PRIVACY POLICY

1. Introduction

Burnley FC in the Community (BFCitC) takes your privacy very seriously and is committed to maintaining your privacy in accordance with the General Data Protection Regulation (GDPR), The Data Protection Act 2018.

Burnley FC in the Community (“BFCitC”, “we”, “our”, “us”) is committed to keeping your personal information safe and meeting our responsibilities under privacy law. Given that your personal information can be used to identify you, we want you to be confident that we are using it responsibly.

This Privacy Policy gives you detailed information on why and when we collect your personal information when you participate in our activities, how we use your personal information, how we keep it secure, and how you can let us know if you would like us to change how we manage it.

The Privacy Policy of Burnley FC in the Community explains:

1. Our commitment to data protection and the use of your information in providing you with the services and information you require.
2. How we will treat the personal information that you provide to us, either when using our website or in other circumstances when we collect data from you (including collection of data by email).
3. How we will use the information we collect about you and the choices you can make about the way your information is collected and used.

2. How we obtain your personal data and the information you provide

Personal data is defined to be: ‘any information relating to an identified or identifiable natural person’.

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

By submitting information and/or continuing to use the website, you signify your consent to us using your personal data in accordance with this Privacy Policy.

At times we may request that you voluntarily supply us with personal information. Generally, this information is requested when you register to use our website, purchase tickets, email enquiries, contributions or your views to Burnley FC in the Community and enter any promotions or competitions.

Please note that if you choose to participate in any discussion forum on the website, any disclosure of your own personal information to other participants is done so at your own risk.

We may collect personal information about you including, as relevant:

• Identification information, such as your name;
• Your gender and date of birth;
• Contact information, such as your email address and telephone number;
• Educational details, such as the school you attend.
• Employment details.
• Details about community organisations in which you participate.

Sensitive personal information

Under data protection legislation, certain personal information is considered more ‘sensitive’ (e.g., information relating to race, religion, political affiliation, and health). This is also known as ‘special category data’.

We collect special category personal data about you including, as relevant:

• Details about your ethnicity.
• Health data, including details about disabilities.
• Details about your religious beliefs.
• Details about your sexuality (if you are aged 16 or over).

Criminal convictions and offences data

We may also collect your personal data relating to criminal convictions and offences.

We collect and retain personal information about you that you have given us in different ways, for example where you:

• Subscribe to our mailing lists.
• Attend or support our Activities.
• Contact us via email, phone, in person or by post.
•  

We also collect and retain personal information about you from third parties including, as relevant:

• From your parent or guardian.
• From your school or a community organisation in which you participate.
• From your employer.
• Where you have told a third party you are happy to share your data.

3. How we use Your Personal Data

We may use your personal information for the following purposes:

• If you choose to register to use our website or subscribe to updates on the website, we will use this information to administer your user account with us and so that we can tailor and improve the services we offer to you.
• If you choose to give us personal information via the internet (for example, in the course of purchasing tickets or merchandising from us), it will be clear how we will use such information. If you tell us that you do not wish to have this information used as a basis for further contact with you, we will respect your wishes.
• Where you have consented to us sending you information, we may also use your data for marketing purposes. This may be information that we think may be of interest to you or information about other organisations’ goods and services that we think may be of interest to you.
• Where you have consented to us passing your data to our official partners, sponsors and/or selected third parties to enable them to send you information, we may pass your data to such partners, sponsors and third parties to enable them to send you such information.
• If you apply for a job, we will use your information for the purposes of recruitment and selection, corresponding with you and equal opportunities monitoring and may hold your information for up to six months in case other suitable opportunities arise.
• Burnley FC in the Community may disclose personal data in order to comply with a legal or regulatory obligation.
• We do not store credit card details, nor do we share customer details with any third parties, unless where consent has been asked for or stipulated in this policy.
• Other ways we may use your personal data in accordance with GDPR.

• Enabling you to make use of our services.
• Learning from your experience and feedback to develop our work.
• Undertaking diversity monitoring to ensure equality of opportunity for all participants.
• Safeguarding children and young people.
• Keeping our database accurate, relevant and up to date.
• Communicating with your school or community organisation about your progress during our Activities.

4. How we share your personal data

We may share your personal information with third parties, including the following:

• with the PLCF to help them identify suitable participants for their own sporting activities.
• with contractors, suppliers, or other third parties that provide services on our behalf (such as website host providers).
• as part of a sale, merger or acquisition, or other transfer of all or part of our assets including as part of a bankruptcy proceeding.
• pursuant to a court order, or other legal process or as otherwise required or requested by law, regulation, or government authority programs, or to protect our rights or the rights or safety of third parties.
• with our professional advisors, lawyers, accountants, and auditors; or
• with your consent or as otherwise disclosed at the time of data collection or sharing.

