1. PURPOSE AND SCOPE OF NOTICE As the body with overall responsibility for managing rugby union in Connacht, we at Connacht Rugby ("CONNACHT RUGBY", “Connacht Branch of the IRFU”, "we", "our" and "us") will often have reason to process information ("Personal Data") of those who interact with us directly and others who are involved in the game at various levels ("you" or "your"). We respect and value your privacy. That is why we have set out in this Data Protection Notice (this "Notice") how and why Personal Data relating to you will be collected and processed by Connacht Rugby and/or on our behalf by our third-party service providers. Please review the sections of this Notice which are relevant to you based on your interactions with Connacht Rugby:
For the purposes of this notice, the controller of your Personal Data is Connacht Rugby, Dexcom Stadium, College Road, Galway.
1.1 PROCESSING YOUR PERSONAL DATA WHEN YOU ARE INVOLVED WITH CONNACHT RUGBY (e.g. registered club player, volunteer, coach, committee member, club or school)
There are many ways in which you can become involved with Connacht Rugby. This could be when you play, volunteer or coach with a rugby club; when you attend one of our events or seminars; or when you or your organisation enquire about how you can contribute to or collaborate with Connacht Rugby.
We may collect and process the following Personal Data about you, which we may obtain either directly from you or from the third parties listed in section 1.1.6:
Individual Details | This may include general Personal Data about who you are, such as your name, address, contact details, gender, date of birth and occupation. |
Hospitality Information | This may include any dietary preferences or requirements you have, or any mobility assistance you may require. |
Query Information | You may choose to give us information such as your name, address, e-mail address, telephone number and other details when you contact us or a body with which we are affiliated. Top of Form |
Club Registration Information | Individuals who play rugby with a recognised club must be registered with Connacht Rugby and the IRFU. Many rugby clubs use the RugbyConnect system for purposes of club administration and to register and manage players. RugbyConnect accounts may also be created for coaches and volunteers. Personal Data processed through RugbyConnect can include your name, address, gender, date of birth, nationality, your image, your next of kin and your contact details |
Device Information | When logging-on to any of the Wi-Fi services we offer at our offices, stadiums or events, we may collect information about your device such as the IP address, hardware model, operating system and version, software and file names and versions, preferred language, unique device identifier, advertising identifiers, serial number, device motion information and mobile network information. |
We may collect and process the following special category of Personal Data about you which we may obtain either directly from you or from the third parties listed in section 1.1.6:
Health | This may include any information relating to any injuries you receive while playing rugby at any level, general fitness information, information on any pre-existing medical conditions you may have, information obtained in the course of conducting our anti-doping measures and information on any disability or mobility requirements you may have. |
We may also collect and process the following Personal Data relating to criminal convictions and offences, which we may obtain either directly from you or from the third parties listed in section 1.1.6:
Criminal | This may include information relating to any criminal convictions you may have or cases pending against you which you are obliged to legally disclose to us in the course of completing the Garda Vetting process if you are assuming any role of responsibility with Connacht Rugby or an affiliated organisation (such as a rugby club) in relation to persons aged under 18. It may also include information obtained in the course of conducting our anti-doping measures or obtained as result of any disciplinary matter to which you are a party. |
We shall only ever process this special category Personal Data or data relating to criminal convictions on the basis of your (or where you are under 18, your parent's) explicit consent or where such processing is necessary for the establishment, exercise or defence of legal claims or on the basis of reasons of substantial public interest in accordance with applicable law.
