Protecting Your Personal Information (Data Protection)
This privacy notice explains how we use any personal information we collect about you. We are owned and operated as a professional sports club, so the information we hold is used almost solely to allow us to: meet our regulatory or legal obligations; communicate more effectively with our own supporters; and process orders for products or services on behalf of our supporters and commercial contacts.
What information do we collect about you?
We collect information about you when you purchase a season ticket, match ticket, an item from our shop or attend a hospitality event organised by our club. This information will normally only relate to your personal details, such as your name, postal address, email address, phone number and your date of birth. It may also include special categories of personal data such as data about food allergies, if this is necessary for the provision of our services. We may also collect information when you voluntarily complete customer or supporter surveys or provide feedback to us, and video data may collected from the CCTV system that we have in place at the football stadium.
Why do we need to collect and use your personal data?
The primary legal basis that governs our processing of your data are for compliance with regulatory obligations to which we are subject, in terms of the SFA and SPFL Rules. However, we will also obtain your consent to the processing of your data for one or more specific purposes, such as marketing. Data may also be used on the legal basis that is fair to use the personal data either in our interests or someone else’s interests, where there is no disadvantage to you – this can include where it is in our interests to contact you about products or services, ask you to complete a survey or collaborate with others to improve our services. The information that we collect about you may be essential for us to be able to carry out effectively the services that you require from us, for example in the performance of a contract where you have ordered a product or service from us. Where special category data is required we will obtain your explicit consent in order to collect and process this information.
How will we use the information about you?
As a supporter and a commercial partner, we collect information about you in order to provide you with the services for which you engage us, provide appropriate follow up after you have been provided with the product or service and to keep you informed about developments at our club.
Who might we share your information with?
In order to deliver our services to you effectively we may send your details to third parties such as technology providers that we use to arrange services for you. We may need to store your personal information with other organisations to provide you with the product or service you have chosen. If you have a debit, credit or charge card with us, we will share transaction details with companies which help us to provide this service (such as Visa and Mastercard). If you use direct debits, we will share your data with the Direct Debit scheme.
Where third parties are involved in processing your data we will have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidentiality in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be transferred to a third party we will use appropriate security measures to protect your personal data in transit.
How long do we keep hold of your information?
We will keep your personal information for as long as you are a customer of Greenock Morton Football Club. After you stop being a customer, we may keep your data for up to five years to: respond to any questions or complaints; or maintain records according to SPFL or SFA rules that apply to us. We may keep your data for longer than five years if we cannot delete it for legal, regulatory or technical reasons. If we do, we will make sure that your privacy is protected and only use it for those purposes. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above.
How can I access the information you hold about me?
You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal data, please email or write to us using the contact details noted below. When your personal data is processed by automated means you have the right to ask us to transfer your personal data to another organisation for their use.
We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect.
We have in place physical, electronic and procedural safeguards appropriate to the sensitivity of the information we maintain to keep personal information protected from unauthorised access. Among such safeguards are the encryption of communications via SSL, encryption of information while it is in storage, firewalls, access controls, separation of duties and similar security protocols. However, due to the nature of the Internet and related technology, we cannot guarantee the security of personal information and GMFC expressly disclaims any such obligation.
In terms of contacting our supporters for marketing purposes, there may be occasions where we would like to send you information about our products and services that we think may genuinely be of interest to you. If you have agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please email or write to us using the contact details noted below
Greenock Morton Football Club sites may include links to other websites whose privacy policies we do not control. Once you leave our servers (you can tell where you are by checking the URL in the location bar on your web browser), use of any personal information you provide is governed by the privacy note of the operator of the website you are visiting.
What can you do if you are unhappy with how your personal data is processed?
You also have a right to lodge a complaint with the supervisory authority for data protection. In the UK this is: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113 (local rate).
How to contact us