MEMBERS APP PRIVACY POLICY

1. DATA CONTROLLER

Your personal data will be processed by FC Barcelona, located at Avinguda Arístides Maillol s/n, 08028, Barcelona, holder of Tax ID number G-08266298.

2. PURPOSES

Data managed through the Members App shall be processed for the following purposes:

• Registration, access and profile activation of members on the Platform.

• To communicate with other members using the Platform, as well as to share whether or not you will be attending sports events.

• To manage “free seats” by freeing up your seat or recovering it for selected matches.

• To check payments received for “free seats”, as well as to change Club payment methods.

• To request tickets to attend matches available or to cancel a request.

• To activate or deactivate a child’s and/or adult’s passport to attend available matches.

• To manage children’s invitations for available events.

• To access news and benefits related to the Club through the “Members Area”, as well as to receive said news and benefits through push notifications.*

• To process your geolocation data.**

• Detect and prevent any identity fraud.

For a better experience and fraud or misuse detection while using our service, the app may collect certain identifiable information, including but not limited to ANDROID_ID, AdvertisingId. The information that the App requests will be retained on your device and collected by our server.

The app does use third party services that may collect information used to identify you. You can consult the privacy policy of the third-party service providers used by the application through the following links:

• Google Play Services

• Firebase Analytics

• Firebase Crashlytics

• Adobe Analytics

The legitimate basis for said data processing is your consent, although in some cases said data processing may be justified by the contractual relationship that joins us or a legitimate interest held by the Club.

*If you do not wish to receive said notifications, please change the notification settings on your device.

**You will receive a push notification to accept geolocation data. If you do not wish to activate geolocation, please do not accept the notification.

3. SHARING OF YOUR DATA

Your data shall not be transferred, sold, rented or made available in any way to any third party, except to service providers of FC Barcelona that perform certain activities for the Club (such as sending the newsletter), but that under no circumstances will process your data for their own purposes. Some of the suppliers may be located outside of the European Union, as indicated in section 5.

Should you wish to receive information from third parties, such as the Fundació FC Barcelona or sponsors, it shall always be sent by FC Barcelona and we shall not provide said third parties any information unless you have given us your express consent to do so.

4. AUTOMATED DECISIONS AND PROFILING

For some services, we may process your personal data using automated means. That means that certain decisions shall be taken automatically without human intervention. Examples include segmentation based on your interest in certain sections of FC BARCELONA or on whether you use services at our facilities, such as free Wi-Fi.

Additionally, we may create a profile by analysing your behaviour on our website to show you products that may interest you based on the preferences you’ve exhibited while browsing or from information obtained through cookies.

Moreover, if you have agreed to receive commercial communication, it may be adapted and personalized based on users’ interests, whether that be based on requested products and services or data that we may deduce or obtain from your browsing behaviour, interest in certain content and reaction to our notifications, among other things.

Said personalization is partially automated in that the Club determines the personalization parameters but the technological platform generates the user profile. We do not send unsegmented, general notifications through this procedure, since we believe it is in the interest of both the Club and users of the Barça Fans programme to send and receive relevant information and because not segmenting users would not alter the number of notifications received through the Barça Fans program, but rather just its content. In this regard, should any user of the Barça Fans programme not wish to be segmented, please do not subscribe to notifications from the Barça Fans programme.

5. INTERNATIONAL TRANSFERS

FC Barcelona, as an entity with international reach, has international suppliers that may provide their services from outside of the European Union. Therefore, it is possible that your data may be processed outside of the European Union or the European Economic Area (for example, the newsletter provider, data storage, management of information requests or partner services, etc.).

In any case, the Club shall ensure that the aforementioned processing of data is always protected by the appropriate guarantees, which may include:

• Clauses approved by the EU: These are contracts approved by the European regulator and that provide sufficient guarantees to ensure that processing meets the requirements established by the European General Data Protection Regulation.

• Third party certifications: For example, the Privacy Shield, a framework agreement between the EU and the United States that establishes a standard framework for the processing of data pursuant to the requirements of the European General Data Protection Regulation.

6. PROCESSING PERIOD

All of the data that you provide us shall be processed for the time necessary to manage your status as a member of FC BARCELONA.

At the end of the period described in the first paragraph of this section, FC Barcelona shall store your data duly-anonymised for statistical or market research purposes, whenever possible, or duly frozen in order to fulfil any legal obligation of the Club.

7. EXERCISING YOUR RIGHTS

At any time, you may withdraw consent to any of the previously mentioned processing.

Likewise, you may exercise your rights of access, rectification, deletion, opposition, restriction or portability in writing to the address Avda. Aristides Maillol, S/N, 08028 Barcelona, Spain, with the reference “Personal Data” or via e-mail to proteccio.dades@fcbarcelona.cat.

Should you have any questions concerning how we process your personal data, or any other related matter, you can contact our Data Protection Officer at the following address: Avda. Aristides Maillol, S/N, 08028 de Barcelona, Spain, with the reference or to the attention of “Data Protection Officer” or vie e-mail at dpo@fcbarcelona.cat.

Additionally, you may file a complaint with the relevant Supervisory Authority if you think that FC Barcelona has handled your data in contravention of this Privacy Policy or any other related regulations in force.