Privacy Policy
Something’s Burning Data Protection Policy
Something’s Burning, SL agrees to protect the personal information you share with us, since it is essential for us to guarantee and safeguard its privacy and confidentiality pursuant to the General Data Protection Regulation (EU Regulation 2016/679) (GDPR) and Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD).
This statement sets forth our data privacy and protection policy with regard to the information that you provide to us and thus ensures that we are able to guarantee that i) you may request the cancellation of your personal data at any time as long as the legal requirements on data protection and retention are met, ii) we comply with the obligation of secrecy with regard to the personal data collected, and the duty to retain data and not to disclose it to third parties without the express consent of the owner thereof, iii) we have adopted the necessary technical and organisational measures, in consideration of the state of the art, the costs of application, and the nature, scope, context and purposes of processing said data, as well as risks of variable likelihood and severity regarding the rights and freedoms of natural persons, to guarantee a level of security as appropriate to the risk detected, and to ensure the pseudonymisation and encryption of personal data, as well as the ability to guarantee the permanent confidentiality, integrity, availability and resilience of processing systems and services.
1. Data processor
The terms and conditions that follow hereinafter correspond to the company Something’s Burning, SL CIF B67192369, with address at Barcelona 08003, Vía Laietana, number 38 Principal, which is included in the Barcelona Company Register, volume 46354, folio 105, page 517391, entry 1.
2. DPO details
Something’s Burning, due to the volume of information it handles, is not required to appoint a DPO. However, a communication channel in relation to data protection has been enabled at lopd@footballhost.com
3. What personal data do we process?
On this website, first and third-party cookies are installed that may collect personal data after this is agreed to. For any questions or additional information, please see our Cookies Policy.
Should the interested party register as a user of the website, their personal data that will be processed shall be:
- Username
- Name and surname(s)
- IP address
- Date of birth and gender
- Bank details
The user guarantees the accuracy and veracity of the personal data supplied, undertaking to keep it duly updated and to report to Something’s Burning, SL any changes thereto.
Something’s Burning, SL does not agree to receive information or personal data from third parties supplied by the user. Therefore, in the event that the user discloses personal data of third parties, Something’s Burning, SL assumes that the user is necessarily entitled to do so.
Children under the age of 16 may not register for any of the Websites or Apps. If any part of Something’s Burning, SL should perform an action addressed at children under 16 years of age, it will be an essential requirement for their parents or legal guardians to provide all corresponding documents as required.
4. Purpose of processing and period for which data is retained
- Purpose of processing
The collection and use of personal data is only possible if the user voluntarily supplies us with their personal data. The different purposes of processing personal data shall be:
- Registration of the Guest
The personal data provided during user registration as a “Guest” shall be collected, processed and used for the purpose of managing the registration, as well as for the management, administration, provision, expansion and improvement of services and the sending of technical and operational information, by any means, including email and/or equivalent.
-
Registration of the Host
The personal data provided during user registration as a “Host” shall be collected, processed and used for the purpose of managing the registration, as well as for the management, administration, provision, expansion and improvement of services and the sending of technical and operational information, by any means, including email and/or equivalent.
- Management of claims
At the time of making the claim, the personal data of other travellers may also be uploaded. Users are therefore asked to ensure that this information is supplied with the consent of any companions.
-
Satisfaction surveys
The personal data provided in the course of a combined travel booking (the “Booking”) shall be collected, processed and used in order to improve the services provided by us and thus adapt and design our commercial offers by preparing satisfaction surveys.
-
Commercial communications
In the event that the user issues to us their express and unequivocal consent, the personal data supplied shall be collected, processed and used for the purpose of sending commercial communications both in printed form and by electronic or digital means, in relation to the products and services that, at any given time, Something’s Burning, SL, might offer as an intermediary. The User may choose, at any time, the channels and means by which he/she wishes or not to receive said communications.
4.2. Data retention period
The personal data supplied for purposes (i), (ii), (iv) and (v) shall be retained for as long as the owner of the data does not exercise their right of deletion, opposition, limitation of processing and withdrawal of the consent granted.
The personal data provided for purpose (iii) shall be retained for a maximum of 5 years after the claim has been made and as long as there has been a relationship between the parties.
Additionally, Something’s Burning, SL, undertakes to process and collect personal data:
- Lawfully, loyally and transparently
- Adequately, appropriately and limited to what is strictly necessary
- Fully and exactly up to date
- For the strictly necessary period.
Likewise, Something’s Burning, SL undertakes to respect the guiding principles of Privacy by design and by default, as well as the proactive liability established in data protection regulations.
