Privacy policy

Last updated: 07/10/2026

1. Data controller

  • Controller: AGENDA GESTIO ESPORTIVA S.L.
  • Tax ID: B17373630
  • Address: Avenida Generalitat, 21, Bajo, 17820, Banyoles (Girona), España
  • Privacy contact email: admon@agendasports.com

The organiser of each event published on the platform also processes the booking data of their event in order to manage it, as controller of that activity.

2. Data we process

  • Club account: club name, contact person, email, phone, address and, if provided, billing details (legal name, VAT number, billing address) and notes.
  • Bookings and payments: dates, number and type of guests, rooms, amounts, transfer receipts and, where applicable, the IBAN you provide for a refund.
  • Guest check-in: full name, date of birth, nationality, ID document number and document support number, required by law for the guest register kept by accommodation providers.
  • Technical data: IP address and access logs, for security purposes.

3. Purposes and legal basis

  • Managing your account, bookings, payments, pre-registrations and refunds (performance of a contract or pre-contractual steps at your request).
  • Sending guest data to the accommodation for the guest register (legal obligation, Spanish Royal Decree 933/2021).
  • Invoicing and accounting/tax obligations (legal obligation).
  • Platform security and fraud and spam prevention, including the anti-bot check at registration (legitimate interest).

We do not send marketing communications or build profiles. We only email you about your bookings and your account.

4. Recipients

  • The organiser of the event you book and the assigned accommodation providers (booking and guest data).
  • Service providers acting as processors under data processing agreements: server hosting (Contabo GmbH, in the European Union), email provider, Google (Google sign-in and maps) and Cloudflare (anti-bot check at registration). Where any of them may access data from outside the European Economic Area, the safeguards provided by the GDPR apply (adequacy decisions such as the EU-US Data Privacy Framework, or standard contractual clauses).
  • Public authorities and law enforcement when required by law.

We do not sell or share your data for commercial purposes.

5. Retention periods

  • Account data: while your account remains active.
  • Bookings, payments and invoicing: for the periods required by commercial and tax law (up to 6 years).
  • Guest register data: for the period set by the applicable regulation (3 years).
  • Security logs: up to 12 months.

6. Minors' data

Data of guests under 18 is provided by the club or the person completing the check-in, who declares that they have the authorisation of the parents or legal guardians. It is only used for the booking and the guest register.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to admon@agendasports.com, stating which right you wish to exercise. Some data (for example invoicing or guest register data) must be kept for the legal periods even if you request its erasure.

If you believe your request has not been properly handled, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country.

8. Cookies and local storage

  • Strictly necessary first-party cookies: session cookie to keep you logged in and language preference.
  • Browser local storage: visual theme preference.
  • Third parties: Google, when signing in with Google or displaying maps, and Cloudflare, during the anti-bot check at registration, may use their own cookies under their privacy policies.

9. Security

We apply technical and organisational measures to protect your data: encrypted connection (HTTPS), hashed passwords, restricted access to payment receipts and backups.

10. Changes to this policy

If we make relevant changes to this policy, we will announce them on the platform and update the date at the top.