Privacy policy

The Website is owned and operated by Madrid Trophy Promotion S.L.U., with VAT number B62702204 and registered office at Camino de Perales s/n, planta 1, C.P. 28041 Madrid (and referred to in this policy as “Madrid Open”, “us”, “we”).

The Madrid Open business is part of the IMG Group, which forms part of the Endeavor group of companies, and we may share data (as described further below) with these affiliated entities (collectively, “Endeavor”).

This Privacy Policy sets out how we, as data controller, collect, hold, use, process and disclose your personal data, why and according to what legal reasoning we process it, with whom and for what purposes we share it, the rights to which you may be entitled, and your choices about our use of your personal data.

The terms ‘Personal Data’ and ‘Personal Information’ shall have the meanings assigned to them under the data protection and privacy laws governing your relationship with us or applicable to your jurisdiction.

What is your responsibility concerning the personal data you provide?

When you provide us with your personal data, you are responsible for ensuring that the data is true, accurate, complete and up to date. In the event that you provide personal data of other data subjects, you declare that you have their consent, where necessary, and you undertake to pass on the information contained in this Privacy Policy to them, exempting Madrid Open from any liability in this regard.

We will collect and use your personal data to:

Create, verify, and manage user accounts and features.
Allow you to access this website and register for/subscribe to our services.
Provide Madrid Open services, as well as support and assistance for them, including by responding to inquiries, processing transactions or requests, and communicating with users (such as by sending service and account-related messages and updates).
Develop, deliver, and improve Madrid Open services and other offerings, some of which may be offered in partnership with other parties.
Personalize your experience, including by presenting content or features better tailored to you or your interests, or our inferences about your interests (for instance, if you frequently access content on a certain sport, we may infer that you’d be interested in that sport and suggest similar content to you).
Promote Madrid Open services, including managing, customizing, and measuring the effectiveness of our advertisements, promotional offers, surveys, and events.
Conduct data analytics (like analyzing how the Madrid Open services are used so we can better understand, improve, and personalize them).
Meet our legal obligations.
Ensure the safety of the event and, where appropriate, the health of its attendees within the scope of the regulations in force.
Secure Madrid Open services, such as detecting fraud and otherwise protecting Madrid Open and other users from illegal or harmful actions.
Fulfill any purpose we make known to you when we collect your personal data.
Fulfill other purposes set out in more detail in this section.

We may also process information that does not identify you individually, including aggregate or de-identified information that we create or collect from other sources. This information helps us better understand larger groups of users. If we combine this information with information that identifies you, we will treat it as described in this privacy policy. But please note that this privacy policy does not restrict our ability to process information that does not individually identify you, and we may use and disclose aggregated or de-identified information for any reason permitted by law.

Your information will be shared with members of our group and some third parties as described below.

Some of the personal data we request is required to provide the services and if it is not provided, we may not be able to provide the relevant services to you.

The table below indicates what we collect, how we use it, and whether such information is required to provide services to you.

WHAT WE COLLECT (TYPE OF PERSONAL DATA)

HOW WE USE IT (PURPOSE)

WHY WE USE IT (OUR LEGAL BASIS FOR PROCESSING)

Name, address, email, phone number, age, gender, date and time of arrival and departure, location within the event, medical information in case of emergencies.

· For registration, issuing tickets, and identification

· Crowd management and security

· To provide first aid or other medical assistance as needed

Consent and contractual necessity for providing event services.

Legitimate interests in managing the event and ensuring the safety and security of attendees.

Vital interests to provide emergency medical care, or explicit consent when given.

CCTV Footage and photography

· For security monitoring and public safety

· For marketing, promotion, and documentation of the event

CCTV Footage: Legitimate interests in maintaining the security and safety of all attendees, staff, and the venue

Photography: Consent, or legitimate interests in documenting the event for marketing and promotional activities

Registration, application and participation information:

· name, date of birth, gender, and photograph, membership details with tennis associations or clubs, health-related information, CVs.

To verify the identity of participants, communicate about tournament details, scheduling, results, updates, or other relevant information, categorize players, create match schedules, and ensure participants meet any eligibility criteria and to ensure the safety and well-being of all participants during the tournament.

