Privacy Policy
1. Introduction
As one of our customers or someone else with whom we do business, you understand and agree that we collect, use and disclose your personal information in accordance with this Privacy Policy (this “Policy”).
We use your personal information in order to fulfil our commitment to providing sport products to you and with added services to improve our products and services which you experience in connection with all of your interactions with Sheffield Wednesday (the “Purpose”). As part of that undertaking, we are committed to safeguarding the privacy of the personal information that we gather.
2. APPLICATION OF THIS POLICY
This Policy applies to personal information regarding fans and other individuals with whom we do business or who buy tickets, products, or services from us and to the use of that personal information in any form – whether oral, electronic or written.
This Policy gives our commitment to protect your personal information and has been adopted by all of the separate and distinct legal entities that manage, operate, franchise, license, own and/or provide services to Sheffield Wednesday Football Club Limited. Those entities include the separate and distinct legal entities which provide services to you under the Sheffield Wednesday brand. References to “Sheffield Wednesday Football Club Limited.”, “we” and “our” throughout this Policy, depending upon the context, collectively refer to those separate and distinct legal entities.
While this Policy is intended to describe the broadest range of our personal information processing activities globally, those processing activities may be more limited in some jurisdictions based on the restrictions of their laws. For example, the laws of a particular country may limit the types of personal information we can collect or the manner in which we process that personal information. In those instances, we adjust our internal policies and/or practices to reflect the requirements of local law.
3. DEFINITIONS
Personal Data
Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
Usage Data
Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Cookies
Cookies are small pieces of data stored on a user’s device.
Data Controller
Data Controller means a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed.
For the purpose of this Privacy Policy, we are a Data Controller of your data.
Data Processor (or Service Providers)
Data Processor (or Service Provider) means any person (other than an employee of the Data Controller) who processes the data on behalf of the Data Controller.
We may use the services of various Service Providers in order to process your data more effectively.
Data Subject
Data Subject is any living individual who is the subject of Personal Data.
User
The User is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.
4. TYPES OF PERSONAL INFORMATION WE COLLECT
The term “personal information” in this Policy refers to information that does or is capable of identifying you as an individual. The types of personal information that we process (which may vary by jurisdiction based on applicable law) include:
• your name, gender, personal and work contact details, date and place of birth, image/photos, nationality;
• your credit card details, and your account details such as customer reference number or customer ID and credentials;
• information, feedback or content you provide regarding your marketing preferences, in surveys, sweepstakes, contests, or promotional offers, or to our websites or apps and those of third parties; or;
• information collected whilst you access a PML app or website (we describe this in more detail in Sections 8 and 9 below).
Much of the personal information we process is information that you or someone acting on your behalf knowingly provides to us. However, in other instances, we process personal information that we are able to infer about you based on other information you provide to us or during our interactions with you, or personal information about you that we receive from a third party. This Policy also applies to the personal information about you that we receive from a third party, unless specifically covered by such third party’s privacy policy.
There may be instances in which the personal information that you provide to us or that we collect is considered Sensitive Personal Information under the privacy laws of some countries. Those laws define “Sensitive Personal Information” to mean personal information from which we can determine or infer an individual’s racial or ethnic origin, political opinions, religious beliefs or other beliefs of a similar nature, membership in a trade union or professional association, physical or mental health or condition, medical treatment, genetic data, sexual life or judicial data (including information concerning the commission or alleged commission of a criminal offence). In some very rare instances, financial records may form part of Sensitive Personal Information where you are located. We only process Sensitive Personal Information in your jurisdiction if and to the extent permitted or required by applicable law.
When you agree to this Policy you are, to the extent required under your local law, granting your express and written consent to the processing of any personal information that you provide to Sheffield Wednesday Football Club Limited that is considered to be Sensitive Personal Information or financial information. Save to the extent required by law, you are not obliged to provide Sheffield Wednesday with any of your Sensitive Personal Information, and should you chose not to, this will not prevent you from purchasing any products or services from Sheffield Wednesday Football Club Limited.
