Last updated: 2 October 2026.
Data controller
- COSTA DAURADA CUP, S.L.U. · Tax ID B75169854
- Juan Fermín Gilisagasti 4, Edificio Pía Norte, office 105, 20018 Donostia-San Sebastián (Gipuzkoa), Spain
- info@costadauradacup.com
We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
What data we process, why, and on what legal basis
Team registration
Through the registration form we collect the club name, country, person in charge, categories, arrival airport, tax or VAT number, invoicing address, email and phone number. We use it to manage the registration for the Halloween Cup, accommodation, transfers, payments and invoices, and to send you information about the event. Legal basis: pre-contractual measures and the performance of the registration contract.
Players and participants
To organise matches, accommodation and transfers, the club or family later provides the data of players and accompanying persons. Many of them are minors: whoever provides their data guarantees that they have the authorisation of their parents or legal guardians. Legal basis: the performance of the contract.
Photos, videos and broadcasts
Photos and videos are taken during the event and some matches are broadcast on the event’s YouTube channel. We only publish images in which players can be recognised if the person in charge has authorised it with the specific checkbox in the form, which is optional and does not affect the registration. Legal basis: your consent, which you can withdraw at any time by writing to info@costadauradacup.com.
Enquiries and contact
If you contact us by email, phone or WhatsApp, we use your data to reply. Legal basis: your consent when contacting us.
Information about upcoming events
We may send clubs and families who have already taken part information about our upcoming events. Legal basis: legitimate interest and article 21.2 of the LSSI-CE. You can object at any time and in every message.
Website analytics
If you accept it in the cookie banner, we measure how the website is used with Google Analytics to find out which pages are useful and improve them. Legal basis: your consent, which you can withdraw at any time from the “Manage cookies” link. More details in the Cookie Policy.
How long we keep the data
Registration and participant data, for as long as the relationship lasts and then for the periods required by law (for example, six years for accounting and tax records). Images, until you withdraw your consent. Enquiries, for as long as needed to answer them and for a maximum of one year.
Who we share the data with
We do not sell or transfer your data. It is only shared when necessary for the service or required by law:
- Tax authorities and other competent public authorities.
- Hotels and transfer and transport companies involved in the organisation.
- Banks and financial institutions, to manage payments.
In addition, the following providers work for us as data processors, under contract and only following our instructions:
- The website hosting provider.
- FormSubmit, the service that receives the registration form and forwards it to our email. It is based in the USA, so submitting the form involves an international data transfer.
- Google Ireland Ltd., for website analytics, only if you accept cookies. Google may process data in the USA and is certified under the EU-US Data Privacy Framework.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@costadauradacup.com or to our postal address, stating the right you wish to exercise. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the authority in your country.
Security
We apply technical and organisational measures to protect your data against loss, unauthorised access or misuse.
Registration conditions
- A registration is confirmed once the organisers accept it in writing and payment is received within the stated deadlines.
- Payments are made by bank transfer to the account given in the registration confirmation. When paying, please state the club name and category, and send the proof of payment to info@halloweencup.com.
- Hotels may ask for a deposit of around €20 to €30 per person, refunded at check-out once they have checked there is no damage.
- Cancellation and force majeure: the organisers are not liable for compensation, financial losses or damage caused by events beyond their control, such as war, fire, floods, disruption of public transport, government action, strikes or similar circumstances.