Collecting this information is necessary to perform the contract.

It is also necessary for our legitimate interests in organizing a fair and competitive tournament, and for the performance of our contract with the participant.

Registration, account, and sign-up information:

· Name, username, password, email, contact details, date of birth or age, interest in our content.

· Provide our services

Collecting this information is necessary to perform the contract.

It also enables us to understand the type of products and services you buy and how you use them, allowing us to personalize content and improve our service to you.

If you buy anything from us:

· Relevant payment information, billing and transaction information.

We use the information to process your payment and comply with our legal obligations.

Collecting this information is necessary to perform the contract.

Video and streaming information:

· Information about your interaction with our content or service such as searches you conduct, duration and number of streams and downloads, and system information related to streaming and download quality.

We use this information to:

· Identify products and services that may be of interest to you

· Personalize our service (e.g., offering recommended relevant content to you)

· Carry out statistical analysis and research

· Improve our services

· Develop new services

Collecting this information is in our legitimate business interests as it enables us to understand the type of products and services you buy and how you use them, allowing us to personalize content and improve our service to you.

Entries to promotions, competitions, prize draws, etc:

· Contact details of individuals participating.

· Provide our services

· Prevent fraud

· Identify products and services that may be of interest to you

· Personalize our service (e.g. offering recommended relevant content to you)

Collecting this information is necessary to perform the contract.

It also enables us to understand the type of products and services you buy and how you use them, allowing us to personalize content and improve our service to you.

Anti-money laundering:

· Banking history, credit reports, location, device identifications, income verification, and other pertinent information.

· Provide our services

· Prevent fraud

Collecting this information is necessary to perform the contract.

It is also in our legitimate business interest to prevent and protect against fraud.

Newsletter Subscription:

· Personal data you give us such as your name and e-mail address.

We use the information to send you our newsletters.

The processing is based on your consent, as you have requested to receive such information.

Information about the way you use our services:

· Whether you’ve clicked on links in electronic communications from us.

· Whether you’ve opened electronic communications from us.

We use this information to:

· Identify products and services that may be of interest to you

· Personalize our service (e.g., offering recommended relevant content to you)

· Carry out statistical analysis and research

· Improve our services

· Develop new services

Information when you communicate with us whether in person, via email, over the phone, through social media

or via any other medium:

· Your contact details.

· The details of your communications with us.

· The details of our messages to you.

We use this information to:

· Respond to any issues or concerns

· Monitor communications for quality and training purposes

· Carry out statistical analysis and research

· Improve, personalize, and develop new services

Collecting this information is necessary to perform the contract.

It is also in our legitimate business interests to improve our services and our relationship with you.

Information that we collect through your use of the Madrid Open website:

· Technical information, including IP address, login information, browser type and version, time zone setting, browser plug-in types and versions, operating system, platform, device type, hardware model, MAC address, unique device identifiers and mobile network information.

· Information about your visit, including the full URL clickstream to, through and from the website (including date and time).

· Information about your network, such as information about devices, nodes, configurations, connection speeds, and network and application performance.

· Pages you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs).

· Methods used to browse away from the page.

· Geolocation.

We use this information to:

· Provide our services

· Improve our services

· Personalize our services

· Identify products and services that may be of interest to you; (e.g. offering recommended relevant content to you)

· Develop new services

· Identify issues with the website or app and user’s experience of them

· Carry out statistical analysis and research into your behavior when visiting the website

· Monitor the way websites are used

Collecting this information is necessary to perform the contract.

It is in our legitimate business interests to improve our services and our relationship with you.

It is also in our legitimate business interest to ensure the security of our network and IT systems.

Information that we collect from individuals representing organizations, including:

· Contact and business-related details of individuals working for organizations.

We use this information to:

· Provide our services

· Verify our customers’ identities and prevent fraud

Collecting this information is necessary to perform the contract.

It is also in our legitimate business interest to prevent and protect against fraud.

It is in our legitimate business interests to improve our services and our relationship with you.

We may also receive information about you (including your personal information) if you use any other websites or apps operated or other services provided by us or our group companies. In this case, that information will be shared within the Endeavor group and combined with information collected on Madrid Open and Endeavor websites.

