Privacy Policy
1. Data Controller
The data controller for personal data is:
South American Football Confederation – CONMEBOL
Avenida Sudamericana y Valois Rivarola
Luque, Paraguay
Contact email (privacy and ARCO/DSR rights): privacidad@conmebol.com
2. Scope of this Policy
This Privacy Policy describes how CONMEBOL collects, uses, stores, shares, and protects users' personal data when:
- Accessing and using the official digital platforms of CONMEBOL Libertadores and CONMEBOL Sudamericana.
- Using mobile applications and related digital services.
- Interacting with CONMEBOL through forms, games, contests, communications, and associated events (collectively, the “CONMEBOL Platforms”).
This Policy should be interpreted together with CONMEBOL’s General Terms and Conditions and Cookie Policy.
3. Principles and Regulatory Compliance
CONMEBOL processes personal data in accordance with the following principles:
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
The processing is carried out in compliance with applicable legislation, including:
- General Data Protection Regulation (GDPR – European Union)
- General Data Protection Law (LGPD – Brazil)
- Argentine data protection regulations
- Other applicable legal frameworks
4. Personal Data We Collect
Depending on the platform and interaction, CONMEBOL may process the following categories of data:
a) Identification data
First and last name, date of birth, country of residence, and identity document when required.
b) Contact data
Email address, telephone number and contact or delivery addresses.
c) Account and profile data
Username, encrypted password, preferences, interests, participation in games or contests, feedback and surveys.
d) Transactional data
Information related to purchases, tickets or experiences.
e) Financial data
Payment processing data handled through external providers. CONMEBOL does not store full card numbers.
f) Technical and usage data
IP address, device identifiers, browser type, operating system, time zone, visited pages and usage interactions.
g) Marketing data
Subscription preferences and communication settings.
h) Cookies
As described in the Cookie Policy.
i) Image and audiovisual recording
Images or videos captured at official events for institutional or security purposes.
5. How We Collect Data
CONMEBOL collects personal data through:
- Information provided directly by the user (account creation, contests, subscriptions, ticket purchases or communications).
- Automatic collection through cookies, logs and similar technologies.
- Authorized third parties such as technology providers, ticketing operators, venue operators and authorized commercial partners.
6. Purposes and Legal Basis
CONMEBOL processes personal data for the following purposes:
a) Contractual relationship
- User account creation and management
- Provision of digital services
- Participation in games and contests
- Ticketing and event access management
b) Legal obligations
- Accounting and tax compliance
- Fraud prevention
- Security and access control
- Compliance with legal authorities
c) Legitimate interests
- Platform and event security
- Service improvements
- Customer support
- Operational communications
d) User consent
- Marketing communications
- Non-essential cookies
11. User Rights
- Access
- Rectification
- Erasure
- Restriction of processing
- Portability
- Objection
- Withdrawal of consent
- Complaint to the competent authority
Requests can be sent to privacidad@conmebol.com.