Personal data policy

This policy explains how Kreanet processes the personal data it receives through this website and the ONCE 11 platform, in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and other Colombian personal data protection rules.

Data controller

Kreanet, based in Medellín, Colombia. Contact email for personal data matters: the one shown on this website’s contact page.

Data we process

• Sales contact: name, email, club or company and the message you send us.
• ONCE 11 customers: club details and administrators’ data (name, email, phone) needed to provide and bill the service.
• Data clubs enter in ONCE 11: players, coaching staff, guardians and families. For this data each club is the controller and Kreanet acts as processor: we only process it to provide the service and following the club’s instructions.

Purposes

• Answering requests for information, demos and quotes.
• Providing, maintaining, improving and supporting ONCE 11 and contracted developments.
• Billing and managing service payments.
• Sending service-related notices (security, changes, new releases).

We do not sell or rent personal data.

Data of children and adolescents

ONCE 11 is used by academies and clubs with underage players. Their data is processed respecting their best interests and fundamental rights, limited to what the club’s sporting and administrative activity requires, and with the authorization of their legal representative, which the club obtains and keeps.

Data subjects’ rights

As a data subject you may access, update and correct your data; request proof of your authorization; be informed about how it is used; revoke your authorization or request deletion when there is no legal or contractual duty to keep it; and file complaints with Colombia’s Superintendence of Industry and Commerce.

How to exercise them

Write to the contact email with your name, ID document and request. We answer inquiries within ten (10) business days and claims within fifteen (15) business days, as required by law. If your data is on a club’s platform, you may also contact that club directly.

Security

We apply reasonable technical and administrative measures: each club has its own database, access is by user and permissions, passwords are stored encrypted and communications travel encrypted.

Providers

We may rely on infrastructure, email and payment providers acting as processors, under agreements that protect your data.

Validity

This policy applies from its publication. If it changes substantially, we will announce it on this website.