5. To whom can my data be communicated?
5.1 Data communication
- In the case of being registered as a “Guest” user and as long as you have requested an experience, Something’s Burning, SL must disclose your personal contact information to the “Host” owner of the experience.
- By legal obligation: In order to comply with any legal obligation that concerns you, Something’s Burning, SL shall disclose, if applicable, your personal data to third parties.
- In the case of claims, we must disclose your personal data as necessary for the correct processing and resolution of the Claim, to the different suppliers of the products that were necessarily involved therein or were necessary for its correct performance.
5.2 Transfer of data to countries outside the EU (European Union)
Insofar as necessary, we must transfer your data to non-EU recipients, ensuring in doing so that the receiver of the data guarantees an adequate level of data protection and that no other legitimate interest opposes the transfer of data. In order to guarantee an adequate level of protection by the receiver of the data, you are hereby informed that we use contracts as required by the RGPD and LOPD GDD.
6. Can third parties process my data?
On Something’s Burning SL’s web pages, you can find links to third-party websites. Please note that this Privacy Policy does not apply to the processing of your personal data by third parties when you visit their respective web pages. You are advised to consult the privacy policies of the web pages you access in order to better understand the standards applicable to the processing of your personal data in those cases.
7. Exercise of the owner’s rights
The rights that the User or interested party can exercise are those indicated below (the exercise of these is free of charge):
| Right of interested party | Content of the right |
| Access | The user shall be able to receive confirmation as to whether Something’s Burning, SL processes their personal data, as well as consult the personal data included in the company’s files. |
| Rectification | The user can modify their personal data when it is inaccurate, as well as complete any incomplete data. |
| Deletion | The user may request the deletion of their personal data under certain circumstances, among others, that the data is no longer necessary for the purposes for which it was collected. |
| Opposition | The user may request that their personal data not be processed. Something’s Burning, SL shall cease to process the data, except for legitimate reasons, legal authorisation, or the exercise or defence of possible claims. |
| Limitation of processing | The user may request limitation of the processing of their data in the following circumstances: |
| • As long as the appeal against the accuracy of their data is verified | |
| • When the processing is illegal, the User opposes the deletion of their data, or requests the limitation of its use | |
| • When the Company does not need to process the User’s data, but the User needs it for the exercise or defence of claims | |
| • When the processing of your data has been opposed in order to comply with a matter of public interest or for the satisfaction of a legitimate interest, while verifying whether the legitimate reasons for the processing prevail over the user’s own. | |
| Withdrawal of consent granted | If the user has issued their consent for the processing of any of their data, they may withdraw that issued consent at any time. |
| Portability | The user shall be able to receive the data that concerns them, which is being processed pursuant to their consent or in compliance with a contract, and provided that the processing is performed by automated means. The user may receive the data in electronic format, or request that it be transferred to another party (if technically possible). |
8. Means of application
To exercise these rights or withdraw the consent granted, please write to Something’s Burning with the reference “GDPR Rights”, to its registered office as stated above or to the communication channel enabled at lopd@footballhost.com
9. Claims before the data protection authority
The user may address claims arising from the processing of their personal data before the Spanish Agency for Data Protection (www.agpd.es).
However, we ask you to contact us before you make such a claim, via the indicated channels, in order for us to quickly attend to your request and clarify any doubts that may arise.
In case of exercising your rights, it is possible that your data could be blocked and retained in a restricted manner and made available to the competent authorities, in accordance with data protection regulations, to attend to any liabilities arising from the processing thereof.
For any additional questions about the way we process your data, please contact us via email to lopd@footballhost.com
10. Security measures implemented to protect data
In order to safeguard the security of your personal data, you are hereby informed that Something’s Burning, S.L has adopted all the necessary technical and organisational measures to guarantee the security of the personal data supplied in order to prevent its alteration, loss, and/or unauthorised processing or access, as required by law.
It is important, so that we can keep your personal data up to date, for you to inform us whenever there is a change thereto.
11. Can this Privacy Policy be modified?
Something’s Burning, SL reserves the right to modify this Privacy Policy at any time, and agrees, in the event of substantially modifying the conditions, to report the new conditions that have been made to the user.
We advise the user to regularly consult our Privacy Policy since the one in force at the time of use of the Web Pages and Apps shall be applicable.
For any questions, or to obtain further information about any point established in this Policy, please send an email to lopd@footballhost.com
12. Origin of the data
Should your booking and subsequent contract be made directly with Something’s Burning, SL, your personal data and that of your companions will have been obtained from the interested party.
This data protection policy was last modified in November 2021.