AUTOMATED DECISION-MAKING

Madrid Open only makes decisions based on automated processing of personal data when it sends automatic acknowledgements of receipt or purchase confirmation messages. These automated responses are sent to all customers and do not lead to any negative consequence, adverse effect or restriction of rights for data subjects.

SOCIAL MEDIA

We use several social media and blogging platforms to communicate with our customers, some of which are operated by third parties, such as Facebook, Instagram, Twitter (X) and LinkedIn. This Policy applies to our use of personal information you submit to us there, but it does not apply to what those third party platforms do with your information. Those platforms have their own privacy policies, and we encourage you to read them.

Our services may include features and functionalities that allow you to share personal information with us that you have already provided to a third party social media platform. For example, you may be able to create an account on our services or log-in to our Services using your Facebook account or other third party credentials. If you do so, then personal information that you have provided to that third party may be made available to us, pursuant to the third party’s terms and conditions and privacy policy, and you consent to our use of that personal information in accordance with this Policy.

We may also include tools on our Services that allow you to share and/or publicly post content or information from our Services to your profile on a third party social media. Third party social media platforms and blogging platforms have their own privacy policies which explain how they will use, protect and share your personal information, including any information you share on those platforms from our Services, and we encourage you to read them.

LEGAL REQUIREMENTS

Your personal information will be processed as follows: if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency; to enforce or apply Madrid Open’s Terms of Use and other agreements; in an emergency; to protect the rights, property or safety of Endeavor’s group of companies, customers, clients and others; or in the defense of legal claims. We will not delete personal information if relevant to an investigation or a dispute or until applicable law allows for it to be deleted. It will continue to be stored until those issues are fully resolved and it can be lawfully deleted.

Due to the legal, regulatory, and security environment in which we operate, we may be required to disclose information about you under certain circumstances, and we may not be permitted to inform you that we have done so.

HOW LONG WE KEEP YOUR INFORMATION

We generally keep your information as needed to provide services and to deal with legal claims.

We will keep your information for as long as is reasonably necessary to deal with claims. We will also retain your information as necessary to comply with legal, accounting or reporting requirements.

We will also retain a copy of your contact details if you object or opt out of receiving direct marketing communications from us. We will add your details to our suppression list to ensure you do not receive any future marketing communications from us. Also, we will not delete personal data if relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved.

We consider the following issues to determine retention periods:

Guidance from the Agencia Española de Protección de datos and any other relevant Authority, or industry best practice recommendations
The specific purposes for which the personal data is being used
The business rationale for collection and expiry of the purpose for which personal data was collected
Our ongoing ability to ensure the accuracy of the data
Legal and regulatory requirements under applicable law.

INFORMATION WE SHARE

There are certain circumstances where we will transfer your personal data to employees, contractors and other parties.

We will share information about you with other members of our group of companies so we can provide the best service across our group.

Your personal data may be disclosed to Madrid Open sponsors, partners and companies of the IMG group only if you have given us your consent for it.

Our suppliers and service providers will be required to meet our standards on processing information and security. The information we provide them, including your information, will only be provided in connection with the discharge of their functions for us. Under our contracts with them, they would be prohibited from using or disclosing the information for their own purposes.

Your personal information will be transferred to other third-party organizations in certain scenarios if we are:

discussing selling or transferring part or all of our business – the information may be transferred to prospective purchasers and their advisors under appropriate terms as to confidentiality.
reorganized or sold – information may be transferred to a buyer who can continue to provide services to you.
required to by law, or under any regulatory code of practice we follow, or if we are asked by any public or regulatory authority – for example, law enforcement authorities.
defending a legal claim – your information may be transferred as required in connection with defending such claim.
your personal data may be shared if it is made anonymous and aggregated, as in such circumstances the information will cease to be personal data.

