Privacy Policy

1. Scope

This policy applies when you visit kaironsports.com, email KAIRON, request or book a meeting, participate in a professional discussion, appear in relevant institutional research based on public sources, engage KAIRON SPORTS or enquire about KAIRON ACADEMY.

It does not govern a third party merely because the website links to that service. Optional content from another provider is identified before it is loaded where appropriate.

2. Controller and contact

The controller for the public website and KAIRON's own professional activities is Dámaso Mengod Pérez, operating the KAIRON SPORTS and KAIRON ACADEMY project names. Those names do not, by themselves, identify separate incorporated entities.

Privacy requests may be sent to hello@kaironsports.com. Academy enquiries may also be sent to academy@kaironsports.com. Current operator and contracting information is set out in the Legal Notice and in any signed engagement.

3. Data we handle and where it comes from

3.1 Website, enquiries and meetings

• Identity and contact details, professional role, organisation and preferred language.
• Correspondence, meeting details, relationship history and information you choose to provide.
• Technical and security data such as IP address, request time, browser, device and delivery logs generated by hosting, email and security providers.

3.2 Institutional research and client work

• Information from public sources about clubs, companies, officeholders, employees and institutional stakeholders where relevant to a legitimate football project research or qualification question.
• Material supplied under authority by a client, including organisational documents, interview notes, workshop contributions, decision records and deliverables.
• Professional observations and working evidence used to distinguish facts, hypotheses, contradictions and unknowns.

Sources may include the person concerned, their employer or club, an authorised client contact, official registers, governing bodies, club publications, reputable public sources and direct professional interaction.

3.3 Academy enquiries

• Contact details supplied by a club, coach, parent, guardian or authorised adult.
• Limited contextual information needed to assess a proposed collaboration or answer an enquiry.

The public website is not a registration portal for players. Do not send medical records, safeguarding material, identity documents, detailed information about a child or match footage through a general enquiry.

KAIRON does not collect participant or minor data for a proposed project until a defined purpose, lawful basis, data roles and appropriate safeguards have been agreed.

4. Purposes and legal bases

Depending on the activity and applicable law, personal data may be processed:

• to answer an enquiry or take requested steps before entering a contract;
• to perform, administer and protect a written mandate or collaboration;
• for legitimate interests in proportionate professional communication, carefully scoped institutional research, service development, information security and establishing or defending legal claims;
• to comply with tax, accounting, safeguarding, regulatory or other legal obligations; or
• with consent where the activity requires a genuine choice, including optional content from another provider, certain communications and separate uses of a person's image.

When KAIRON relies on legitimate interests, the relevance, necessity and effect on the individual must be considered. Personal data is not sold. Client or player information is not used to train a general purpose artificial intelligence model unless the relevant controller has expressly authorised a defined use in writing.

5. Academy, minors and sensitive information

KAIRON ACADEMY is currently being developed as an initiative for player development. A parent, guardian, club or authorised adult should initiate an enquiry involving a minor. A general enquiry does not amount to consent for participation, image use, health processing or marketing.

Before any live activity begins, the operating entity and venue will issue information specific to that activity covering the responsible adults, safeguarding route, emergency data, lawful bases, recipients, retention, permissions and applicable local rules. Health, injury, biometric, wearable or performance data will only be collected where genuinely necessary, with an identified legal basis and additional safeguards.

Photography and video permissions will be separate from participation wherever required. Refusing optional promotional image use will not, by itself, prevent participation.

6. Recipients, providers and international transfers

Access is limited to people and providers who need the information for an authorised purpose. Current provider categories include:

• Cloudflare, for website delivery, resilience and security;
• Google Workspace, for business email and related collaboration services;
• Cal.com, if a visitor chooses to load or open the booking service; and
• professional advisers, contractors or authorities where necessary, authorised or legally required.

Providers may process data from jurisdictions outside the European Economic Area or Switzerland. Where required, KAIRON will rely on an adequacy decision, approved contractual clauses or another lawful transfer mechanism and assess supplementary safeguards appropriate to the risk.

Links to clubs, Instagram and other external services open their own websites. Their processing is governed by their notices.

7. Controller and processor roles on signed project engagements

KAIRON is controller for its website, business administration, security and professional activities whose purposes and means it independently determines.

For client work, the role follows the real processing. KAIRON may act as processor where it handles personal data only on a client's documented instructions, and as an independent controller for limited professional, legal or administrative purposes it determines itself.

Where Article 28 GDPR or an equivalent processor rule applies, the parties will sign terms covering the parties, subject matter, duration, purpose, data, data subjects, instructions, confidentiality, security, subprocessors, rights support, incidents, audits and return or deletion. A public webpage is not a substitute for those terms.

8. Retention

Data is kept only for as long as reasonably needed for the stated purpose, then deleted, anonymised or restricted unless law or a legal claim requires longer retention.

• General business enquiries that do not progress are normally reviewed within 24 months.
• Academy expressions of interest that do not become an activity are normally reviewed within 12 months.
• Contract, invoice, accounting and legal records follow applicable statutory periods.
• Mandate material follows the written client schedule and any required legal hold.
• Provider security and delivery logs are retained for limited periods set according to operational and security needs.

9. Security and incidents

KAIRON applies measures proportionate to the activity and risk, including data minimisation, limited access, encrypted transport where supported, controlled sharing, provider review and separation of public and private material. No internet service can be guaranteed completely secure.

If you believe personal or confidential information has been sent to the wrong address, exposed or misused, contact hello@kaironsports.com promptly. Legally required notifications will be made to the competent authority and affected people.

10. Your rights

Depending on the law that applies, you may request access, correction, deletion, restriction, portability or information about disclosures; object to certain processing; or withdraw consent without affecting earlier lawful processing.

Send a request to hello@kaironsports.com. KAIRON may request proportionate information to verify identity and locate the relevant records. Responses and any lawful limitations will follow the applicable legislation.

You may complain to the authority competent for your location or the relevant processing, which may include the Spanish Data Protection Agency (AEPD), the French data protection authority (CNIL) or the Swiss Federal Data Protection and Information Commissioner (FDPIC).

11. Automated decisions

The public website does not make decisions producing legal or similarly significant effects through automated processing. Any future use of analytics, profiling, wearable technology or automated assessment concerning players will require a separate documented review before deployment.

12. Changes and questions

This policy will be updated when the operating entity, services, Academy model, providers or processing materially changes. The effective date identifies the current public version.

Questions may be sent to hello@kaironsports.com. Information about website storage technologies is available in the Cookie Notice.