Friday 25th May 2018
DUMBARTON Football Club is committed to maintaining the trust and confidence of supporters, players, staff, contractors, partners and visitors to our website and social media.
We want you to know what data we hold and why, how we use it, the limited conditions we might disclose it to others, how we keep it secure and how we will always make sure that you are in control of your personal information.
This PRIVACY AND DATA PROTECTION POLICY is a key part of our compliance pathway in relation to the General Data Protection Regulation (GDPR), which comes into force on 25th May 2018. We will also be relaying this information in our mailings, on social media and in our matchday programme.
Website and social media data
Our website and social media is maintained for Dumbarton FC by the Sons Supporters Society (Sonstrust) under delegated powers accountable to the Club Board. The Sonstrust is adopting a parallel and integrated privacy and data protection policy to the Club.
Like others, our website uses ‘cookies’. These are small text files which are stored on your computer. They are designed to hold a modest amount of data specific to a particular client and website, and can be accessed either by the web server or the client computer. This allows the server to deliver a page tailored to a particular user, or the page itself can contain some script which is aware of the data in the cookie and so is able to carry information from one visit to the website (or related site) to the next. Cookies can only be used to store information that the user has volunteered or that the web server already has. We do not allow third parties discreet access to personal data through our website, and our social media accounts (on Twitter and Facebook) only hold information that you choose to release in using them. We do not ‘farm’ such data, nor do we allow third parties discreet access to these sites.
When someone visits one of our sites we may use a third party service, Google Analytics, to collect standard Internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone personally. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
When reporters, staff, volunteers or others access WiFi at our Stadium, they only do so with specifically granted password permission. We do not collect or monitor data on a users’ device, the volume of data used, the websites and applications accessed, or personal usage by access time, frequency and location.
As part of the registration process for season tickets, we collect a limited amount of personal information. We use that information to tell you about service-related issues (such as tickets prices, events or special offers); to contact you if we need to obtain or provide additional information; to send reminders where appropriate; to check our records are correct; to check periodically that you are satisfied; or to assist in emergency circumstances. We do not rent or trade email lists with other organisations and businesses. Details held for mailing purposes are on an ‘opt in’ basis and are held only for the legitimate interests of business as Dumbarton FC in accordance with the General Data Protection Regulation (GDPR).
We use a third-party provider, MailChimp, to deliver newsletters. We may gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s own privacy notices. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing our Data Protection Officer at the Club.
Tickets and Merchandise
When you purchase a ticket (or tickets), merchandise or season tickets through our office or online your name, address data, email and contact number will only be stored in our computer system with your consent. You may purchase a ticket (or tickets) in person without supplying personal data. Please be assured that we do not share any personal details with any other company without your explicit agreement.
Employee, Contractor and Shareholder Information
Employee and contractor information is held confidentially, in robust and secure systems, or with payroll providers whose security and data policies are professionally scrutinisable. Such information is disclosed only as required by law and statute to the recognised authorities. Shareholder information is held in accordance with the Companies Act (2006) and this data, privacy and security policy. Security of all data is of paramount importance to us.
We may share anonymised personal information with other organisations who can use this to analyse our supporter development programmes, ticket sales and self-generated funding. If we do this we will update this policy to indicate how, why and under what further restrictions.
Access to Information
If you need to view, amend, or delete any personal information that we hold about you, please email your request to firstname.lastname@example.org, marked for the attention of the Data Protection Officer.
Changes to this Privacy Notice and our Data Protection Policy
We welcome comments, questions, feedback or suggestions on our Data Protection and Privacy policies. This Privacy Notice will be updated regularly as necessary and reviewed annually by the Board of Dumbarton Football Club. We will also use it to review other relevant Club policies.
Dumbarton FC will continue to take all reasonable steps to comply with GDPR and all other applicable legislation in this area. We do this not simply as a matter of legal requirement but to demonstrate our willing commitment to all involved with the club and the local and football community it serves.
DFC: May 2018