions of each match, the man of the match (MVP), the results, the schedule and the tournament’s announcements. In the application, the players with a linked form and the owner and captains of the registered clubs also see the tournament with its tables, fixtures, bracket, awards and rosters (name, position and jersey number); the teammates of the same team also see the suspensions with their reason and who answered “I’m going”, “Maybe” or “I’m not going” for each match, and the others who see the match in the application only see how many responded. The date of birth is not published or shown to other players in the application: it is used to calculate the age range required by the tournament rules and, if the player registers from the application, to manage their registration, and it is seen only by the tournament administrators. If the tournament has age ranges, the player’s range (for example, “25–30”), never their date of birth or age, is seen by their teammates in the application and appears on their ID card and on the ID card verification page. The mobile number and email address on the form are not published or shown to other players: they are seen only by the tournament administrators and are used only to link the form with the player’s account, by offering to link it without a code if the email address on the form is the verified email address of their account, or by sending them, by SMS or by email, the code that verifies that the person asking to link it is the registered player. The code is sent only if the data matches that of a form of the tournament. When the Data Subject registers for a tournament from the application, LET’S FÚTBOL delivers to the tournament organizer, whom the form names, the data of their form and their answers, so that the organizer may review and manage the registration. The answers are not published or shown to the team delegate or to the other players: they are seen only by the tournament administrators. The club owner and captains see, for each player of their club, the name, position, jersey number and the status of their form, but not their date of birth or their answers.

If in the future LET’S FÚTBOL incorporates features that require data or purposes other than those described here, it will update this Policy and, when the law requires it, will request a new authorization before processing them.

TOURNAMENT DATA PROVIDED BY ORGANIZERS:

The data on a tournament’s rosters is provided by its organizer, who represents to LET’S FÚTBOL that they have obtained from each player and from the delegate the authorization to provide it and to publish on the tournament page their name, position, jersey number, goals, cards, sanctions and the man of the match (MVP) distinction; the authorization for LET’S FÚTBOL to use the mobile number or email address provided to send the player the code that links their form; if they upload the photograph for a player’s ID card, the authorization to display it on their ID card and on the ID card verification page; and, if the tournament has age ranges, the authorization to display each player’s range (never their date of birth or age) to their teammates in the application, on their ID card and on the ID card verification page. Anyone who appears on a roster may exercise before LET’S FÚTBOL the rights described in this document, in particular to know, rectify or request the deletion of their data, by writing to privacy@letsfutbol.com. The removal of a player from a roster does not alter the scores or the points already recorded in the tournament.

TOURNAMENT ID CARD AND VERIFICATION PAGE:

Each player with a form in a tournament may have a digital ID card with a QR code, which they show at the entrance to the pitch so that the organizer can verify that they are the registered player and that they are eligible to play. The application stores on the Data Subject’s phone the QR and the latest status of their ID card in order to display it without a signal.

  • ID card photograph: it is proposed by the Data Subject from the application (their profile photo, a new photo or one from their gallery) or uploaded by the organizer. It is a separate copy of the profile photograph. When uploaded, it is automatically analyzed to detect prohibited content, like every photograph (purpose “Moderation”). The organizer compares it by eye with the player’s document and verifies it, or rejects it stating the reason; a rejected photo is deleted immediately. LET’S FÚTBOL does not perform facial recognition or automatically compare faces. Uploading it is optional: without a photograph the ID card has no QR code, and at the entrance they may ask for your document.

  • QR code and verification page: the QR opens a web page at app.letsfutbol.com/carnet/ that anyone who scans it can view without signing in. It shows only the player’s status in the tournament (eligible, suspended with the reason and the dates remaining, or unverified photo), their ID card photograph, their name, their jersey number, their team and the tournament, the age range if the tournament has ranges, and the time of the query. It never shows the date of birth, age, mobile number or email address. The address carries a random 128-bit code that is impossible to guess, the page is not allowed to be indexed by search engines and has a limit on queries per IP address. The Data Subject and the organizer may renew the QR at any time: the previous one stops working, even if it is printed or has been shared.

  • Retention: the ID card photograph and its QR are deleted thirty (30) days after the tournament ends, or earlier if the Data Subject deletes their account. From that moment the verification page says that the QR is no longer valid and shows no data.

TOURNAMENT REGISTRATION FROM THE APPLICATION:

To register for a tournament from the application, the Data Subject reviews their form and ticks, separately from the submit button, the checkbox by which they authorize sharing their data with the organizers of that tournament, whom the form names. That authorization is specific to each tournament: registering for one does not authorize sharing data with another. If it is not ticked, the form is not submitted. LET’S FÚTBOL keeps the record of each authorization so as to be able to prove it to the Data Subject or to the authority.