5. HOW WE USE PERSONAL INFORMATION
Subject to applicable laws, we may collect, use and disclose relevant portions of your personal information in order to:
• provide and charge for products and related services;
• provide you with a better or more personalised level of product, service, and/or experience including information and services from a third party (such as other products, or offers related to your preference for a given product);
• respond to requests for information and services, including services from a third party (such as companies who make and transport products, provide services, and research product buyers);
• administer the Sheffield Wednesday newsletter and updates product;
• fulfil contractual obligations to you, anyone involved in the process of making your access to products the best possible;
• conduct market research, customer satisfaction and quality assurance surveys, and direct marketing and sales promotions;
• provide for the safety and security of staff, or other buyers;
• administer general record keeping;
• meet legal and regulatory requirements; or;
• test and evaluate new products and services;
Sheffield Wednesday Football Club Limited. uses and retains your personal information for as long as is necessary to fulfil the Purpose. There is a retention schedule in place and you can request to see this.
6. DISCLOSURES OF YOUR PERSONAL INFORMATION
From time to time, we may disclose your personal information. We would always make that disclosure in agreement with applicable law. In some jurisdictions, data privacy laws may require us to obtain your consent before we transfer your information from your originating country to other countries. When you agree to this Policy, you are, to the extent required and permitted under your local law, granting your consent to the transfer of your personal information to such other countries for the Purpose and to the extent stated in this section and as described in Section 4 above.
Circumstances where we might make such disclosure (in addition to those described in Section 5 above) include:
Our Agents, Service Providers and Suppliers
Like most clubs, we may outsource the processing of certain functions and/or information to third parties. We may also engage market research firms to assist us in contacting fans for the purpose of market research and quality assurance. When we do outsource the processing of your personal information to third parties or provide your personal information to third-party service providers, we oblige those third parties to protect your personal information in accordance with the terms and conditions of this Policy, with appropriate security measures.
Consumer Insights
Where we hold personal information about you, we may disclose this personal information to other companies that also hold information about you. These companies may combine the information in order to better understand your preferences and interests, thereby enabling them and us to serve you better. If your personal information is used for direct marketing purposes, you have the right to object to that by contacting us using the contact information provided under Section 12 below.
Business Transfers
As we continue to develop our business, we may sell Sheffield Wednesday assets, or cease being the manager or franchisor of product that is currently part of our portfolio. In those circumstances, we may include the personal information collected about you, or control of that personal information, as a business asset in any such transfer. Also, in the unlikely event that we, or substantially all of our assets, are acquired, personal information collected about you, or control of such information, may be one of the transferred assets.
Legal Requirements
We reserve the right to disclose any personal information we have concerning you if we are compelled to do so by a court of law or lawfully requested to do so by a governmental entity or if we determine it is necessary or desirable to comply with the law or to protect or defend our rights or property in accordance with applicable laws. We also reserve the right to retain personal information collected and to process such personal information to comply with accounting and tax rules and regulations and any specific record retention laws.
7. CENTRALISED DATA PROCESSING ACTIVITIES
Like most international businesses, we have centralised certain aspects of our data processing activities in accordance with applicable laws, which, in many instances, will result in the transfer of your personal information from one country to another. For example, if you purchase a product while located outside of the UK, the personal information gathered in that process might be transferred to and processed to a company outside of the UK so as to deliver the product to you, in accordance with Sheffield Wednesday Football Club Limited’s binding corporate rules (where they apply to you). The jurisdictions where that information will be processed may or may not have laws that seek to preserve the privacy of personal information. Nevertheless, whenever your personal information is transferred within Sheffield Wednesday Football Club Limited and subcontracted companies, your personal information will be processed in accordance with the terms and conditions of this Policy and applicable laws.
