What does this policy cover?
This policy describes how The Football Association Limited (“The FA”) will make use of your data when collected and processed on The England Football Community website.
The England Football Community is a web-based system, provided by The FA that is used by fans, players, coaches, referees, Wildcats and volunteers for a number of community-related functions. It is particularly used for accessing guides, blogs, webinars, videos, podcasts and forums to engage with other members.
If you are registering a third party into The England Football Community, you must make sure they are aware of this, and direct them to view this privacy policy.
What information does The England Football Community collect?
We may collect, use, and store different kinds of personal data about you when you interest with The England Football Community. This may include when you register to join a community group, when you use or upload learning resources, or when you engage with content on our forums. This will typically be provided directly by you and may include information you provide on registration.
Depending on your role and relationship with us, the personal data we may collect may include:
|
Category of Data |
Type of Data |
|
Identity Data |
such as your first and last name, data of birth and gender. |
|
Contact Data |
such as your email address, home address and telephone number(s). |
|
Profile Data |
such as your FAN number, username and password, biography, previous roles in the football industry. |
|
Activity Data |
such as comments and communications you have made and posts you have liked or interacted with. |
|
Football Data |
such as current and previous coaching roles, roles as an observer, developer, mentor or mental health champion, Wildcats ID and role, clubs and County FAs you are associated with. |
|
Image Data |
such as photographs and videos you upload. |
|
Technical Data |
such as your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and information about how you use our website, products and services. |
We will also collect personal information about website usage through cookies in accordance with our Cookie Policy.
What information is provided by third parties in The England Football Community?
Sometimes, we receive information about you from third parties. For example, where you are a player, your club or team may submit information about you in relation to your involvement in a particular programme or initiative.
We may also obtain information about you from third party service providers, such as analytics platforms that measure advertising, viewership and engagement, which we may use to help us better understand our users and send them appropriate information.
How do we use YOUR PERSONAL DATA?
We will only use your personal data to the extent which is permitted by law. The table below shows some examples of how might use your personal data, and how we have a lawful basis for those uses:
|
Use |
Lawful Bases |
|
To enable us to provide you the Community service we offer |
Necessary for our legitimate interest (to run our business and this website) |
|
To communicate with you to administer the correct membership for groups, including informing you of a change in registration and responding to any questions you send to The England Football Community’s administrators |
Necessary for our legitimate interest (to run our business and this website) |
|
To enable you to partake in a prize draw, competition or complete a survey |
Performance of a contract with you Necessary for our legitimate interest (to study how you use our service, to develop our service and grow the Community) |
|
To process feedback and improve our services |
Legitimate interest (to develop and improve our services) |
|
To monitor, improve and protect our content and service, investigate complaints form you or others |
Necessary for our legitimate interest (to run our business and this website) |
|
To investigate any wrongdoing, carry out our disciplinary role in enforcing The FA’s rules and regulations |
Necessary for our legitimate interest (to carry out our role as a governing body, protect individuals from harm) |
|
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) |
Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) Necessary to comply with a legal obligation |
|
To manage and improve the web system and troubleshoot problems
|
Legitimate interest (to protect and improve the running of The FA, our IT services and network security) |
|
To send you marketing about goods and services you may be interested in |
Consent |
|
To respond to requests by government or law enforcement authorities conducting an investigation |
Legal obligation |
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent, you will always be able to withdraw that consent.
You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or by contacting us using the details set out below.
What cookies and/or tracking technologies does The FA use?
When you visit The England Football Community, we may also collect, process and use information about you and your use of the website, including any forums you visit and how you arrived at our site. Such information may be collected through "traffic data" and may entail the use of "cookies" or other tracking technologies, IP addresses or other numeric codes used to identify your computer. For more information on Cookies please click on the link to our Cookies Policy.
How DO we share your information?
Where you are registered as a member, some of your registration information will be made available to the wider FA Group so that we can make you aware of or ask for your opinion on community-related initiatives.
Personal data may be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws.
Personal data will also be shared with third party service providers, who will process it on behalf of the controllers for the purposes identified above. Some of our suppliers may be separate data controllers and may provide you with their own privacy notice where appropriate.
WHAT ABOUT INTERNATIONAL DATA TRANSFERS?
We may use third party providers to deliver our services, such as externally hosted software or cloud providers, and those providers may involve transfers of personal data outside of the UK. Whenever we do this, to ensure that your personal data is treated by those third parties securely and in a way that is consistent with UK data protection law, we require such third parties to agree to put in place safeguards. This may include specific contracts approved for use in the UK which give personal data the same protection it has in the UK or other equivalent measures as required.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.
HOW LONG DO WE RETAIN YOUR DATA FOR?
Where we process data in connection with your use of The England Football Community, we do this for as long as you are an active user of our sites and for 5 seasons after this.
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
Where we process personal data to meet legal requirements, we hold this for as long as the law requires.
Where your data is held on The England Football Community, then at the end of the retention periods set out above, we will not irrevocably delete your information for another 3 months – your data will be held in an inactive form for this time to ensure that any consequential links across our systems remain intact in the event that your data is removed in a particular location.
WHAT RIGHTS DO YOU HAVE IN RELATION TO YOUR PERSONAL DATA?
Under certain circumstances, you may have the following rights in relation to your personal data:
|
Right |
What does this mean? |
|
1 |
A right to access personal data held by us about you (commonly known as a "data subject access request"). |
|
2 |
A right to require us to rectify any inaccurate personal data held by us about you, though we may need to verify the accuracy of the new data you provide to us. |
|
3 |
A right to require us to erase personal data held by us about you where there is no good reason for us continuing to process it. This right will only apply where, for example, we no longer need to use the personal data to achieve the purpose we collected it for; or where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with Right 6 below). Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request |
|
4 |
A right to restrict our processing of personal data held by us about you. This right will only apply where, for example, you dispute the accuracy of the personal data held by us; or where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but we require the data for the purposes of dealing with legal claims or due to having overriding legitimate grounds to use it. |
|
5 |
A right to receive personal data, which you have provided to us, in a structured, commonly used and machine readable format. You also have the right to require us to transfer this personal data to another organisation. |
|
6 |
A right to object to our processing of personal data held by us about you where we are relying on a legitimate interest (or those of a third party), and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. |
|
7 |
A right to withdraw your consent, where we are relying on it to use your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent. |
|
8 |
A right to ask us not to use information about you in a way that allows computers to make decisions about you and ask us to stop. |
HOW CAN YOU CONTACT US?
If you have any questions about this policy or any other data protection queries you can contact The FA’s Data Protection Team using dataprotection@thefa.com or by writing to Data Protection Officer, Wembley Stadium, PO Box 1966, London, SW1P 9EQ.
If you wish to make a data privacy request, you can do so via our online form, which can be found here.
You also have the right to lodge a formal complaint with the UK Information Commissioner's Office. Full details may be accessed on the complaints section of the ICO's website. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.