The following table details the legal bases under which ("Legal Basis") and the reasons why ("Purposes") we collect, obtain and process your Personal Data:
Legal Basis | Purpose(s) |
Legitimate Interests
It is in our legitimate interests to collect and process your Personal Data for a range of operational, business and organisational purposes. When we process your Personal Data based on our legitimate interests, we make sure to consider and balance any potential impact on you and your data protection rights. We will not process your Personal Data for activities where our interests are overridden by the impact on you. |
Administration of Rugby Union in Connacht
|
Compliance with a Legal Obligation
We may process your Personal Data where it is necessary to comply with legal obligations to which we are subject. |
|
To Defend, Establish or be a Party to Legal Claims
We may process your Personal Data as necessary in order for us to establish, investigate, exercise or defend a legal claim to which you are a party. |
|
We will disclose your personal data to other members of our group which means our subsidiaries, as well as to rugby clubs and other bodies affiliated with Connacht Rugby (the "CONNACHT RUGBY Group"). We will only disclose your personal information to third parties outside Connacht Rugby Group in the following circumstances:
Recipient(s) | Purpose(s) |
Connacht Rugby subcontractors, service providers and third-party partners |
|
Regulatory Authorities, Law Enforcement Agencies, Public Bodies and Third-Party Companies |
|
Teams, competition organisers and international rugby organisations |
|
In accordance with our policy on data retention we shall keep your Personal Data which we process on the basis of your involvement with Connacht Rugby for a period of time after your engagement with Connacht Rugby which depends on why you have interacted with us. Please contact privacy@connachtrugby.ie for further information about our retention periods. Please note that in certain circumstances, we may hold your Personal Data for a longer period, for example, if we are processing an ongoing claim or believe in good faith that the law or a relevant regulator may reasonably in our view expect or require us to preserve your Personal Data. Where you have registered as a rugby player, we may also retain some of your Personal Data within our player registration database unless you request us to delete such information.
We may obtain Personal Data about you from the following third parties:
Social Media Information | We may receive information about you from social media platforms, such as Facebook, Twitter, LinkedIn and Instagram, when you interact with us via such platforms. This includes information which you provide to us or otherwise make available via such platforms. |
Rugby Clubs, including schools | If you play, volunteer or are otherwise involved with a rugby club we may be provided with your Personal Data in our role as the body managing rugby union in Connacht. |
Event Organisers | We will often engage the services of third parties to assist us in running and operating events. When you attend or express an interest in such an event we will often be provided with your Personal Data. |
Businesses and Organisation | If you work for or are otherwise involved in a business or other organisation (such as a charity, school or voluntary group) that seeks to collaborate with, contribute to or otherwise become involved with Connacht Rugby or one of our affiliated bodies then we may be provided with your Personal Data. |
1.2 PROCESSING YOUR PERSONAL DATA FOR PURCHASE, SUBSCRIPTION AND MARKETING PURPOSES
We may process your Personal Data in connection with purchase, subscription and marketing purposes whenever you purchase match tickets, merchandise or other products from Connacht Rugby or our authorised sellers; when you subscribe to Connacht Rugby Newsletter; when you sign up to Connacht Rugby online supporters club; or when you enter a competition with Connacht Rugby or one of our affiliated bodies.
