1Data Controller
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), we provide the following information about the data controller:
- Company name: Fútbol In Events, S.L.
- Tax ID (NIF): B87388559
- Registered address: Calle de la Barca 5, Portal 5-A, 28052 Madrid, Spain
- Madrid Companies Register: Volume 33906, Page 46, Sheet M-610139, Entry 1 (registered: 06/10/2015)
- Activity: Organisation of the Madrid Youth Cup (MYC) international youth football tournament
- Contact email: info@madridyouthcup.com
- Website: www.madridyouthcup.com
2Personal Data We Process
Depending on your relationship with MYC, we may process the following categories of personal data:
2.1 Club, academy and team representatives
- Identifying data: first name, last name, role and club represented.
- Contact data: email address, phone number and country of origin.
- Logistical data: number of players, age category, participation dates and accommodation or transport requirements.
2.2 Players and coaching staff
- Identifying data: first and last name, date of birth and nationality.
- Health data (where necessary): allergies, relevant medical conditions or sports insurance information, voluntarily provided by the club or legal guardian.
- Images and videos: photographs and recordings taken during the tournament (matches, ceremonies, activities).
as MYC is a youth football tournament, many participants are minors. All processing of minors' data is carried out with the express consent of their parents or legal guardians, in accordance with Article 8 of the GDPR and Article 7 of the LOPDGDD.
2.3 Website users
- Technical access data: IP address and access data processed through Cloudflare, our web infrastructure and security provider, solely for the purpose of ensuring the correct functioning and security of the website.
- Contact data: name and email address when submitting the contact or registration form available on the website.
3Purposes of Processing and Legal Basis
We process your data for the following purposes, each supported by a legitimate legal basis:
Registration and tournament participation management
Managing team participation in MYC, including categories, schedules, accommodation and travel logistics.
Legal basisperformance of a contract (Art. 6.1.b GDPR).
Operational tournament communications
Sending information about schedules, results, logistical changes and any communication necessary for the proper running of the event.
Legal basisperformance of a contract and legitimate interest (Art. 6.1.b and 6.1.f GDPR).
Publication of audiovisual content
Publishing images, videos and photographic material from the tournament on the MYC website, social media channels (Instagram, Facebook, X) and other owned channels.
Legal basisconsent of the data subject or their legal guardian in the case of minors (Art. 6.1.a GDPR). Consent may be withdrawn at any time.
Commercial communications and marketing
Sending information about future tournament editions, news and promotions to those who have expressed interest or participated in previous editions.
Legal basisconsent (Art. 6.1.a GDPR) or legitimate interest where a prior relationship exists (Art. 6.1.f GDPR). You may unsubscribe at any time.
Tournament analysis and improvement
Analysing participation statistics, geographic origin of teams and website performance to improve the tournament experience.
Legal basislegitimate interest (Art. 6.1.f GDPR).
Compliance with legal obligations
Responding to requirements from competent authorities, registering participants with sports federations where required, or complying with applicable sports regulations.
Legal basiscompliance with a legal obligation (Art. 6.1.c GDPR).
4Processing of Minors' Data
Madrid Youth Cup is a youth football tournament involving players under the age of 18. We adopt the following specific measures:
- Participating clubs and academies are responsible for obtaining and documenting the consent of their players' legal guardians before sharing any personal data with MYC.
- MYC does not collect data directly from minors through its website or own digital channels.
- Images and videos featuring identifiable minors will only be published with prior consent from the legal guardian, which may be revoked at any time by contacting info@madridyouthcup.com.
- Health data of minors (allergies, medical conditions) is processed exclusively to ensure their safety during the tournament and is not used for any other purpose.
5Recipients and International Transfers
MYC may share your data with the following categories of recipients:
- Service providers: hotels, transport companies, sports facilities and other logistical partners necessary for organising the tournament, acting as data processors under contract.
- Sports federations: where applicable sports regulations require participant accreditation.
- Cloudflare, Inc.: web infrastructure and security provider that may process technical access data (such as IP addresses) solely to protect and optimise the website service. Cloudflare operates under appropriate GDPR safeguards.
- Total Sports Group: a partner company involved in the organisation and commercialisation of the tournament, operating under the same data protection standards.
As MYC welcomes teams from over 20 countries, it may in some cases be necessary to share basic logistical data with providers outside the EEA. In such cases, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR.
6Data Retention Periods
We retain your data for only as long as necessary for each purpose:
- Tournament participation data: retained for the duration of the contractual relationship and for up to 5 years after the last edition participated in, to handle claims or meet legal obligations.
- Published images and videos: retained while a legitimate interest exists or until removal is requested.
- Commercial communications data: until consent is withdrawn or the right to object is exercised.
- Technical web access data (Cloudflare): in accordance with Cloudflare's retention policy, generally no longer than 30 days.
7Your Rights
As a data subject, you may exercise the following rights at any time:
- Access: to know what personal data we hold about you.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request deletion of your data when it is no longer necessary.
- Objection: to object to processing based on legitimate interest or for marketing purposes.
- Restriction of processing: to request that we limit the use of your data in certain circumstances.
- Portability: to receive your data in a structured, commonly used format.
- Withdrawal of consent: to withdraw at any time any consent previously given, without affecting the lawfulness of prior processing.
To exercise your rights, contact us at info@madridyouthcup.com with the subject line 'GDPR Rights Request', attaching a copy of your identity document. We will respond within one month.
If you believe your request has not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es.
9Security Measures
MYC applies appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or unauthorised disclosure. These include encrypted communications (HTTPS), access controls on systems that store personal data and periodic review procedures for the security measures in place.
10Updates to This Policy
This policy may be updated to reflect regulatory changes, new tournament features or modifications to how we process data. When we make substantial changes, we will notify you prominently on the website and, where we hold your email address, by that means as well.
11Contact
For any queries relating to the processing of your personal data or the exercise of your rights:
© 2026 Madrid Youth Cup · Fútbol In Events, S.L. · B87388559 · All rights reserved.