The organizer receives the data on the form to manage the registration and their tournament, and processes it under their own responsibility, for the purposes they inform their participants of. The Data Subject may withdraw their form from the application while the tournament’s registrations are open and the form has no goals, sanctions or man of the match distinction; upon withdrawal, the authorization is revoked and the form is anonymized. After that point they may request deletion by writing to privacy@letsfutbol.com; the deletion does not alter the scores or the points already recorded in the tournament.

DATA OF CHILDREN AND ADOLESCENTS IN TOURNAMENTS:

Some organizers, for example a football school that organizes a parents’ tournament, ask on the form for data about a son or daughter of the player, such as their name and category. In that case the form says so and the Data Subject, by ticking the checkbox, declares that they are their legal representative and authorizes its processing solely so that the organizer may verify the registration, respecting the best interests of the minor and their fundamental rights, in accordance with article 7 of Law 1581 of 2012 and article 12 of Decree 1377 of 2013. These data are not published, are not seen by the team delegate or the other players, are seen only by the tournament administrators, and are deleted when the form is rejected or thirty (30) days after the tournament ends.

EXCLUSIVE USE BY ADULTS:

LET’S FÚTBOL is intended for persons over eighteen (18) years of age and does not intentionally collect data of children and adolescents, except for those that their legal representative provides upon registering for a tournament, as explained in “Data of children and adolescents in tournaments”. If LET’S FÚTBOL learns that an account belongs to a minor, it will delete it together with its data. Anyone may report this to privacy@letsfutbol.com.

SENSITIVE DATA:

LET’S FÚTBOL does not request sensitive data relating to health, racial origin, religious or political convictions or sexual orientation. With respect to the profile photograph, as it constitutes biometric data under Colombian regulations, the Data Subject is expressly informed that providing it is strictly optional. The Data Subject is not required to upload their photo in order to use the service. If they decide to provide it, it will be used solely to allow visual recognition within the community and for content moderation: when uploaded it is automatically analyzed to detect sexual, violent or offensive content and, if it is reported, the report stores a copy, as indicated in the data under “Reports and blocks” and in the purpose “Moderation”. The Data Subject may modify or delete it at any time from their profile settings. The same applies to the tournament ID card photograph: it is optional, it is used solely so that the organizer and whoever scans the ID card’s QR can visually recognize the player and for the same moderation, it is not used for facial recognition or biometric purposes, and it is deleted as indicated in “Tournament ID card and verification page”.

DATA PROCESSORS AND TECHNOLOGY PROVIDERS:

To operate the Platform, LET’S FÚTBOL relies on the following providers, which process personal data on behalf of LET’S FÚTBOL as Data Processors (Encargados del Tratamiento). They do so only for the purposes of this Policy and subject to obligations of confidentiality and security:

  • Amazon Web Services, Inc. (AWS): hosting of the servers, databases and website; storage of profile photographs, tournament ID card photographs and club crests (Amazon S3); sending of internal report notices (Amazon SES); automatic analysis of photographs and crests for moderation (Amazon Rekognition); and technical operation and security logs (Amazon CloudWatch and AWS WAF). Data processed: first name, last name, email address, photographs, sports profile data, clubs, matches, attendance and results, mobile number and email address of tournament forms, account mobile number, verification codes, IP address and access logs.

  • Resend, Inc.: sending of account emails (links to verify the email address and to create or reset the password, password change notice and notices about access to the account) and of the codes to link the tournament registration form. Data processed: email address of the Data Subject or that of their tournament form and content of the message. Resend keeps a record of each message sent for up to thirty (30) days.

  • Google LLC – Firebase Authentication (Identity Platform): user authentication: registration and sign-in with email and password, with Google or with Apple; management of passwords, which it stores encrypted; email address verification; and sending of text messages (SMS) with the codes to link the tournament registration form and to verify the account mobile number. Data processed: email address, account identifier, encrypted password, name and photograph provided by Google or Apple when the Data Subject signs in with them, mobile number to which a code is sent, IP address and device and browser data used to protect the account.

  • Google LLC – Firebase Remote Config: configuration of the application, such as the minimum version required to keep using it. Data processed: installation identifier and technical data of the application and the device (version, operating system, language and time zone). These data are not linked to the Data Subject’s name, email address or account.

  • Google LLC – Firebase Crashlytics: logging of application crashes to detect and fix errors. Data processed: device model and operating system, application version, technical crash report and installation identifier. These data are not linked to the Data Subject’s name, email address or account.

