WELSH FIRE PRIVACY POLICY

WHEN DOES THIS PRIVACY POLICY APPLY?

This privacy policy explains how Welsh Fire uses personal data that you provide or which Welsh Fire collects and holds about you when you use its official websites and/or other services.

Welsh Fire is the Data Controller for personal data collected and used in connection with our operations. We have entered into a Data Processing Agreement (DPA) with Glamorgan Cricket Club (GCCC), under which Glamorgan Cricket acts as a Data Processor and processes personal data on our behalf.

Welsh Fire is a professional cricket team competing in the Hundred Tournament.

For the purposes of data protection law:

• Welsh Fire is the Data Controller — responsible for determining the purposes and means of processing personal data.
• Glamorgan Cricket acts as a Data Processor — processing personal data on behalf of Welsh Fire in accordance with our written instructions and the Data Processing Agreement between the two organisations.

Welsh Fire’s websites and services include:

• The Official Welsh Fire Website at XXX
• The official Welsh Fire ticket office
• The official Welsh Fire social media pages on Facebook, Twitter, Instagram, Snapchat and YouTube (together the “Welsh Fire Official Websites”)

WHAT TYPES OF PERSONAL DATA DO WE HOLD?

Information we hold about you may include any one or more of the following types of data:

Account information: When you register to use, purchase or engage with any of Welsh Fire’s goods and/or services, the minimum information we will usually ask you to provide is your name, email address, date of birth, gender, home address, telephone number and mobile number. We may also ask you for additional information depending on the nature of our interaction with you.

Transactional information: When you purchase tickets (including where tickets are purchased through Welsh Fire’s official third party ticketing provider from time-to-time), merchandise and other products from Welsh Fire’s Official Websites or any other official offline sales channels, we will keep a record of your transaction, including what you purchased and when, and any information you provide to us to fulfil the transaction. This may include your name, billing information, telephone number, and delivery address. We will not keep payment card information, except for the last four digits of your payment card number which we keep in case there are any payment disputes or we need to issue a refund. We will ensure that, when handling any information about you relating to a transaction, we comply with the applicable regulations of the Payment Card Industry.

Information you provide to us in response to a survey: We may occasionally contact you to ask for your feedback on Welsh Fire products, goods and/or services so that we can make them better and more relevant.

Information you provide to us in response to a job advertisement: We regularly advertise open positions on the Join the Team page of our website, which you may apply for by sending your CV to the email address provided.

Information you post online: We may hold and use information and/or user-generated content which you post on Welsh Fire Official Websites, including information about your IP address, location and click history.

Information from other companies: We may use GCCC database information or publicly available postal address lists and the edited electoral roll to ensure that the information we hold about you is accurate, or we may use this information, together with general market research information (for example, demographic information), to add to and enhance our fan database.

Online usage information: If you use Welsh Fire Official Websites we may collect your browser type, the full Uniform Resource Locators (URL), through and from our site (including date and time), products you viewed or searched for, page response times, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page. Online usage information may be linked to a unique identifier, but we do not link online usage information to named individuals. In order to collect online usage information, we use cookies and other similar technologies.

Information you provide to us in order to take part in an activity or an event: In order to take part in an activity operated by Welsh Fire, you may need to provide data such as your name, date of birth, address, ethnicity, sex and relevant medical information, as required in the circumstances. We will also collect data on attendance and performance. In addition, we may collect your data if you attend an event organised by Welsh Fire or GCCC, including matches or events held at Sophia Gardens or other venues.

In most cases, you are not obliged to provide any personal data to us, but in some cases, we may not be able to provide goods or services to you unless you provide certain minimum information.

Information you provide us when you report an incident at Sophia Gardens: Welsh Fire and/or GCCC will collect the telephone number used to report the incident and any other personal information you provide. Your data will never be used for marketing purposes.

Special Categories of Personal Data: Welsh Fire may, from time to time, collect special categories of personal data revealing racial or ethnic origin, religious or philosophical beliefs, health data, or sexual orientation. You may opt out at any time by contacting the Information Officer.

THE PURPOSES FOR WHICH WE USE YOUR INFORMATION

• To allow us to enter into and/or perform our contract with you
• To enable us to comply with legal obligations
• To pursue legitimate interests
• With your consent

YOUR RIGHTS

• Ask us not to process your personal data for marketing
• Request access to your personal data
• Request correction or deletion
• Restrict or object to processing
• Data portability
• Automated decision transparency
• Lodge a complaint with a supervisory authority

HOW DO WE KEEP YOUR INFORMATION SECURE?

Welsh Fire uses appropriate physical, electronic and managerial procedures to safeguard personal data.

HOW LONG DO WE KEEP YOUR INFORMATION?

Welsh Fire retains personal data only for as long as necessary for legal, contractual and operational purposes.

PARENTAL CONSENT / SUPERVISION

Children under 13 should not submit personal data without parental consent. Parents should supervise online activity.

HOW YOU CAN CONTACT US?

Welsh Fire
Sophia Gardens, Cardiff, CF11 9XR
For the attention of the Information Officer

COMPLAINTS

You may contact the Information Commissioner’s Office (ICO) at www.ico.gov.uk if you believe your rights have not been respected.