Burnley FC in the Community will not, however, sell or lease your personal information to third parties not associated with Burnley FC in the Community, its partners, sponsors and affiliates. If you do not wish to receive marketing and promotional communications from us or our partners, sponsors and affiliates you can choose to opt out when providing your personal information to Burnley FC in the Community.

Additionally, the website contains links to websites that are not operated by Burnley FC in the Community. These third parties may collect data from you and share some of that data with us. Burnley FC in the Community is careful when choosing their partners, sponsors, and affiliates, but we are not responsible for any misuse of personal information by such third parties. We recommend that you view the Privacy Policy posted on each website that you use to confirm that the policies of these third parties are acceptable to you.

5. How we protect your information

We understand that the security of your personal information is important to you. When handling personal information security is paramount and we take appropriate measure to ensure that the information disclosed to us is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used. However, the nature of the internet is such that the data may in some circumstances flow over networks without full security measures and could be accessible to unauthorised people.

Burnley FC in the Community will take all reasonable steps to ensure that unauthorised staff and other individuals are prevented from gaining access to your personal data. Burnley FC in the Community will:

• Ensure visitors are received and supervised at all times in areas where personal data is stored.
• Ensure computer systems containing personal data are password protected.
• Ensure that staff know that passwords must be treated as private to the individual and must not be disclosed to others.
• Ensure that only those who need to use the data have access.
• Instruct staff to not leave their workstation/PC signed on when they are not using it.
• Instruct staff to lock away disks, tapes or printouts when not in use.
• Instruct staff to exercise caution in what is sent via email and to whom it is sent, and to only transmit personal data by email where agreed compatible security arrangements are in place with partners.
• Provide the means to securely dispose of information (electronic and on paper).

• Ensure that paper files are stored in secure locations and only accessed by those who need to use them.
• Instruct staff not to disclose personal data to anyone other than the data subject unless they have the data subject’s consent, or it is a registered disclosure, required by law, or permitted by a General Data Protection Regulation (GDPR), The Data Protection Act 2018

• Instruct staff not to leave confidential information on public display in any form.
• Impose a clear desk policy at the end of each day and ask staff to lock sensitive material away safely.

6. Retaining your personal information and our lawful bases

Retaining your personal information

We will not keep personal information for longer than necessary, and the appropriate retention period will vary according to the intended purpose for which we collected the personal information.

The criteria we use to determine the retention period of personal information are: 

• the respective statutory retention period.
• our contractual and/or business relationships with you.
• (potential) disputes.
• any guidelines issued by relevant regulators.

After expiration of that period, the relevant information is routinely deleted, as long as it is no longer necessary for the fulfillment of a contract, the initiation of a contract or to protect or defend our position or that of a third party. If you have any questions about our retention periods, please contact us at Community@burnleyfc.com

Our lawful bases

We will only use personal information when the law allows us to (i.e. where we have a ‘lawful basis’).

Where we have previously collected your personal information based on your consent or explicit consent, we will continue to rely on this lawful basis.  We will also ask for your consent where we are required to do so by law (for example where we are using cookies on our website).  Where we have not previously collected your personal information based on consent or where we are not required to do so by law, we may rely on other lawful bases to collect your personal information.  However, those lawful bases will only be met, and your personal information will only be able to be processed where the processing is legitimate and proportionate, taking into account your fundamental rights. 

7. Cookies

Our website uses cookies. A cookie is a small file containing an identity code. With your consent, your computer or device accepts the cookie and stores it. When you next visit the website, the code is retrieved, allowing an individual visitor or computer to be recognised. Full information on which cookies we deploy is available in our Cookies Policy.

We are not responsible, nor liable for the content, privacy policies or services offered by websites other than our website, including that which link from our website. We encourage you to read and familiarise yourself with the privacy policies, terms, and conditions and/or other notices on other third parties’ websites you visit.

8. Disclosure for law enforcement purposes

Burnley FC in the Community reserves the right to access and disclose personal information to comply with applicable laws and lawful government requests to operate its systems properly or to protect itself or others. Burnley FC in the Community may attempt to obtain the prior consent of the individual before disclosing the personal information, but it has no obligation to do so.

It may be necessary for us to transfer your information to countries outside the European Union which do not provide the same level of protection as the UK. If we for any reason need to do so we will make sure that the information is transferred in accordance with this privacy statement, the General Data Protection Regulation (GDPR), The Data Protection Act 2018 and other applicable data protection laws so that your personal data is kept secure.

9. Children and young people

10. Access to your information

11. Your rights

12. Changes to this privacy policy

13. Contact us