8. INFORMATION WE COLLECT WHEN YOU VISIT US ONLINE
If you access any Sheffield Wednesday Football Club Limited. website, you may wish to know the following:
• You can browse without revealing who you are.
• You can always visit our websites without logging in or otherwise revealing who you are.
Usage Information
When you visit our websites, we collect information about how you use those websites. Examples of such information include the Internet Protocol address automatically assigned to your computer each time you browse the Internet, the date and time of your visit, the pages you access and the amount of time you spend on each page, the type of Internet browser you use, your device’s operating system and the URL of any websites that you visited before and after visiting our website. That information is not linked to you as an individual unless you create a user profile, but we may keep records of the device being used.
Tracking and Cookies Data
We use cookie technology on our websites to allow us to evaluate and improve the functionality of our websites. Cookies by themselves cannot be used to reveal your identity. They identify your browser, but not you, to our servers when you visit our websites.
Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Service.
If you do not want to accept cookies, you can block them by adjusting the settings on your Internet browser. However, if you block them, you will not be able to use all of the features of our websites, including the customisation features associated with creating a user profile.
Further information about cookies and other similar technology and how they work is available at allaboutcookies.org.
Examples of Cookies we use:
• Session Cookies. We use Session Cookies to operate our Service.
• Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
• Security Cookies. We use Security Cookies for security purposes.
Social Media
Our websites may also contain plug-ins and other features that integrate third party social media platforms into our websites. You will be able to activate them manually. If you do so, the third parties who operate these platforms may be able to identify you, they may be able to determine how you use this website and they may link and store this information with your social media profile. Please consult the data protection policies of these social media platforms to understand what they will be doing with your personal data. If you activate these plug-ins and other features, you will be doing so at your own risk.
Creating a User Profile
You can create a user profile on Sheffield Wednesday Football Club Limited website to, amongst other things, facilitate your online transactions and to tailor your experience on our websites to your interests. This allows us to make more appropriate recommendations to you. We may use the information you provide in your user profile to populate other databases maintained by us and our service providers, as applicable. By creating a user profile, you are agreeing that we may use the personal information you provide for these purposes.
You can view, update or remove any personal information that you have provided to us for inclusion in your user profile by amending your user profile online or emailing privacy@swfc.co.uk. If you subsequently elect to remove your user profile, we reserve the right to use any personal information previously provided by you for inclusion in your user profile for record keeping and quality assurance purposes (unless we are required by law to delete or cease to process or use your personal information). Even if you choose not to create a user profile, you can still use our websites to search for and purchase services.
Security
Because the security of your personal information is important to us, we use Secured Socket Layer (“SSL”) software in order to encrypt the personal information that you provide to us. If your browser is SSL enabled (which most are), your transmission of personal information to us online will be encrypted. You can verify whether your personal information is transmitted using SSL encryption by confirming the symbol of a closed lock or solid key on the bottom bar of your browser window. You can also verify that your personal information will be encrypted using SSL encryption by making sure that the prefix for the web address listed for that page has changed from “http” to “https”. If you do not see the appropriate symbol and the “https” prefix, you should not assume that the personal information that you are being asked to provide will be encrypted prior to transmission.
The personal information we collect from you online is stored by us and/or our service providers on databases protected through a combination of physical and electronic access controls, firewall technology and other reasonable security measures. Nevertheless, such security measures cannot prevent all loss, misuse or alteration of personal information and we are not responsible for any damages or liabilities relating to any such incidents to the fullest extent permitted by law. Where required under law, we will notify you of any such loss, misuse or alteration of personal information that may affect you so that you can take the appropriate actions for the due protection of your rights.
Minor Children
Our websites do not sell products or services for purchase by children and we do not knowingly solicit or collect personal information from children. If you are under the age of 18 (or a minor in the jurisdiction in which you are accessing our websites), you may only use our websites with the involvement of a parent or guardian.
