Main sponsors

Riyadh Air Nike

Atlético de Madrid Escudo Atlético de Madrid

1. IDENTIFICATION

2. GENERAL INFORMATION

Through this privacy policy, you (hereinafter, the "User") are informed that the personal data you provide through the website located at the URL https://www.atleticodemadrid.com (hereinafter, the "Website" or the "Web") will be processed by Club Atlético de Madrid S.A.D. (hereinafter, the "Club"), as well as data derived from the User's browsing and any other data that may be provided to the Club in the future.

The User must carefully read this privacy policy, which has been written in a clear and simple manner to facilitate its understanding, and freely and voluntarily determine whether they wish to provide their personal data to the Club. In any case, any personal data that we may collect directly from the data subject will be treated confidentially.

3. MANDATORY PROVISION OF DATA

The data requested in the forms on the Website are, in general, mandatory (unless otherwise specified in the required field) in order to fulfil the established purposes.

Therefore, if this data is not provided or is not provided correctly, it will not be possible to respond to your request, although you will still be able to freely view the content of the Website.

The User is solely responsible for the information provided and for its accuracy and legality. Personal data obtained by the Club may only be collected for processing when it is adequate, relevant and not excessive in relation to the specific, explicit and legitimate scope and purposes for which it was collected.

When the User provides data from third parties, the User declares that they have a legitimate reason for doing so and declares that the data provided is accurate. Likewise, the User declares that they have informed the third parties of the content of this policy and/or the policy that applies to them and that they have been specifically informed of their rights regarding the protection of personal data.

4. PURPOSE OF THE PROCESSING OF PERSONAL DATA.

Personal data provided through the Website or other means made available to Users will be processed by the Club for the following purposes:

  (i) Processing related to the Website and digital channels:

In accordance with the aforementioned purposes, the data will be kept blocked and available to the Public Administrations until the legal actions arising from the relationship with the User expire. Notwithstanding the foregoing, the User may revoke their consent or object to the processing of their data at any time, without this affecting the processing carried out previously.

  (ii) User support and communication channels:

The Club will collect information on the use of Bots in order to continuously improve the service and facilitate access to the most useful and requested information by the User.
 

In accordance with the aforementioned purposes, the data will be kept blocked and available to the Public Administrations until the legal actions arising from the relationship with the User expire. Notwithstanding the foregoing, the User may revoke their consent or object to the processing of their data at any time, without this affecting the processing carried out previously.

  (iii) Management of products and services:

The data will be kept blocked and available to the Public Administrations until the legal actions arising from the relationship with the User expire. Notwithstanding the foregoing, the User may revoke their consent or object to the processing of their data at any time, without this affecting the processing carried out previously.

  (iv) Management of members, supporters' clubs, visits and events

In accordance with the aforementioned purposes, the data will be kept blocked and available to the Public Administrations until the legal actions arising from the relationship with the User expire. Notwithstanding the foregoing, the User may object to the processing of their data at any time, without this affecting the processing carried out previously.

  (v) Candidates: to process job applications and carry out the selection process.

For the management of CVs and applications for its selection processes, the Club may use an artificial intelligence system developed by Telefónica Tech called "Telefónica Tech GenAI Platform". The system helps the Club's human resources staff, who have been duly trained to use it, to manage, process and classify the CVs it receives more efficiently, thereby helping to optimise the selection processes. Under Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence, the system could be classified as high risk. As a result, it is subject to periodic reviews to prevent any possible mismatch, error or inaccuracy in its operation. Likewise, the results produced by the system are constantly subject to human supervision. Decisions regarding applications are made by the Club's human resources staff, as the purpose of the tool is to assist in the management and classification of CVs, without intervening in automated decision-making regarding the selection or rejection of applications. Notwithstanding the above, if the candidate does not agree with the result of the evaluation, they may challenge the decision by providing the information they deem appropriate by email to the following address:[email protected] . The Club informs that it has adopted technical and organisational security measures in relation to the fundamental rights and freedoms of individuals whose data is exposed to the Artificial Intelligence system. In cases where the candidate authorises it, their data may be used to propose new vacancies that may match their profile.

