Effective date: October 13, 2026
1. Introduction and company information
This Privacy Policy explains how Madrid Active Sports S.L. (“Madrid Active Sports S.L.,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information when you visit or use our website at brorkal.click, contact us, or otherwise interact with our soccer-related services and activities.
Madrid Active Sports S.L. operates a soccer business and may provide information, registrations, communications, customer support, event or activity coordination, and related services. We are committed to handling personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial privacy laws.
Data controller / organization: Madrid Active Sports S.L.
Address: Calle de Bravo Murillo, 96, Madrid, Spain
Email: [email protected]
Phone: +1 (905) 624-7819
2. Data collection and processing
We collect personal information that is reasonably necessary to operate our business, provide our services, communicate with you, and meet legal and contractual requirements. Depending on how you interact with us, we may collect the following categories of information:
- Identity and contact information: name, email address, phone number, postal address, and similar contact details.
- Account or registration information: login details, account preferences, and registration details if you create an account or sign up for services.
- Service and transaction information: enquiries, bookings, purchases, payment-related records, confirmations, and customer service communications.
- Soccer-related participation information: age category, skill level, team or program information, attendance, scheduling preferences, and participation details relevant to training, camps, leagues, tryouts, events, or other soccer services.
- Technical and usage information: IP address, browser type, device identifiers, pages viewed, referral source, date and time of access, and website interaction data.
- Marketing preferences: your communication choices, opt-in/opt-out preferences, and responses to our communications.
- Other information you provide: any personal information you submit through forms, emails, phone calls, or other correspondence.
We generally collect personal information directly from you, but we may also receive information from:
- payment processors and service providers;
- analytics, website hosting, and security providers;
- social media platforms or other online services if you interact with us through those channels;
- third parties where you have authorized disclosure or where permitted by law.
We do not intentionally collect sensitive personal information unless it is necessary for a legitimate business purpose, permitted by law, and/or provided by you with consent. If health, injury, emergency contact, or similar information is collected in connection with soccer participation, we will use and protect it only for the relevant operational or safety purpose.
3. Purpose of data processing
We use personal information for the following purposes:
- to provide and administer our soccer-related services, programs, and activities;
- to process registrations, bookings, inquiries, and customer support requests;
- to communicate with you about our services, schedules, updates, changes, and notices;
- to manage payments, invoices, refunds, and related financial administration;
- to verify identity, prevent fraud, and secure our systems and services;
- to personalize and improve our website, offerings, and customer experience;
- to conduct internal recordkeeping, reporting, audits, and business operations;
- to comply with legal and regulatory obligations;
- to enforce our policies, contracts, and legal rights;
- to send marketing communications where permitted by law and, where required, with consent;
- to protect the safety and well-being of participants, staff, and visitors.
We limit collection and use to what is necessary for these identified purposes or for purposes otherwise permitted by applicable law.
4. Legal basis for processing
Under Canadian privacy law, we generally collect, use, and disclose personal information with your knowledge and consent, except where otherwise permitted or required by law. Depending on the circumstances, our processing may be based on one or more of the following grounds:
- Consent: where you have given express or implied consent for specific purposes;
- Contractual necessity: where processing is necessary to provide requested services or perform a contract with you;
- Legitimate business purposes: such as administering operations, improving services, protecting systems, and preventing fraud, where permitted by law and balanced against your reasonable expectations;
- Legal or regulatory obligations: where disclosure or retention is required by law, court order, taxation, accounting, or other regulatory requirements;
- Other permitted grounds: where PIPEDA or applicable provincial law allows collection, use, or disclosure without consent.
When relying on consent, you may have the right to withdraw it subject to legal or contractual restrictions and reasonable notice.
5. Data sharing and third parties
We do not sell personal information. We may disclose personal information to third parties only as reasonably necessary for the purposes described in this Privacy Policy, including:
- Service providers: hosting, IT support, analytics, security, customer relationship management, communications, administration, and similar vendors;
- Payment processors and financial institutions: to process transactions and manage payments;
- Professional advisors: lawyers, accountants, auditors, insurers, and other advisors bound by confidentiality obligations;
- Authorities and regulators: where required by law, legal process, or to protect rights, safety, or property;
- Business transfers: in connection with a merger, acquisition, reorganization, financing, sale of assets, or similar transaction, subject to applicable legal safeguards;
- Other third parties: with your direction, authorization, or consent.
