Privacy Policy

• We collect what you type into our forms, and almost nothing else.
• If you ask us to look at a player, we show that profile to universities and coaches in the United States. That is the service, and we do it only with consent.
• We do not sell data. Analytics and advertising cookies — Google Analytics and the Meta pixel — load only if you accept them in the banner.
• You can ask to see, correct or delete your data at any time by writing to hello@eturesports.com.

The rest of this page is the detail required by the General Data Protection Regulation (Regulation (EU) 2016/679) and the Spanish Data Protection Act (Organic Law 3/2018, LOPDGDD).

• Controller: ETM SPORTS COMPANY, S.L. (Eture Sports)
• Registered office: Carretera Ademuz km-12, 46184 Valencia, Spain
• Tax number (CIF): B-12967725
• Data protection contact: hello@eturesports.com
• Website: www.eturesports.com

ETM SPORTS COMPANY, S.L. operates under the brand Eture Sports and runs athletic, academic and personal development programmes — among them the Gap Year, Eture FC, the ID Summer Camp and college recruitment services.

Any question about this policy, and any request about your own data, goes to that address and is answered by the management of the company.

Almost all of it is what you type in yourself:

• Forms. Your name, email, telephone, country and region, and whatever the particular form asks: postal address, date of birth, current club, position, height and weight, school year, grade average and English test scores, a link to your highlight video, your social profiles, your message, and how you came to hear about Eture.
• A parent or guardian's name and contact details, when the player is under 18.
• Health information, on the application forms only: conditions or injuries our staff should know about before you arrive, whether you take medication, dietary requirements and past injuries. This is special category data under Article 9 of the GDPR and is treated as such — see below.
• The chat assistant. Your name, email address, telephone number and what you are interested in, which it asks for before the conversation starts — and then whatever you type into it.
• Messages you send us by email, WhatsApp or telephone.
• Booking a call. The time you choose and the details the booking tool asks for.
• Site measurement. Which pages are read, in which language, from roughly what kind of device and which country — recorded without cookies and without keeping your IP address. The Cookies Policy explains exactly how.
• Analytics and advertising cookies, only if you accept them. Google Analytics and the Meta pixel record how the site is used — pages visited, device, browser and approximate location — and Meta can connect a visit to one of our ads. The Cookies Policy lists each cookie.
• Technical data. To deliver each page, our hosting provider processes your IP address and browser details. To stop repeated automated submissions, the site keeps a scrambled form of your address in memory for ten minutes; the address itself is never written down.

We do not ask for bank details, identity documents or passport scans through this website. When you join a programme, the admissions process collects what enrolment needs — such as billing details and nationality, and identity documents where travel or a visa requires them — and this policy covers them in the same way.

Sometimes information about a player reaches us from someone other than the player or their family:

• Clubs, academies, coaches and partner organisations that recommend a player to us.
• Universities and their athletic departments, when they tell us about a player's recruitment, admission or roster status.
• People who refer a player to us, and social networks, when you contact us or interact with Eture through them.
• Public sources, such as published university rosters and results.

When that happens we tell the player — or, for a minor, the parent or guardian — the first time we contact them, and at the latest within a month, as Article 14 of the GDPR requires. The same rights apply as to anything else we hold.

Most of the people this service exists for are minors, so this is the section to read first.

• In Spain a person under 14 cannot consent on their own to the use of their data (Article 7 LOPDGDD). A parent or guardian has to do it for them.
• For anyone under 18 we ask for a parent or guardian's name and contact details, and we deal with that adult, not only with the player.
• We do not knowingly collect data from a child under 14 sent to us without a parent. If we discover we have, we delete it.
• A profile is shown to a university only with the family's consent, and it comes down when they ask — without explanation and without cost.
• Health information about a minor is given by the parent or guardian, is seen only by the staff who need it to keep the player safe, and is deleted at the end of the programme.

Eture Sports has a child protection policy and a delegate for the protection of minors under Organic Law 8/2021 (LOPIVI). Concerns about a minor's safety or wellbeing can be raised confidentially through an independent channel: Child Protection Channel. Reports there are handled by the compliance provider that runs the channel and by our delegate, and are passed to the authorities where the law requires it. In an emergency, call 112; the children's helpline is 116 111.

We do not sell data. We pass it on in four situations:

• Universities, coaches and athletic departments in the United States, when you have asked us to present your profile to them.
• Eligibility and admissions bodies — the NCAA Eligibility Center, the NAIA, the NJCAA, university admissions offices and the services they use to verify academic records — when a process you have started requires it.
• Clubs, academies, host schools and partners involved in the programme you join.
• Public authorities, where the law requires it.

We also use a small number of suppliers who handle data on our behalf, under the contracts Article 28 of the GDPR requires:

The point of this service is placing players at universities in the United States, so if you ask us to do that, your profile goes to the United States. Several of the suppliers above are US companies too.

• For universities and coaches: your explicit consent to that specific transfer (Art. 49.1.a), together with the performance of the contract you asked for (Art. 49.1.b).
• For suppliers: the European Commission's Standard Contractual Clauses (Art. 46.2.c) and, where the supplier is certified, the EU–US Data Privacy Framework.

The United States does not have a general data protection law equivalent to the GDPR, and its public authorities have access powers that would not exist here. If that is not acceptable to you, say so — we simply will not present your profile to a US university, and everything else continues as normal.

• Access — a copy of what we hold about you.
• Rectification — correct anything that is wrong or incomplete.
• Erasure — have it deleted, where we are not required to keep it.
• Restriction — have us stop using it while something is disputed.
• Portability — receive the data you gave us in a machine-readable file, or have it sent somewhere else.
• Objection — object to anything we do on the basis of our legitimate interest.
• Withdraw consent — at any time, without giving a reason. It does not affect what was lawful before you withdrew it.

Write to hello@eturesports.com, or to the postal address above. We answer within one month. We may ask you to confirm who you are before we act; where the person is a minor, we deal with the parent or guardian.

If you think we have handled your data badly, you can complain to the Spanish Data Protection Agency — Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es. We would rather you told us first, so we can put it right.

The site works without cookies for visitors. Analytics and advertising cookies are set only if you accept them, purpose by purpose, and you can change your answer at any time. The Cookies Policy lists each one, who sets it and how long it lasts.

Everything you send travels over an encrypted connection and is stored in a database that is not reachable from the public internet. The staff area needs a password, gives each person only the access their role requires, and its session expires after twelve hours. Passwords are stored hashed and never in readable form.

No system is perfect. If a breach ever affected your data in a way that put you at risk, we would tell you and the AEPD, as Articles 33 and 34 require.

The chat panel on this site is an automated assistant, not a person. We say so plainly because Article 50 of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689) requires it, and because it would be unfair not to.

It answers from our published FAQ, it runs on a model provided by Anthropic, and what you type is sent to Anthropic in order to produce the reply. It has no access to our database and it cannot commit us to anything. Please do not type personal details into it — and never a minor's — use a form or WhatsApp, where the information is handled properly.

No decision about you that produces legal effects, or affects you similarly significantly, is made by automated means alone (Article 22 GDPR). A person reads every profile.

We revise it whenever what we do with data changes. The date at the top says when that last was. If a change matters to you — a new purpose, a new recipient — we tell you rather than leaving you to notice.