Targeted Advertising
This may include advertisements displayed on our own websites or apps, or advertisements from us displayed on other companies' websites. The advertisements you see may be based on information collected by us or third parties and/or may be based on your activities on our websites or third-party websites.
Google Analytics
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.
You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.
For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/
Behavioral Remarketing
Sheffield Wednesday Community Programme uses remarketing services to advertise on third party websites to you after you visited our Service. We and our third-party vendors use cookies to inform, optimise and serve ads based on your past visits to our Service.
Google AdWords
Google AdWords remarketing service is provided by Google Inc.
You can opt-out of Google Analytics for Display Advertising and customise the Google Display Network ads by visiting the Google Ads Settings page: http://www.google.com/settings/ads
Google also recommends installing the Google Analytics Opt-out Browser Add-on – https://tools.google.com/dlpage/gaoptout – for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.
For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/
Twitter remarketing service is provided by Twitter Inc.
You can opt-out from Twitter’s interest-based ads by following their instructions: https://support.twitter.com/articles/20170405
You can learn more about the privacy practices and policies of Twitter by visiting their Privacy Policy page: https://twitter.com/privacy
Facebook remarketing service is provided by Facebook Inc.
You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/164968693837950
To opt-out from Facebook’s interest-based ads follow these instructions from Facebook: https://www.facebook.com/help/568137493302217
Facebook adheres to the Self-Regulatory Principles for Online Behavioural Advertising established by the Digital Advertising Alliance. You can also opt-out from Facebook and other participating companies through the Digital Advertising Alliance in the USA http://www.aboutads.info/choices/, the Digital Advertising Alliance of Canada in Canada http://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe http://www.youronlinechoices.eu/, or opt-out using your mobile device settings.
For more information on the privacy practices of Facebook, please visit Facebook’s Data Policy: https://www.facebook.com/privacy/explanation
9. APPS
When you download or register to use one of our apps or digital products, you may submit personal information to us such as your name, address, email address, phone number, date of birth, username, password and other registration information, financial and credit card information, personal description and/or image.
Further, when you use our apps, we may collect certain information automatically, including technical information related to your mobile device, your device’s unique identifier, your mobile network information, the type of mobile browser you use and information about the way you use the app.
Depending on the particular app you use and only after you have agreed to such collection, we may also collect information stored on your device, including contact information, friends lists, login information (where necessary to allow us to communicate with other apps at your request), photos, videos, location information or other digital content. Further details of the kinds of information we collect is set out in the privacy notice for each individual app.
10. CHOICE
You may always choose what personal information (if any) you wish to provide to us. However, if you choose not to provide certain details, some of your experiences with us may be affected (for example, we cannot deliver a product without an address).
If you provide us with your contact details (e.g. postal address, email address, telephone number or fax number), we may contact you to let you know about the products, services, promotions and events offered that we think you may be interested in. We may also share your personal information with carefully-selected third parties, who may communicate directly with you. In some jurisdictions, data privacy laws may require us to obtain a separate consent before we do so. You can always choose whether or not to receive any or all of these communications by contacting us as described in Section 12 below or following the “unsubscribe” instructions contained in the communications.
If you have an account with Sheffield Wednesday Football Club Limited, we ask you to indicate your communication preferences at the time you apply for membership or when you create your user profile. We may also ask you to indicate how you would like to receive any offers, marketing and promotional information (e.g. via email or regular mail) and whether you would be willing to participate in surveys. Once you have indicated your preferences, you can always change them.
In some jurisdictions, in addition to you agreeing to this Policy, data privacy laws may require us to obtain a separate consent before we send you information that you have not specifically requested. In certain circumstances, your consent may be implied (e.g. where communications are required in order to fulfil your requests and/or where you have volunteered information for use by us). In other cases, we may seek your consent expressly in accordance with applicable laws (e.g. where the information collected is regarded to be Sensitive Personal Information under local regulations).
