Privacy Policy

Rafa Nadal School (hereinafter, “the School”, “we”, “us”) informs users of the application and services associated with the domain rafanadalschool.com about the processing of personal data obtained through its own services and Google APIs used in the steady-computer-472210-k8 project.

This Policy applies both to the website and to internal or external applications that use Google OAuth authentication.

1. Google Data Accessed by the Application

Depending on the permissions granted during the authentication process, our application can access only the following minimum user data:

  • First and last name of the Google profile
  • E-mail address
  • Profile picture
  • Unique User ID (Google User ID)

We do not access additional data without the user’s consent.

2. Use of Data

Data obtained through Google OAuth is used exclusively for:

  • Identify and authenticate the user in our services.
  • Associate the user’s account to his/her internal Rafa Nadal School profile.
  • Allow access to the corresponding educational, administrative or informational services.
  • Ensuring secure access to private areas

We never use the data for advertising purposes or to create commercial profiles.

3. Communication and Data Sharing

Data is only shared when strictly necessary:

Third parties necessary for the provision of the service

  • Companies of the educational and sports group associated with the School (e.g. Rafa Nadal Academy / Rafa Nadal International School).
  • Technology providers that provide hosting, security or maintenance services
  • Collaborating entities required for academic or administrative management

Legal obligations

  • Competent Public Administrations when required by law
  • Insurance services or other agencies in cases where required by the educational or sporting activity

We never sell or give personal data to third parties for commercial purposes.

4. Data Storage and Protection

Rafa Nadal School applies appropriate technical and organizational measures to ensure the security and confidentiality of data:

  • Encryption of communications (HTTPS)
  • Access restricted to authorized personnel only
  • Security and monitoring systems in our servers
  • Compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018.

The data is stored only for the purpose described in this Policy.

5. Data Retention and Disposal

The data will be retained:

  • As long as the user maintains an active relationship with the School
  • The time required to fulfill administrative or legal obligations
  • During the applicable statute of limitations

The user can request the deletion of his/her data at any time.

To exercise your rights of access, rectification, deletion, limitation, opposition or portability, please contact:

📩 rgpd@rafanadalschool.com
📮 Carretera de Calas de Mallorca s/n, 07500 Manacor, Illes Balears, Spain

6. Revocation of Access to Google Data

At any time, the user can revoke the access granted to the application from Google’s official website:

🔗 https://myaccount.google.com/permissions

7. Policy Changes

We reserve the right to modify this Privacy Policy. Updates will be posted on this page indicating the date of last revision.

8. Data Controller

Rafa Nadal School
Carretera de Calas de Mallorca s/n,
07500 Manacor, Illes Balears, Spain
🌐 https://www.rafanadalschool.com/ https://www.rafanadalschool.com/
📩 rgpd@rafanadalschool.com