We may collect and process the following Personal Data about you, which we may obtain either directly from you or from the third parties listed in section 1.2.6:
Individual Details |
|
Customer Account Information |
|
Purchase Information |
|
Supporters Club Information |
|
Subscription Information |
|
Patrons Club or Season Ticket Holder Information |
|
Device Information |
|
The following table details the legal bases under which ("Legal Basis") and the reasons why ("Purposes") we collect, obtain and process your Personal Data:
Legal Basis | Purpose(s) |
Contract
It is necessary to process this Personal Data to enter into and perform our contract(s) with you. This could be a contract for tickets or products that you purchase from us, for access to our Website, for setting up a customer account or for becoming a member according to the applicable terms, etc. If you do not wish to provide us with your Personal Data for these purposes, we will not be able to enter into or perform our contract(s) with you. |
Fulfilling your Orders and Requests
|
Legitimate Interests
It is in our legitimate interests to collect and process your Personal Data for a range of operational, business and organisational purposes. When we process your Personal Data based on our legitimate interests, we make sure to consider and balance any potential impact on you and your data protection rights. We will not process your Personal Data for activities where our interests are overridden by the impact on you. |
Marketing
|
Compliance with a Legal Obligation
We may process your Personal Data where it is necessary to comply with legal obligations to which we are subject. |
|
To Defend, Establish or be a Party to Legal Claims
We may process your Personal Data as necessary in order for us to establish, investigate, exercise or defend a legal claim to which you are a party. |
|
We will disclose your Personal Data to other members of the Connacht Rugby ecosystem such as the IRFU, other provincial branches, clubs and rugby organisations based outside of Ireland. We will only disclose your personal information to third parties outside the above organisations in the following circumstances:
Recipient(s) | Purpose(s) |
Connacht Rugby subcontractors, service providers, ticketing providers and third-party partners
1.1 |
|
Regulatory Authorities, Law Enforcement Agencies, Public Bodies and Third-Party Companies |
|
In accordance with our policy on data retention we shall keep your Personal Data which we process on the basis of your involvement with Connacht Rugby for a period of time after your engagement with Connacht Rugby which depends on why you have interacted with us. Please contact privacy@connachtrugby.ie for further information about our retention periods. Please note that in certain circumstances, we may hold your Personal Data for a longer period, for example, if we are processing an ongoing claim or believe in good faith that the law or a relevant regulator may reasonably in our view expect or require us to preserve your Personal Data.
We may obtain Personal Data about you from the following third parties:
Social Media Information | We may receive information about you from social media platforms, such as Facebook, Twitter, LinkedIn and Instagram, when you interact with us via such platforms. This includes information which you provide to us or otherwise make available via such platforms. |
Marketing Information | We may receive information about you from other third parties where we offer co-branded services or engage in joint-marketing activities. |
Ticket Sellers | When you buy match tickets from one of our authorised sellers we may be provided with your Personal Data. |
Event Organisers | We will often engage the services of third parties to assist us in running and operating events. When you attend or express an interest in such an event we will often be provided with your Personal Data. |
Licensees of our Brand | We may receive your Personal Data from licensees of our brand such as retail outlets, sponsors and vendors where you opt-in to receive information from us. |
Stadia and Match Venues | We may receive your Personal Data from stadiums and match venues when you attend matches. |
1.3 PROCESSING YOUR PERSONAL DATA WHEN YOU USE OUR WEBSITE
For information about how we collect your Personal Data when you visit our Website, please see our Cookie Policy.
We may collect and process the following Personal Data about you when you use our Website:
Technical Information |
|
Customer Account Information |
|
Payment Information |
|
Online Supporters Club Information |
|
Subscription Information |
|
The following table details the legal bases under which ("Legal Basis") and the reasons why ("Purposes") we collect, obtain and process your Personal Data:
Legal Basis | Purpose(s) |
Contract
It is necessary to process this Personal Data to enter into and perform our contract(s) with you. This could be a contract for tickets or products that you purchase from us, for access to our Website, for setting up a customer account or for becoming a member according to the applicable terms, etc. If you do not wish to provide us with your Personal Data for these purposes, we will not be able to enter into or perform our contract(s) with you. |
Fulfilling your Orders and Requests
|
Legitimate Interests
It is in our legitimate interests to collect and process your Personal Data for a range of operational, business and organisational purposes. When we process your Personal Data based on our legitimate interests, we make sure to consider and balance any potential impact on you and your data protection rights. We will not process your Personal Data for activities where our interests are overridden by the impact on you. |