With regard to data retention, we will only store data that is up to date, so if there are CVs that have not been updated for more than one year, they will be deleted or blocked to prevent them from being read. The basis for legitimacy is consent, which may be withdrawn at any time in accordance with the procedure set out in the section on Exercising Rights or through the procedure provided in each communication.

  (vi) Ethics Mailbox: The Club will process personal data received through the Ethics Mailbox exclusively to investigate possible breaches of the Code of Ethics or unlawful conduct, and to prevent the commission of crimes. The legal basis for this processing is compliance with a legal obligation.

This data will only be kept for the time necessary to decide on the investigation, in accordance with Directive 2019/1937 of the European Parliament. Data relating to the investigation will be kept blocked and available to the Public Administrations until the legal actions arising from the relationship with the User have expired.

  (vii) Video surveillance: in order to preserve the safety of people and property, as well as its facilities and computer equipment, the Club has installed video surveillance and image capture systems in all its facilities. This processing is carried out on the basis of the Club's public interest.

In turn, based on compliance with a legal obligation, specifically Law 19/2007 of 11 July against violence, racism, xenophobia and intolerance in sport, as well as its implementing regulations, it establishes that, for security reasons, the organisers of competitions and sporting events determined by the State Commission against Violence, Racism, Xenophobia and Intolerance in Sport must install closed-circuit television to record access to and the full capacity of the sports venue, including the surrounding areas where crowds may gather. In addition, they shall take the necessary measures to ensure that the equipment is in good condition and functioning properly.

In order to comply with the right of access of interested parties, a recent photograph and the National Identity Document of the interested party shall be requested, as well as details of the date and time to which the right of access refers. The interested party shall not be given direct access to camera images showing third parties. If it is not possible for the interested party to view the images without showing images of third parties, a document shall be provided to the interested party confirming or denying the existence of images of the interested party.

The images will be kept for a maximum period of one month, in accordance with the provisions of data protection regulations.

  (viii) Commercial communications:


(ix) Images:
Photographs and/or video recordings may be taken at Club events and matches for the purpose of promoting, documenting and disseminating the corresponding event or match through the Club's communication channels, including the Website, social networks and other corporate media, or for preservation as historical documentation. Users are informed that by attending events and matches, they authorise the free transfer of image and voic r rights to the Club. In cases where the images do not directly identify a natural person, but are group images or general shots, the basis for legitimacy will be the Club's legitimate interest as the organiser of the event in disseminating its activities. In cases where the images directly identify a natural person who takes an active stance in front of the camera—such as voluntarily posing with a mascot or decoration—such action shall be understood as an expression of their willingness to be photographed, based on consent.

The images will be kept until you revoke your consent. The revocation of consent will not affect any processing carried out previously.

5. DATA OF MINORS

The Club will not collect or process personal data from minors under the age of 14 without fully complying with the requirements established in the applicable regulations. The processing of a child's personal data shall be considered lawful when the child is at least 14 years old. If the child is under 14 years of age, such processing shall only be considered lawful if consent has been given or authorised by the holder of parental authority or guardianship over the child, and only to the extent that it has been given or authorised.
 
Junior Members. Younger children can also become members of Atlético de Madrid, even from the day they are born. They are the future because from an early age they already feel and get excited about Atleti. Making them members now is very easy. For children there are:
 

The processing shall only be considered lawful if consent was given or authorised by the holder of parental authority or guardianship over the child, and only to the extent that it was given or authorised.

6. COMMERCIAL COMMUNICATIONS

Law 34/2002, of 11 July, on information society services and electronic commerce allows commercial communications to be sent via the internet and other electronic means, provided that they can be identified as such, as well as the entity from which they are sent.

The Club will send commercial communications by post about similar services that may be of interest to the User.

However, the Club will offer the recipient the possibility of objecting to the processing of their data for promotional purposes, both at the time of data collection and in each of the commercial communications sent to them.

Users may unsubscribe from these communications by writing to the Club's registered office indicated above or to the following email address:[email protected].

7. SOCIAL NETWORKS

The Club is present on several social networks. When interacting with any of its pages on social networks, the processing of data will be governed by the terms of use, privacy policies and access regulations belonging to the corresponding social network and previously accepted by the User.