  • Google LLC – Firebase Cloud Messaging: delivery of push notifications on Android and iOS. Data processed: device identifier (token) and content of the notification, such as call-ups, changes or cancellations of matches.

  • Apple Inc. – Apple Push Notification service: delivery of push notifications on iOS devices. Data processed: device identifier (token) and content of the notification.

  • Google LLC – Google Workspace: management of the mailboxes support@letsfutbol.com and privacy@letsfutbol.com to handle petitions, complaints, claims and habeas data requests. Data processed: whatever the Data Subject includes in their message.

Sign-in with third parties: if the Data Subject chooses “Continue with Google” or “Continue with Apple”, Google LLC or Apple Inc. verify their identity and provide LET’S FÚTBOL, through Firebase Authentication, with their name and photograph (when the provider shares them), their email address and a user identifier. LET’S FÚTBOL does not receive or store the password of those accounts. If the Data Subject signed in with Apple and deletes their account from the application on an iPhone or iPad, LET’S FÚTBOL asks Apple to revoke the application’s access to their Apple ID. The processing that Google and Apple carry out of their own users is governed by their privacy policies, as independent controllers.

App stores: the application is distributed through the App Store (Apple Inc.) and Google Play (Google LLC). The data that those stores collect when the application is downloaded are governed by their own policies.

LET’S FÚTBOL does not sell personal data or hand it over to third parties for their own purposes, such as advertising.

INTERNATIONAL TRANSMISSION OF DATA:

The Data Processors store and process the data on servers located in the United States of America: AWS in the Northern Virginia region, Resend in its data centers in the United States, and Google and Apple in their own data centers. This international transmission is carried out in accordance with articles 24 and 25 of Decree 1377 of 2013 (compiled in Decree 1074 of 2015), with the authorization of the Data Subject and under each provider’s data processing terms. Those terms require the Processor to process the data only on the instructions of LET’S FÚTBOL and to apply appropriate security measures.

SECURITY MEASURES:

LET’S FÚTBOL protects personal data with encryption in transit (HTTPS/TLS) between the application, the website and the servers; encryption at rest of the database and of the stored photographs; access restricted to authorized personnel; and monitoring of technical logs to detect unauthorized access. Verification codes are stored only as a cryptographic hash, never in plain text, expire after ten (10) minutes and allow up to five (5) attempts; the technical logs show the mobile number and email address masked.

RIGHTS OF DATA SUBJECTS:

In accordance with article 8 of Law 1581 of 2012, the Data Subject (Titular) of the personal data has the following rights:

  1. Access: to access free of charge the personal data that have been processed.

  2. Knowledge, updating and rectification: to know, update and rectify their information with respect to partial, inaccurate, incomplete, fragmented or misleading data, or data whose processing is prohibited or has not been authorized. The Data Subject can update their name and profile directly from the application.

  3. Proof of authorization: to request proof of the authorization granted, except in cases where the law exempts that requirement.

  4. Information on use: to be informed, upon request, of the use that has been made of their personal data.

  5. Complaints to the SIC: to file with the Superintendencia de Industria y Comercio (SIC) complaints for infringements of the personal data protection legislation.

  6. Revocation and deletion: to revoke the authorization and/or request the deletion of their personal data, provided that there is no legal or contractual duty that makes it mandatory to keep the information.

HANDLING OF PETITIONS, INQUIRIES AND CLAIMS:

The Controller receives, processes and resolves the requests, inquiries, complaints and claims of Data Subjects through these channels:

  1. Habeas data: email privacy@letsfutbol.com.

  2. General support: email support@letsfutbol.com.

  3. Service hours: Monday to Friday, 8:00 a.m. to 6:00 p.m. (business days).

PROCEDURE FOR EXERCISING THE RIGHT OF HABEAS DATA:

To file any request relating to their personal data, the Data Subject, their successors, their representative or their attorney must write from the email address registered on their account, or prove their identity if writing from another, and state:

  1. Full name of the Data Subject.

  2. Email address of the account and contact details to send the response.

  3. Clear description of the facts giving rise to the request and the specific right they wish to exercise (to know, update, rectify, revoke the authorization, request proof of it or delete the data).

  4. Documents supporting the request (if applicable).

The handling of requests will be subject to the following legal deadlines:

A. Handling of inquiries (to know information or request proof of authorization)

  • Inquiries will be answered within a maximum of ten (10) business days counted from the date of receipt.

  • If it is not possible to resolve the inquiry within that period, the interested party will be informed before the deadline expires, stating the reasons for the delay and indicating the date on which it will be resolved, which will not exceed five (5) business days following the expiry of the first period.

