ATHLETIC CLUB will ensure that personal data is always processed and located in the European Economic Area. However, in certain circumstances, we may make international data transfers. For example, we may do this where it is necessary for entering into or executing a contract, in the interest of the data subject, between ATHLETIC CLUB and another natural or legal person; or where it is necessary to execute a contract between the data subject and ATHLETIC CLUB, for example when using service providers located outside the European Union, who may have access to personal data to provide ancillary services to our business (hosting, housing, SaaS, remote backups, IT support and maintenance services, e-mail managers, sending e-mails and e-mail marketing, file transfers, etc.) or to carry out pre-contractual measures adopted at the request of the data subject.
These entities may be different and vary over time, but we will choose entities either from countries with a level of data protection equivalent to the European level, or with adequate safeguards to achieve that level, or based on one of the exceptions provided for in the GDPR.