GDPR

1. Data controller

The controller of your personal data is:

2. Scope of data collection

The BFootball website:

• Does not have a user area
• Does not allow account creation
• Does not require login

Data is collected only when you:

• Fill in contact forms
• Submit an application or information request
• Contact BFootball by email

3. Personal data processed

The following data may be processed:

• Name
• Email
• Phone number
• Club or sporting context (where applicable)
• Age or date of birth (when voluntarily provided)
• Content of the message sent

BFootball does not intentionally collect special categories of data (e.g. health, ethnic origin, religion).

4. Purposes of processing

Data is processed to:

• Respond to contact requests
• Evaluate athlete applications
• Provide information about services
• Institutional communications
• Comply with legal obligations

No automated decision-making or profiling is carried out.

5. Legal basis

Processing is based on:

• The data subject’s consent
• Pre-contractual steps requested by the user
• Compliance with a legal obligation

6. Data retention

Data is kept only for as long as necessary to:

• Respond to the request made
• Comply with legal obligations
• Maintain administrative records

After that period, data is deleted or anonymised.

7. Data security

BFootball adopts appropriate technical and organisational measures to protect personal data against:

• Unauthorised access
• Improper disclosure
• Accidental loss, destruction or alteration

However, no system is completely invulnerable.

8. Data subject rights

Under the GDPR, you have the right to:

• Access your data
• Rectify inaccurate data
• Erasure (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability

You may exercise these rights by email: [insert email].

If you believe your rights have not been respected, you may lodge a complaint with the Portuguese National Data Protection Commission (CNPD) — www.cnpd.pt

9. Data transfers

Data may be processed by technology service providers (e.g. web hosting) acting as processors who comply with the GDPR. International transfers outside the European Union are not made without appropriate legal safeguards.

10. Updates

BFootball may update this policy whenever necessary to ensure legal compliance. The latest version will always be available on the website.