The Club will process your data for the purpose of properly managing its presence on the social network, informing you of activities, products or services, as well as for any other purpose permitted by social network regulations.

Please note that the Foundation has no influence over the information that the social network collects or how it is processed.

8. TRANSFERS AND RECIPIENTS OF PERSONAL DATA

The User's data may be communicated, based on compliance with legal obligations, to:

In addition, data may be communicated to sponsors or collaborators when necessary to fulfil the contractual relationship.

Furthermore, the data may be accessible to the Club's suppliers, such access being necessary for the proper fulfilment of legal obligations and/or the purposes indicated above. These suppliers will not process your data for their own purposes that have not been previously communicated by the Club. The Club will contract the provision of services by third parties that carry out their activity, including but not limited to, in the following areas: cloud or computer hosting, sending commercial communications.

In this regard, the Club follows strict criteria for the selection of service providers in order to comply with its data protection obligations and undertakes to sign a data processing agreement, as required by law, imposing on them, among others, the following obligations: to apply the appropriate technical and organisational measures to ensure the security of personal data; to process personal data for the agreed purposes and in accordance only with the documented instructions of the data controller ( ); and to delete and return the data to the data controller once the services have been completed.

Some of our service providers are located in countries outside the European Economic Area ("EEA").

The location of these companies outside the EEA implies the existence of an international transfer of your personal data. However, the Club has implemented measures to ensure that such transfers do not result in a lower level of protection for your personal data.

In this regard, service providers located outside the EEA have signed the corresponding standard contractual clauses approved by the European Commission ("SCC"), an agreement signed between both entities whereby the non-EU company guarantees that it applies European data protection standards. Similarly, many of these providers are certified and adhere to the Data Privacy Framework endorsed by the European Commission.

Therefore, the use of these providers does not result in a lower level of protection of your personal data than would be the case with providers located in the European Union.

You can request a copy of these SCCs by sending your request [email protected].

9. DATA TRANSFERS TO THIRD COUNTRIES

Your data is generally processed by service providers located within the European Union or in countries that have been declared to have an adequate level of data protection. However, on occasions, in order to carry out the purposes indicated above, certain companies that provide services to the Club may access your personal data (international data transfers). Such transfers are made to countries with a level of protection comparable to that of the European Union (European Commission adequacy decisions, standard contractual clauses and certification mechanisms) and we will ensure at all times that whoever has your information to help us provide our services does so with all the guarantees in terms of data protection.

10. USER RESPONSIBILITY

The User:

In the event of any dispute, both parties shall attempt to reach an amicable agreement. If this is not possible, the Courts of Madrid shall have jurisdiction to hear the case, and no other jurisdiction may be invoked to bring the action.

11. EXERCISE OF RIGHTS

As the owner of the data, the User may send a letter to the Club, to the address indicated in the header of this Privacy Policy, or by email to the address:[email protected] , at any time and free of charge, to exercise the following rights regarding data protection:
 

You may also lodge a complaint regarding the protection of your personal data with the Spanish Data Protection Agency at C/ Jorge Juan, 6, 28001 - Madrid, when you consider that the Club has violated your rights under applicable data protection regulations.

In cases where the Club has reasonable doubts, it may ask you to prove your identity.

12. CLUB STATEMENTS AND COMMITMENTS


13. SECURITY MEASURES

The Club will treat the User's data at all times in an absolutely confidential manner and will maintain the mandatory duty of secrecy regarding such data, in accordance with the provisions of the applicable regulations, adopting the necessary technical and organisational measures to guarantee the security of your data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed, whether from human action or from the physical or natural environment.

14. CHANGES

The Club reserves the right to revise its Privacy Policy at any time it deems appropriate, in which case it will notify Users. For this reason, we ask that you regularly check this privacy statement to read the most recent version of the Privacy Policy.

15. ACCEPTANCE AND CONSENT

The User declares that they have been informed of the conditions regarding personal data protection and accepts the content of this Privacy Policy.

Last update: October 2025

  • Riyadh Air
  • Nike
  • Visit Rwanda
  • Kraken
  • Mahou
  • Hyundai
  • ComAve
  • CaixaBank
  • EA Sports
  • Movistar
  • Coca Cola
View all sponsors