This policy applies with respect to the personal data of photographers, journalists, technicians and other individuals that have been or are being used for the purposes of applying for and/or receiving (i) professional accreditation to attend Premier League or English Football League (EFL) matches (“Accreditation”), or (ii) authorisation for access to specific Premier League or English Football League (EFL) stadia to fulfil a particular function (“Authorisation for Access”) and also to users of www.football-dataco.com (the “DataCo Website”).

Data Controller

For the purpose of the General Data Protection Regulation and the Data Protection Act 2018 (the “DP Laws”), the controller of your personal data is Football DataCo Limited of 30 Gloucester Place, London, W1U 8PL.

We are committed to protecting and respecting your privacy and this policy sets out the basis on which we will deal with any such personal data as is referred to above.

Information we may process

Accreditation or Authorisation for Access

If you are a photographer, journalist, technician or other individual whose personal data have been or are being used for the purposes of applying for and/or receiving: (i) professional accreditation to attend Premier League or EFL matches (“Accreditation”); or (ii) authorisation for access to specific Premier League or EFL stadia to fulfil a particular function (“Authorisation for Access”) we may receive and process the following data about you:

  • Name;
  • Your job/role;
  • Employer or, for freelancers, entities that engage you;
  • Employer’s address;
  • Email address;
  • Employer’s phone number;
  • Photograph;
  • UK Press, AIPS UK and/or Premier League/EFL Photo ID card holder reference number;
  • Other related details such as requests to attend matches; attendance records; communications with clubs; photographer bib numbers etc; and/or
  • Any other personal information which is reasonably required in order for us or a third party to comply with any applicable law, request from law enforcement or court order, where we believe that we may receive and use that data in compliance with the DP Laws

If you are using the DataCo Website for any other reason the only information we may receive and/or process about you is anything you provide to us by email, social media, telephone, letter or other form of communication.

Users of the DataCo website

If you are using the DataCo Website for any other reason the only information we may receive and/or process about you is anything you provide to us by email, social media, telephone, letter or other form of communication.

Uses made of the information

We use information held about you in the following ways:

Accreditation or Authorisation for Access

  • To enable you to be considered for, and potentially to receive, Accreditation or Authorisation for Access;
  • To provide you with information or updates regarding Accreditation, Authorisations for Access, applications for the same or the internet press booking system operated by DataCo to facilitate those processes (“i-PBS”);
  • To administer the Accreditation and Authorisation for Access processes and i-PBS itself, as well as for any related disciplinary purposes;
  • For internal operations, including troubleshooting, data analysis, testing, research and statistical purposes; and
  • To assist third parties with security and crime detection and prevention efforts.

The legal conditions we rely upon to process your personal data are: (i) that (subject to our discretion) granting you Accreditation or Authorisation for Access is required in order to give effect to your contract of employment or engagement, and our scrutiny of your personal data is reasonably necessary in that context; and (ii) that we have a legitimate interest in safeguarding the integrity of, and access to, the intellectual property associated with professional football, and that verifying your identity is reasonably necessary in order for us to run a secure Accreditation or Authorisation for Access process associated with that purpose, without any undue impact on your rights or freedoms.

Users of the DataCo Website

If you are using the DataCo Website for any other reason, the legal condition we rely upon to process your personal data (i.e. the information you provide to us in raising any query) is our legitimate interest in responding to and assisting you with any queries you raise with us.

Disclosure of your information

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We may share your information with third parties, namely:

  • The clubs and stadia owners responsible for considering and approving or disapproving applications for Authorisation for Access;
  • The Football Association Premier League Limited, The Football League Limited and other footballing bodies;
  • Our third party database system supplier, Oppsport Software Limited; and
  • The police and other law enforcement, security or similar bodies or agencies, both within and outside the UK, provided we receive evidence we deem sufficient to justify such disclosure.

We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or the terms and conditions of any agreement we enter into.

Where we store your personal data

While it is unlikely, it is possible that the data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of the entities referred to in the previous section (Disclosure of Your Information). We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Where personal data is transferred outside of the EEA, we will ensure there is a mechanism in place to protect your data to an adequate standard (for example, through the use of a data transfer agreement or certification schemes such as the EU – US Privacy Shield), or that a relevant exemption exists. You have a right to access the safeguards we rely upon to transfer your personal data outside of the EEA.

Marketing

We will not process your personal data for marketing purposes, although we, the clubs or leagues referred to above may for example share press releases that we or they deem relevant to the general media situation.

YOUR RIGHTS

Under the DP Laws, you have rights (subject to certain conditions and exemptions) to obtain certain information about and access your personal data, amend, restrict, erase or transport your Personal Data, or object to the processing of your personal data. You also have a right to lodge a complaint with your local supervisory authority (for example, the Information Commissioner’s Office). In each case, we reserve the right to ask the person making the request for proof of their identity, or their authorisation to act on your behalf. We reserve the right to refuse, or to charge a reasonable fee for, any request which we consider to be manifestly unfounded, or excessive.

Contact

If you have any questions on this policy, please contact us at privacy@football-dataco.com.