Website: https://www.eurobot.es
1. Data Controller
The controller responsible for the processing of personal data collected through this website is:
Universidad de Alcalá (UAH)
CIF: Q2818018J
Plaza de San Diego, s/n
28801 Alcalá de Henares (Madrid), España
Contact email: eurobot@uah.es
Data Protection Officer (DPO) of the University of Alcalá: protecciondedatos@uah.es
Data processing is carried out within the framework of the organization of the Eurobot Spain competition and related activities.
2. Data Processing
2.1 Team Registration in the Competition
Purpose
- To manage registration and participation in the competition.
- To verify the identity and age of participants.
- To issue participation certificates.
- To manage image rights authorizations.
- To coordinate organizational communications.
- To publish results and rankings.
- To manage live streaming.
- To produce audiovisual materials related to the competition.
Data processed
Team Leader:
- Full name.
- ID number.
- Date of birth
- Email address
- Phone number
- Image rights authorization document
Team Members:
- Full name.
- ID number.
- Date of birth.
- Image rights authorization document.
Team Data:
- Team name.
- Logo.
- Institution
- City and Country.
Audiovisual Data:
- Videos voluntarily provided.
- Images captured during the competition.
Justification for Requesting the ID Number
The DNI is requested exclusively for:
- Unambiguous identity verification.
- Age verification (especially for minors).
- Issuing official participation certificates.
- Legal management and linkage of image rights authorizations.
Access to this data is restricted exclusively to authorized personnel, and enhanced technical and organizational measures are applied for its protection.
Mandatory Nature of the Data
Providing the requested data is mandatory to formalize registration.
Failure to provide it will prevent participation in the competition.
Legal Basis
- Performance of the relationship arising from competition registration (Art. 6.1.b GDPR).
- Explicit consent of the data subject or their legal representatives, in the case of minors, for the processing of personal data and image use (Art. 6.1.a GDPR).
Minors
In the case of participation by minors:
- A signed authorization from a parent or legal guardian is mandatory.
- Images will not be processed nor will minors appear in broadcasts without such authorization.
Data Retention
- User accounts will remain active until the end of the corresponding edition (maximum one year).
- Associated personal data (including DNI and date of birth) will be deleted after the edition ends, unless legal obligations require retention.
- Non-identifying historical data (team name, institution, results, logo) may be retained indefinitely.
- Audiovisual materials will be retained in accordance with the consent provided in the image rights document.
2.2 Volunteer Program
Purpose
- To manage volunteer registration and coordination.
- To organize tasks and shifts.
- To issue certificates.
- To contact volunteers for future editions.
Legal Basis
- Consent of the data subject (Art. 6.1.a GDPR).
Retention
Data will be retained as long as the data subject maintains their consent to participate in the volunteer program and receive information about future editions.
The data subject may request deletion at any time, and their data will be removed without undue delay.
2.3 Newsletter
Purpose
- To send information and communications related to Eurobot Spain.
Legal Basis
- Consent of the data subject.
Users may withdraw their consent at any time through the link included in each communication.
2.4 Website Comments
Purpose
- Management and moderation of comments.
- Spam prevention and website security.
Data Processed
- Data entered in the form.
- IP address.
- Browser technical data.
Legal Basis
- User consent and legitimate interest in ensuring website security
Comments may be retained as long as the website remains active, unless deletion is requested.
2.5 Streaming and External Content (YouTube)
Competitions are streamed live via YouTube, owned by Google LLC.
Viewing the stream implies that the platform may process personal data in accordance with its own privacy policy.
The use of these services may involve international data transfers to third countries, including the United States, carried out in accordance with appropriate safeguards under the GDPR (such as standard contractual clauses or other legally valid mechanisms adopted by the provider).
If minors appear in broadcasts or recordings, prior signed authorization will be obtained.
2.6 Cookies and Analytics
The website uses:
- Necessary technical cookies.
- Analytical cookies via Google Analytics, only with prior consent.
- Cookies associated with external services such as YouTube when content is embedded.
Detailed information is available in the Cookie Policy.
3. Data Recipients and Processors
Data may be processed by service providers acting as data processors in accordance with Article 28 GDPR when necessary for the provision of technical services (e.g., analytics services or external streaming platforms).
No data will be shared with third parties unless required by law.
4. Data Subject Rights
Data subjects may exercise the following rights:
- Access
- Rectification
- Erasure
- Objection
- Restriction of processing
- Data portability
Requests may be sent to: eurobot@uah.es
They may also contact the Data Protection Officer of the University of Alcalá or lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
The University of Alcalá has implemented appropriate technical and organizational measures to ensure the security of personal data, including:
- Restricted access control.
- Limitation of users with access to identifying data.
- Implementation of additional protection measures for sensitive data such as ID.
7. Consent in Forms
Each form will include:
- A mandatory checkbox for acceptance of the policy
- Clear information on the mandatory nature of the data
- In the case of minors, a requirement for signed authorization
Consents will be recorded to demonstrate compliance with the GDPR.