Norwich City Football Club (“Club”) is fully committed to adherence to the General Data Protection Regulations (“GDPR”) following implementation on 25 May 2018.
The Policy describes the types of personal data you provide and we collect via your use of the official Club website, ticketing, online retail store and official mobile application, together with all services accessed through them (“Online Facilities”), what we may do with that personal data and your rights.
The Club is the Data Controller of personal data collected by, or which you provide through, the Online Facilities, for the purpose of the Data Protection Act 1998 and GDPR.
Information We Collect from You
We will collect and process the following data about you:
Information you give us - This is information about you that you give us by filling in forms on any of our sites www.canaries.co.uk, tickets.canaries.co.uk, shop.canaries.co.uk & deliascanarycatering.co.uk (our sites) or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register to use our site, subscribe to our service, search for a product, place an order on our site, participate in discussion boards or other social media functions on our site, enter a competition, promotion or survey, and when you report a problem with our site. The information you give us may include your name, address, e-mail address and phone number, financial and credit card information, personal description and photograph
Information we collect about you. With regard to each of your visits to our site we will automatically collect the following information:
Information we receive from other sources. This is information we receive about you if you use any of the other websites we operate or the other services we provide. [In this case we will have informed you when we collected that data if we intend to share the data internally and combine it with data collected on this site. We will also have told you for what purpose we will share and combine your data. We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies). We will notify you when we receive information about you from them and the purposes for which we intend to use that information.
How we use your personal data
We use information held about you in the following ways:
Information you give to us. We will use this information:
Information we collect about you. We will use this information:
Information we receive from other sources. We will combine this information with information you give to us and information we collect about you. We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).Use of services accessed through the Online Facilities may require you to provide specific types of information.
WHERE WE STORE YOUR PERSONAL DATA
In most cases, the information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Sharing your Information
We do not sell, rent, or otherwise provide personally identifiable information to third-parties without your consent.
In addition, there are some other reasons why we may disclose your personal information to third parties and these are as follows:
From time to time we, and/or commercial partners (if you have agreed to receive their information when you provided your personal information) may contact you to tell you more about the offers, services, products and other initiatives available to you.
Under the GDPR, you have the following rights in relation your data
The right of access – If you wish to receive a copy of some or all of the information we hold on you, please write to or e-mail the Data Protection Officer:
Address Data Protection Officer, Norwich City Football Club, Carrow Road, Norwich, NR1 1JE
The right to rectification - If, at any time after registering, you would like to update your data, you can do this via your personal profile page, which is accessible from all of our emails.
The right to erasure - You (and any parent/guardian of a minor) have the right to request that we close your account and/or delete your personal information from our database. We will make all reasonable efforts to comply with this request. However, it may not be possible to delete an entry without some delay and without retaining some residual personal information necessary for our legitimate interests, such as backups and records of deletions (including to ensure we no-longer communicate with you) or because we are required or permitted to retain personal information for other lawful requirements.
The right to restrict processing – In certain circumstances, you have the right to request that we limit the way we use your data. This is an alternative to requesting the erasure of your data.
The right to data portability – This is not really relevant to the data the Club holds for you as the main purpose is to enable consumers to take advantage of applications and services which can use their personal data to help find a better deal (e.g. through price comparison websites), or gain a better understanding of your spending habits (e.g. through banking apps).
The right to object – At any time, you have the right to change your preference and opt-in or opt-out from receiving communications from us or third-parties. You can do this at any time by changing your preferences your personal profile page
Rights in relation to automated decision making and profiling – Under GDPR, you have the right not to be subject to a decision when that is based on automated processing which t produces a legal effect or a similarly significant effect on you without your consent. We can confirm that do not use your data to make automated decisions that could have this effect on you.
Retaining your personal data
We will keep the personal data you have provided for as long as we have a relationship with you. Once that relationship has ended we will only keep enough information needed to deal with any queries (e.g. to enable us to deal with any future complaints or queries you may have about any products or services you had from us in the past).
If you have any queries about this privacy notice, please contact the Data Protection Officer (contact details as above)
If you are dissatisfied with our response to any of your data privacy concerns you have the right to raise this with the Office of the Information Commissioner at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (https://ico.org.uk).
We may need to change the terms of this Policy from time to time and changes will be posted on this page (and/or where appropriate, otherwise notified to you). This Policy was last updated on 21 May 2018.