Privacy Policy

• Two forms on this site collect personal data, and nothing else on it does. There are no advertising cookies and no tracking pixels.
• The controller is Eture Sports, which runs this website and the database behind it. The partner agency covering your country receives your enquiry and handles it under its own responsibility from that point.
• A coach's registration is shared with the agency hosting the stops they ticked. A player or family enquiry goes to the agency covering their country.
• Player rosters are shown to U.S. college staff — that is what the tour is for — and only with consent, which can be withdrawn.
• Ask us to delete your data and we delete it. Write to hello@eturesports.com.

• Controller: ETM SPORTS COMPANY, S.L. (Eture Sports)
• Registered office: Carretera Ademuz km-12, 46184 Valencia, Spain
• Tax number (CIF): B-12967725
• Data protection contact: hello@eturesports.com

The tour is a partnership of four agencies — Eture Sports in Spain, Kumlin Recruiting in Sweden, NSSA in Denmark and Soccer & Education USA in Iceland. Eture Sports leads it and operates this website, so Eture Sports is the controller of everything collected here.

Once an enquiry reaches the agency that covers your country or hosts your stop, that agency decides for itself what to do with it, and is a controller in its own right for its own handling. Each publishes its own notice on its own site. If you are unsure which of us holds what, write to the address above and we will tell you.

Only what you type in. There are two forms and they ask different things.

The coach registration asks for your first and last name, email, telephone, the university or college you work for, your role, your division, which stops you can attend, and a free-text description of what you are recruiting.

The player and family enquiry asks for first and last name, email, telephone, whether the player or a parent is filling it in, the player's age, club or team, league or division, country and position, and anything else you want to tell us. It is an enquiry, not a registration: places on the tour are arranged by the agency that represents the player.

We do not ask for health information, identity documents, bank details or passport scans through this website. If a programme needs any of that later, it is collected through the admissions process by the agency handling it, not through a web form.

To keep the forms from being used by machines we count how many submissions come from an IP address over a short window, and we measure how long the form was on screen before it was sent. The IP address is held in memory for that check only. It is never written to our database and never leaves it.

The tour is built for players born between 2007 and 2011, so some of them are minors. This is the section to read first.

• The enquiry form asks who is completing it. If the player is under 18, the person sending it confirms they are a parent or guardian, or that they have the player's permission, and we deal with that adult.
• In Spain a person under 14 cannot consent on their own to the use of their data (Article 7 LOPDGDD). A parent or guardian has to do it for them. Sweden, Denmark and Iceland set their own ages under Article 8 GDPR; where the player's own country sets a higher bar, that is the one we apply.
• We do not knowingly collect data about a child under 14 sent without a parent. If we find we have, we delete it.
• A player's profile is shown to a university only with the family's consent, and it comes down when they ask — without explanation and without cost.
• Eture Sports has a child protection delegate under Organic Law 8/2021 (LOPIVI). Concerns about a minor's safety can be raised confidentially through the channel published on eturesports.com. In an emergency call 112; the European children's helpline is 116 111.

We do not sell data. It goes to:

• The partner agency for your country or your stop — Kumlin Recruiting, NSSA or Soccer & Education USA — so that they can answer you. This is the whole point of a joint circuit, and it is what the consent box on the form covers.
• U.S. college coaches and athletic departments, who receive the rosters of players attending a stop they registered for. A player is on that roster only with consent.
• Public authorities, where the law requires it.

We also use suppliers who handle data on our behalf under the contracts Article 28 GDPR requires: the hosting and database provider behind this site and the tour's CRM, and the service that delivers the emails the forms generate.

The purpose of this tour is to put European players in front of universities in the United States. If you ask us to do that, the player's profile goes to the United States. Some of our suppliers are US companies too.

• For coaches and universities: your explicit consent to that specific transfer (Art. 49.1.a), together with performance of what you asked us to do (Art. 49.1.b).
• For suppliers: the European Commission's Standard Contractual Clauses (Art. 46.2.c) and, where the supplier is certified, the EU–US Data Privacy Framework.

The United States has no general data protection law equivalent to the GDPR, and its public authorities have access powers that do not exist here. If that is not acceptable to you, say so: we will simply not present the profile to a US programme, and everything else continues as normal.

Ask for deletion before any of those periods end and we delete it, unless the law requires us to keep it.

• Access — a copy of what we hold about you.
• Rectification — correct anything wrong or incomplete.
• Erasure — have it deleted, where we are not required to keep it.
• Restriction — have us stop using it while something is disputed.
• Portability — receive what you gave us in a machine-readable file, or have it sent elsewhere.
• Objection — object to anything we do on the basis of our legitimate interest.
• Withdraw consent — at any time, without giving a reason. It does not affect what was lawful before you withdrew it.

Write to hello@eturesports.com, or to the postal address above. We answer within one month. Where the person is a minor, we deal with the parent or guardian. If your request concerns data held by one of the partner agencies rather than by us, tell us and we will point you to the right contact rather than leaving you to find it.

If you think we have handled your data badly you can complain to the Spanish Data Protection Agency — Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es — or to the authority where you live: IMY in Sweden, Datatilsynet in Denmark, or Persónuvernd in Iceland. We would rather you told us first, so we can put it right.

Everything you send travels over an encrypted connection and is stored in a database that is not reachable from the public internet. The staff area needs a password, gives each person only the access their role requires, and its session expires. Passwords are stored hashed.

No system is perfect. If a breach ever affected your data in a way that put you at risk, we would tell you and the supervisory authority, as Articles 33 and 34 require.

We revise it whenever what we do with data changes. The date at the top says when that last was. If a change matters to you — a new purpose, a new recipient — we tell you rather than leaving you to notice.