Where we engage service providers, we require them to safeguard personal information and to use it only for the purposes we authorize, subject to applicable law.
6. Data transfer to third countries
Because Madrid Active Sports S.L. is based in Spain and our service providers or systems may be located outside Canada, your personal information may be transferred to, stored in, or processed in countries outside your province, territory, or Canada, including Spain, the European Economic Area, the United States, or other jurisdictions.
When personal information is processed outside Canada, it may be subject to the laws of those jurisdictions and accessible to courts, law enforcement, or regulatory authorities there. We take reasonable contractual, organizational, and technical measures to protect personal information in connection with such transfers.
7. Storage duration
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to satisfy legal, accounting, tax, insurance, and reporting requirements, to resolve disputes, and to enforce agreements.
The retention period may vary depending on the type of information and the purpose for which it is used. Examples include:
- Customer and communication records: retained for the duration of our relationship and for a reasonable period afterward;
- Transaction and financial records: retained for the period required by law and standard accounting practices;
- Website and technical logs: retained for security, operational, and analytics purposes for a limited period;
- Consent records and legal compliance records: retained as necessary to demonstrate compliance and manage legal obligations.
When personal information is no longer required, we will securely delete, anonymize, or de-identify it in accordance with our retention practices and applicable law.
8. User rights (access, rectification, erasure, restriction, data portability, objection)
Subject to applicable Canadian privacy laws and any legal exceptions, you may have the right to:
- Access the personal information we hold about you;
- Correct or rectify inaccurate, incomplete, or outdated information;
- Request deletion or anonymization of personal information where appropriate and permitted by law;
- Restrict or challenge certain processing activities in circumstances recognized by law;
- Receive a portable copy of certain information, where required or available under applicable law;
- Object to or withdraw consent for certain uses, including some marketing communications.
To exercise your rights, please contact us using the details in the Contact information section below. We may need to verify your identity before responding to your request. We will respond within a reasonable time and in accordance with applicable legal requirements.
Please note that certain rights may be limited where the information is subject to legal privilege, contractual obligations, security needs, legal retention duties, or other exceptions under applicable law.
9. Withdrawal of consent
Where we rely on consent to process your personal information, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice.
Withdrawal of consent will not affect processing that has already occurred, nor will it necessarily stop all processing where we are permitted or required to continue under applicable law. If you withdraw consent for certain processing, we may be unable to provide some services or features to you.
To withdraw consent or change your communication preferences, contact us at [email protected].
10. Right to complain
If you have concerns about our handling of personal information, please contact us first so we can attempt to resolve the issue promptly.
You may also have the right to file a complaint with the relevant privacy regulator in Canada. Depending on your location and the applicable law, this may include the Office of the Privacy Commissioner of Canada or a provincial privacy commissioner/ombudsperson.
We encourage you to contact us before escalating a complaint, as many concerns can be resolved quickly and informally.
11. Data security
We use reasonable physical, technical, and organizational safeguards appropriate to the sensitivity of the personal information we handle. These safeguards may include:
- access controls and authentication measures;
- encryption or secure transmission protocols where appropriate;
- restricted internal access on a need-to-know basis;
- security monitoring and logging;
- staff confidentiality obligations and privacy practices;
- vendor due diligence and contractual safeguards.
However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security. If we become aware of a privacy incident involving personal information, we will respond in accordance with applicable law, including notification obligations where required.
12. Contact information
If you have questions, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact:
Madrid Active Sports S.L.
Calle de Bravo Murillo, 96
Madrid, Spain
Email: [email protected]
Phone: +1 (905) 624-7819
Please include sufficient detail so we can understand and respond to your request. We may request additional information to verify your identity and process your inquiry.
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal obligations, or business operations. When we make material changes, we will post the updated version on brorkal.click and revise the effective date above, and we may provide additional notice where required by law.
Your continued use of our website or services after an updated Privacy Policy becomes effective indicates your acknowledgment of the revised policy to the extent permitted by law.
If you have any questions about this Privacy Policy, please contact Madrid Active Sports S.L. using the contact details above.