Your personal data may be also shared:

with service providers for the purposes of settling or making payment in connection with any wager, verifying your identity, and other purposes in connection with the services;
with payment management or debt collection companies engaged by us to handle payment and collection processes;
with our co-sponsor(s) if we obtain your personal information in connection with a contest, sweepstakes, offering, or other promotional activity that is jointly offered by us and any third parties as long as you have consented or opted in for it.
with any governmental agency, regulatory authority or licensing body;
when we believe in good faith that disclosure is necessary or appropriate to protect or enforce our rights or property, protect your safety or the safety of others, investigate or seek to address fraud, money laundering, intellectual property infringement or violation of law, respond to a government, judicial or other legal request, or to comply with the law;
for purposes of disaster recovery; and
with credit reporting agencies, such as information about late payments, missed payments, or other defaults on your account.

WHERE YOUR INFORMATION WILL BE HELD

Your information may be transferred outside the European Economic Area (EEA).

The information that we collect from you may be transferred to and stored at a destination outside the EEA, including the United States which may not have equivalent data protection laws to those applicable to Europe. It may also be processed by staff operating outside the EEA who work for us, for one of our affiliated companies, or for organizations that function as a service provider to us. To ensure your personal information is properly protected in line with EU and UK data protection laws, the transfer of this information is governed by a contract including Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Government.

COOKIES

We use cookies that identify your browser. They collect and store information when you visit our website about how you use it, through which it is possible to monitor your use of the website, as well as provide you with a better service and experience when browsing the website and undertake analytics. The personal data we collect through these technologies will also be used to manage your session.

For more information about cookies and how we use them, please see our Cookie Policy.

DO NOT TRACK

Some web browsers may transmit “do-not-track” signals to the website with which the user communicates. Like many websites, our site is not currently able to respond to these “do-not-track” signals. To learn more about “do-not-track” signals, you can visit http://www.allaboutdnt.com/.

GLOBAL PRIVACY CONTROLS

We recognize user-initiated opt-out preference signals sent by your web browser, such as the global privacy control (“GPC”), as a valid request to opt-out of the sale and sharing of personal information processed on this website (i.e., through cookies and tracking technologies). For more information about GPC and how to implement it on your browser, please visit globalprivacycontrols.org

SECURITY

The transmission of information via the internet is not completely secure. Although we will take reasonable measures to protect your personal information, we cannot guarantee the security of your information transmitted through the Madrid Open website and any transmission is at your own risk. Once we have received your personal information, we will use procedures and security features to try to prevent unauthorized access.

LINKS TO THIRD-PARTY WEBSITES

The Madrid Open website, newsletters, email updates and other communications may, from time to time, contain links to and from the websites of others including members of our groups, our partner networks or advertisers and/or social networks as offered to you and supported by your browser. The personal data that you provide through those other websites is not subject to this Privacy Policy and the treatment of your personal data by the operators of such websites is not our responsibility. If you follow a link to any of these websites, please note that the operators of those websites may have their own privacy policies which set out how your information is collected and processed by them. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of entities through which you choose to share.

For more information about third party advertisers and how to prevent them from using your information, please visit Aboutads.info at www.aboutads.info/choices/ or Your Online Choices at www.youronlinechoices.eu.

PRIVACY INFORMATION FOR INDIVIDUALS IN THE EEA OR UK

Your Privacy Rights and Choices. Applicable data protection laws provide you with specific rights related to your Personal Data (any information relating to an identified or identifiable natural person) that we process. Below, we outline these rights and how you can exercise them.

Access and Rectification: You have the right to access and receive a copy of your Personal Data and require us to rectify any incomplete or inaccurate Personal Data.
Right to Erasure:You have the right to request that we erase all of your Personal Data where certain legal conditions are met, such as when your Personal Data is no longer necessary for the purposes for which it was collected, and we do not need to retain the data information in order to comply with an European Economic Area (EEA) or United Kingdom (UK) legal obligation.
Restrict Processing:You have the right to restrict our processing of your Personal Data under certain circumstances. For example, you can request we restrict our use of your Personal Data if you contest its accuracy, or if the processing of your Personal Data is determined to be unlawful but you do not want it erased.
Data Portability:To the extent the Personal Data you provide us is processed based on your consent or to perform a contract, you have the right to request that we provide you (or a third party at your direction) a copy of all or part of such Personal Data in structured, commonly used and machine-readable format.
Withdrawal of Consent:To the extent that our processing of your Personal Data is based on your consent, you may withdraw your consent at any time, for example by sending us an email to opt-out of marketing messages. Withdrawing your consent will not, however, affect the lawfulness of the processing based on your consent before its withdrawal, and will not affect the lawfulness of our continued processing that is based on any other lawful basis for processing your Personal Data.
Objection to Processing:You have the right to object to our processing of your Personal Data where we are relying on our legitimate interests (or those of a third party) to justify our processing, if you have grounds to object based on applicable law. In some cases, we may demonstrate that we have compelling legitimate grounds to process your data that override your rights and freedoms. You have the right to object to our processing of your Personal Data at any time, for any reason or no reason, where we are processing your Personal Data for direct marketing purposes.