Improving Website Functionality & Efficiency
|
We will disclose your Personal Data to other members of the Connacht Rugby ecosystem such as the IRFU, other provincial branches, clubs and rugby organisations based outside of Ireland. We will only disclose your personal information to third parties outside the above organisations in the following circumstances:
Recipient(s) | Purpose(s) |
Connacht Rugby subcontractors, service providers and third-party partners |
|
Regulatory Authorities, Law Enforcement Agencies, Public Bodies and Third-Party Companies |
|
For information about how long we retain Personal Data collected when you visit our Website for, please see our Cookie Policy. In accordance with our policy on data retention we shall keep your Personal Data which we process on the basis of your involvement with Connacht Rugby for a period of time after your engagement with Connacht Rugby which depends on why you have interacted with us. Please contact privacy@connachtrugby.ie for further information about our retention periods. Please note that in certain circumstances, we may hold your data for a longer period, for example, if we are processing an ongoing claim or believe in good faith that the law or a relevant regulator may reasonably in our view expect or require us to preserve your data. 2. IF YOU ARE UNDER 16 OR A PARENT/LEGAL GUARDIAN If you are under the age of 16, you should always speak to your parent or legal guardian before you send us an email or information, ask us to send you any information, subscribe to our Newsletter, join the Connacht Rugby Online Supporters Club, purchase anything from us or provide us Personal Data in any other way. We will need the consent of your parent or legal guardian before we can allow you to access the Connacht Rugby Official Supporters Club content on our Website. If you are a parent or legal guardian of a child whose Personal Data we are processing, then you may at any time request that we stop processing the Personal Data of your child in so far as we are able, or exercise the rights listed below at section 4 over your child's Personal Data by emailing us at privacy@connachtrugby.ie. Please note that before we disclose or otherwise process a child's Personal Data on the basis of such a request we may first request that you provide reasonable information about yourself and your child for identification purposes.
3. STORING OF AND TRANSFERS OF YOUR PERSONAL DATA Your Personal Data may be stored and transferred inside or outside the European Economic Area ("EEA"). We only transfer your Personal Data outside the EEA where the EU Commission has decided that the third country in question ensures an adequate level of protection in line with EU data protection standards or if there are appropriate safeguards in place to protect your Personal Data. Where we transfer Personal Data to a third country, we may do so on the basis of Standard Contractual Clauses which are a form of data processing contract approved by the European Commission. You can find a copy of these clauses here. If you would like to find out more about the appropriate safeguards that we have in place to govern the transfer of your Personal Data you can contact us at privacy@connachtrugby.ie. Unfortunately, the transmission of information via the internet is not completely secure. Although we will always do our best to protect your Personal Data, we cannot guarantee the security of any information you transmit to us; any transmission is at your own risk. Once we have received your information, we will endeavour to use strict procedures and security features to try to prevent unauthorised access.
4. YOUR RIGHTS AND HOW TO EXERCISE THEM This section sets out the rights which you have to address any concerns or queries with us about our processing of your Personal Data. Note that in certain circumstances, these rights may not be absolute:
Right | Further Information |
Right of Access |
|
Right to Rectification |
|
Right to Erasure |
|
Right to Restriction of Processing |
|
Right to Data Portability |
|
Right to Object |
|
You can exercise any of these rights by submitting a request to our Data Protection Executive whose contact details are set out in section 5 of this Notice. We will provide you with information on any action taken upon your request in relation to any of these rights without undue delay and at the latest within one month of receiving your request. We may extend this timeframe by one more month if necessary having regard to the circumstances of the request. However, we will inform you if this arises.
5. QUESTIONS AND COMPLAINTS If you have any concerns about the way your Personal Data are being used or processed by Connacht Rugby, please contact us at privacy@connachtrugby.ie. If you have any concern in relation to how your Personal Data is used or processed, you have the right to lodge a complaint with your national data protection regulator. For further information and to find your national data protection regulator, please see here.
6. CHANGES TO THIS NOTICE If we amend this notice, in whole or part, at our sole discretion, any changes will be effective immediately upon communicating the revised notice to you. If at any time we decide to use your Personal Data in a manner significantly different from that stated in this notice, or otherwise disclosed to you at the time it was collected, we will notify you and you will have a choice as to whether or not we use your information in the new manner.