B. Handling of claims (updating, rectification, deletion or revocation)

  • If the claim is incomplete, the interested party will be asked within five (5) business days following its receipt to correct the deficiencies. If two (2) months pass from the date of the request without the claimant submitting the required information, the claim will be deemed withdrawn.

  • Once the complete claim is received, the legend “claim in progress” will be added to the database within a period of no more than two (2) business days.

  • The maximum period to resolve the claim will be fifteen (15) business days counted from the day following the date of receipt. If it is not possible to address it within that period, the reasons for the extension will be reported, which may not exceed eight (8) additional business days.

Direct account deletion: without prejudice to the foregoing procedure, the Data Subject may delete their account from Profile › Delete account in the application. The process is carried out directly; if the Data Subject is the owner of a club, a future match or an active series, they must first transfer or cancel it.

C. Complaints to the supervisory authority

Once the direct procedure before LET’S FÚTBOL has been exhausted, if the response is denied or unsatisfactory, the Data Subject may turn to the Superintendencia de Industria y Comercio (SIC) – Delegation for the Protection of Personal Data, in accordance with article 16 of Law 1581 of 2012.

EFFECTIVE DATE AND RETENTION PERIOD:

This Privacy and Personal Data Processing Policy takes effect on October 20, 2026 and was last updated on October 18, 2026. Its substantial changes will be communicated in the application or to the registered email address at least five (5) calendar days in advance of their entry into force.

Data are kept for as long as necessary to fulfill the purposes of this Policy, according to these criteria:

  • Account and sports profile data: for as long as the Data Subject keeps their account active and does not request the deletion of their data.

  • Account deletion: the Data Subject may delete their account from Profile › Delete account in the application or, without the application, following the instructions at https://app.letsfutbol.com/delete-account/, by writing to privacy@letsfutbol.com from the registered email address. If they are the owner of a club, a future match or an active series, they must first transfer or cancel it; for as long as they are, the application does not allow deleting the account. Upon deletion, the following are erased immediately: the profile, the photograph, the devices registered for notifications, the notices and the access user. In matches already played, the attendance and results are kept anonymized (“Deleted player”) so as not to alter the history of the other participants. If the Data Subject has a tournament form that they filled in from the application and that form already has goals, sanctions or the man of the match distinction, only their name is kept as a tournament record, with no link to the account, and their date of birth and their answers are deleted; if it does not, the form is anonymized (“Withdrawn player”). The record of the authorization is kept as proof, according to the retention criterion for authorizations. If the Data Subject has forms in tournaments uploaded by the organizer, each form is unlinked from their account and remains on the tournament roster as data of the organizer (with their mobile number or email address until its retention period expires). In all cases, the photograph and QR of their tournament ID cards, their “Are you going?” responses to tournament matches and their verification codes are erased immediately.

  • Reports: up to twelve (12) months after being resolved; they are then deleted. If the person who filed the report deletes their account, the report is kept without identifying them until that period is reached.

  • Blocks: while both accounts exist; they are erased when the Data Subject unblocks or when one of the two accounts is deleted.

  • Mobile number and email address of tournament forms: they are deleted thirty (30) days after the tournament ends, even if the form is already linked to an account.

  • Tournament ID card photograph and QR: thirty (30) days after the tournament ends; a photo rejected by the organizer is deleted immediately.

  • Account mobile number: for as long as the Data Subject has it in their profile; they may change or remove it in Profile › Edit profile, and it is erased with the account.

  • Verification codes and the mobile number or email address to which they were requested: they expire after ten (10) minutes and are deleted when used or, at the latest, two (2) hours after expiring.

  • Answers to the questions of a tournament organizer: they are deleted when the form is rejected or thirty (30) days after the tournament ends, whichever occurs first.

  • Record of tournament registration authorizations: it is kept for as long as it may be required as proof of the authorization before the Data Subject or the authority, even if the form is anonymized or the account is deleted.

  • Residual copies: after deletion, technical copies that are erased automatically may remain: database backups (up to 14 days), previous versions of photographs (up to 30 days), technical operation logs (up to 30 days) and crash reports not linked to the Data Subject (up to 90 days).

  • Definitive deletion: once the purposes have been fulfilled and in the absence of a legal, contractual or judicial duty that requires their retention, the data will be deleted or anonymized from the servers and databases of LET’S FÚTBOL.

Apart from the periods indicated above for the mobile number and email address of the forms, the ID card photograph and QR, and the answers to the questions of the organizer, tournament data are kept as a historical record of the tournament for as long as its page is published, unless the Data Subject requests its deletion.