In your request, specify the Personal Data you want rectified, erased, or restricted. For your protection, we may only process requests related to the email address used to send the request and may need to verify your identity. We will comply as soon as reasonably practicable.

Note: We may retain certain information for recordkeeping or to complete transactions initiated before your request.

If you want to exercise any of these or other rights under applicable law, please contact us at RGPD@madrid-open.com. We may require you to prove your identity with approved identification.

You may also have the right, in certain circumstances, to object to our processing your personal information. However, we may be entitled to continue processing it in line with applicable law. You can exercise this right by contacting us at RGPD@madrid-open.com. You may also have the right, where provided under applicable law, to ask us to stop processing your personal information for direct marketing purposes. You can exercise this right by checking certain boxes on the forms we use to collect your information or by clicking “unsubscribe” on the emails you receive. You can also exercise this right by contacting us at RGPD@madrid-open.com

Opting out of the sale of your personal information

Sometimes we share your data with sponsors, vendors, Endeavor, and third-party advertising networks. These transfers, which are used to provide you with certain Services and/or to more effectively provide you with personalized Services (including advertising), can be deemed a sale under some data privacy laws.

If you haven’t already, you may opt-out of the sale or sharing of your browser-based personal information by visiting the cookie preference center on the cookie banner.

If you have given us additional information such as an email address, depending on your jurisdiction, you may have the right to opt out of the sale or sharing of your personal information by contacting us at RGPD@madrid-open.com. You will be asked to provide certain information to us to exercise this option so we can verify your identity and locate your records with us.

Please note that your decision to opt out of the sale of your personal information may impact the availability and quality of some of the Services provided to you.

PRIVACY INFORMATION FOR CALIFORNIA AND OTHER UNITED STATES RESIDENTS

California and other states require disclosure of additional information regarding privacy practices and privacy rights. Below we provide additional notices about our privacy practices and consumer rights relating to your information.

We describe the categories of information we collect, our business purposes for collecting such information, the sources and uses of such information and the entities with which we disclose such information in the “Information and How We Use It” chart and the “Disclosure of Information” section above.

Right to Know:You have the right to submit a verifiable request for copies of specific pieces of your personal information;
Right to Delete:You have the right to submit a verifiable request for the deletion of personal information that you have provided to us. Certain information that we hold about you may not be deleted. We are not permitted to delete information that we need to operate our business, administer our employees, protect our legal obligations and rights, or to provide security for our employees, our systems and our company;
Right to Correct:You have the right to submit a verifiable request for the correction of inaccurate personal information maintained by us, taking into account the nature of the personal information and the purposes of processing the personal information;
Right to Opt Out of Sale and Sharing:You have the right to opt out of the sale of your personal information and the disclosure of your personal information for cross-context advertising;
Right to Limit Processing of Sensitive Personal Information:You have the right to tell us not to process sensitive personal information except for the purpose for which it was originally collected;
Right Against Automated Decision Making:You have the right to opt-out of certain processes involving automated decision when the decision making is based solely on an automated process without human input;
Non-Discrimination:You have the right not to receive discriminatory treatment for exercising your privacy rights; and
Where applicable, you may have the right to appeal actions regarding your privacy request.

UPDATES

Any updates we may make to our Privacy Policy will be posted on this page, and we may also provide a website notice of any material changes for a reasonable period of time. Please check back frequently to see any updates or changes to our Privacy Policy. If you do not agree or consent to these updates or changes, do not continue to use our services.

CONTACT

Questions or comments regarding this Privacy Policy should be submitted to us at RGPD@madrid-open.com.