Privacy Policy

The data controller is A2 Global Solutions XXI, S.L.U. (NIF [NIF — pending]), which operates Vilarosa Academy in Santa Susanna, Barcelona, Spain. You can reach us about anything in this policy at hola@vilarosa.com. Academic-year admissions are handled at academy@vilarosa.com.

We follow the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).

We collect only what you choose to send us, plus a minimum of technical data needed to run the website:

• When you contact us or apply for Trials: the parent or guardian's name, email address, phone number and country; the player's name, date of birth, current club, playing position, school details, highlight-video links and any social media handles you choose to share; and anything else you include in your message.
• When you visit the website: technical data such as IP address, browser type and pages requested, recorded in our hosting provider's server logs for security. We also use Vercel Web Analytics, which produces aggregate visit statistics without cookies and without identifying you or tracking you across other websites.

Our players are minors. We collect information about a player under 14 only from, or with the consent of, their parent or legal guardian, as required by Article 7 of the LOPDGDD. Players aged 14 and over may contact us themselves, but we always involve a parent or guardian before any Trials place or enrolment is confirmed. If we find we have received data about a child under 14 without that consent, we delete it.

• To answer your enquiries and handle Trials applications and admissions, which are steps you ask us to take before entering into an agreement (GDPR Art. 6(1)(b)).
• To deliver Trials and the academy programme once agreed (Art. 6(1)(b)).
• To meet our legal, tax and accounting obligations (Art. 6(1)(c)).
• To send you news about future Trials and programmes, only if you ask us to. You can withdraw that consent at any time (Art. 6(1)(a)).
• To keep the website secure and understand overall usage (our legitimate interest, Art. 6(1)(f)).

We do not sell personal data, and we do not use it for automated decision-making or profiling.

• Service providers that process data on our behalf under a data processing agreement: Google (email), Vercel (website hosting and analytics), and the providers behind our Trials application and payments (database hosting, card payment processing and transactional email).
• Our affiliated companies in the United States that manage enrolment agreements and payments for Vilarosa Academy.
• Public authorities, including immigration authorities for visa applications, when the law requires it or when you ask us to act for you.

Some of these recipients are located in the United States. Transfers to Google and Vercel rely on the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses. Transfers to our affiliated US companies take place where they are necessary for the enrolment you have requested (GDPR Art. 49(1)(b)).

• Enquiries that do not lead to Trials or enrolment: up to two years after our last contact.
• Trials applications: until the end of the following academic year, unless the player enrols.
• Enrolled students: for the length of enrolment, then for as long as the law requires (for example, six years for accounting records).

You can ask us to access, correct or delete your data, to restrict or object to how we use it, or to send it to you or another organisation in a portable format. Where we rely on your consent, you can withdraw it at any time. Email hola@vilarosa.com with “Data protection” in the subject line. We may ask you to confirm your identity, and we will reply within one month.

If you are not satisfied with our answer, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

We use appropriate technical and organisational measures to protect personal data, and access is limited to the staff who need it to do their work.

See our Cookie Policy.

If we change this policy, we will publish the new version here with a new date. If the changes are significant, we will tell the families we are in contact with.