We will abide by any request from you not to send you direct marketing materials. When such a request is received, your contact details will be “suppressed” rather than deleted. This will ensure that your request is recorded and retained unless you provide a later consent that overrides it.
11. UPDATING OR ACCESSING YOUR PERSONAL INFORMATION
With some limited exceptions, you have rights to access and update personal information held about you. If you want to inquire about any personal information we may have about you, you can do so by sending us a written request by letter or email to the addresses set out in Section
12 below. Please be sure to include your full name, address, and/or email address and phone number so we can ascertain your identity and whether we have any personal information regarding you, or in case we need to contact you to obtain any additional information we may require to make that determination.
You may request that we correct, cancel, and/or stop processing or using personal information that we hold about you. If we agree that the personal information is incorrect, or that the processing should be stopped, we will delete or correct the personal information. If we do not agree that the personal information is incorrect we will tell you that we do not agree, explain our refusal to you and record the fact that you consider that personal information to be incorrect in the relevant file(s).
12. CHANGES TO THIS POLICY
Just as our business changes constantly, this Policy may also change. To assist you, this Policy has an effective date set out at the end of this document. Any substantial changes to this policy will be communicated via email.
13. REQUEST FOR ACCESS TO PERSONAL INFORMATION / QUESTIONS OR COMPLAINTS
According to applicable law, you have a right of access to a copy of the information comprised in your personal data; a right to object to processing that is likely to cause or is causing damage or distress; a right to prevent processing for direct marketing; a right to object to decisions being taken by automated means; a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed; and a right to claim compensation for damages caused by a breach of the Data Protection Act.
If you have any questions about this Policy, about the processing of your data described, or any concerns or complaints with regard to the administration of the Policy, or if you would like to submit a request (in the manner described in Section 10 above) for access to or deletion of the personal information that we maintain about you, please contact us by any of the following means:
• by calling one of the following toll-free reservation numbers located at the Customer Service page on swfc.co.uk
• by mail at Sheffield Wednesday Football Club Limited, Hillsborough Stadium, Sheffield, S6 1SW
• by contacting the front desk at Sheffield Wednesday Football Club Limited on 03700 20 1867 (Option 7)
If you are not satisfied with the response that you receive, you can escalate your concern to the Data Protection Officer by sending an email to privacy@swfc.co.uk.
Please note that if requests are found to be unfounded or excessive, we reserve the right to charge a fee, if permitted under applicable law, or refuse to respond. Where we refuse to respond to a request, we will explain why to you, informing you of your right to complain to the supervisory authority and to a judicial remedy without undue delay and at the latest within one month.
The purpose of the fee is to cover administrative costs. Where you make more than one request in quick succession, we may respond to your subsequent request by referring to our earlier response and only identifying any items that have changed materially.
You may request that we correct, cancel, and/or stop processing or using personal information that we hold about you. If we agree that the personal information is incorrect, or that the processing should be stopped, we will delete or correct the personal information. If we do not agree that the personal information is incorrect we will tell you that we do not agree, explain our refusal to you and record the fact that you consider that personal information to be incorrect in the relevant file(s).
All requests for access to your personal information must be submitted in writing by letter to Data Protection Officer, Sheffield Wednesday Football Club, Hillsborough Stadium, Sheffield, S6 1SW or email privacy@swfc.co.uk. We may respond to your request by letter, email, telephone or any other suitable method.
If you wish to access your personal data (make a Subject Access Request), please CLICK HERE and complete the attached form. This form will be used by the Data Protection Officer at Sheffield Wednesday Football Club to consider your request. In order for any request to be processed, a copy of your identification will need to be provided. In the event you are acting on behalf of someone else, you will need to provide a copy of their ID and a letter of consent giving you permission to act on their behalf.
Effective Date: May 1, 2018
In the event of any inconsistencies between the English version of this Policy and any version of this Policy in any other language, the English version shall prevail (to the fullest extent permitted under applicable law).