Privacy and Data Protection Policy
Dunfermline Athletic Football Club (“DAFC”)
Protecting Your Personal Information (Data Protection)This privacy notice explains how we use any personal information we collect about you. We are a community Football Club, owned entirely by its own supporters, so the information we hold is used almost solely to allow us to: meet our regulatory or legal obligations. communicate more effectively with our own supporters. and process orders for products or services on behalf of our supporters.
What information do we collect about you?We collect information about you when you purchase a season ticket, match ticket, an item from our shop or attend a hospitality event organised by our club. This information will normally only relate to your personal details, such as your name, postal address, email address, phone number and your date of birth. It may also include special categories of personal data such as data about food allergies, if this is necessary for the provision of our services. We may also collect information when you voluntarily complete customer or supporter surveys or provide feedback to us.
Why do we need to collect and use your personal data?The primary legal basis that governs our processing of your data is for compliance with regulatory obligations to which we are subject, in terms of the SFA and SPFL Rules. However, we will also obtain your consent to the processing of your data for one or more specific purposes. The information that we collect about you is essential for us to be able to carry out effectively the services that you require from us. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations in respect of the SFA and the SPFL. Where special category data is required we will obtain your explicit consent in order to collect and process this information.
How will we use the information about you?As a supporter, we collect information about you in order to provide you with the services for which you engage us, provide appropriate follow up after you have been provided with the product or service and to keep you informed about developments at our supporter-owned club.
Who might we share your information with?In order to deliver our services to you effectively we may send your details to third parties such as technology providers that we use to arrange services for you. We may need to store your personal information with other organisations to provide you with the product or service you have chosen. If you have a debit, credit or charge card with us, we will share transaction details with companies which help us to provide this service (such as Visa and Mastercard). If you use direct debits, we will share your data with the Direct Debit scheme.
Where third parties are involved in processing your data we will have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidentiality in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be transferred to a third party we will use appropriate security measures to protect your personal data in transit.
How long do we keep hold of your information?We will keep your personal information for as long as you are a customer of DAFC. After you stop being a customer, we may keep your data for up to 5 years to: respond to any questions or complaints. or maintain records according to SPFL or SFA rules that apply to us. We may keep your data for longer than 5 years if we cannot delete it for legal, regulatory or technical reasons. If we do, we will make sure that your privacy is protected and only use it for those purposes.
You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above.
How can I access the information you hold about me?You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal data, please email or write to us using the contact details noted below. When your personal data is processed by automated means you have the right to ask us to transfer your personal data to another organisation for their use.
We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect.
SafeguardsWe have in place physical, electronic and procedural safeguards appropriate to the sensitivity of the information we maintain to keep personal information protected from unauthorised access. Among such safeguards are the encryption of communications via SSL, encryption of information while it is in storage, firewalls, access controls, separation of duties and similar security protocols. However, due to the nature of the Internet and related technology, we cannot guarantee the security of personal information and DAFC expressly disclaims any such obligation.
In terms of contacting our supporters for marketing purposes, there may be occasions where we would like to send you information about our products and services that we think may genuinely be of interest to you. If you have agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please email or write to us using the contact details noted below
Other websitesDAFC sites may include links to other websites whose privacy policies we do not control. Once you leave our servers (you can tell where you are by checking the URL in the location bar on your web browser), use of any personal information you provide is governed by the privacy note of the operator of the website you are visiting.
What can you do if you are unhappy with how your personal data is processed?You also have a right to lodge a complaint with the supervisory authority for data protection. In the UK this is: Information Commissioner`s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113 (local rate).