1. Introduction

The General Data Protection Regulation (GDPR) requires Ebbsfleet United Football Club to make public its approach to ensuring the privacy of individuals’ data. For the purpose of this Privacy Statement, the term “Club” is used to cover Ebbsfleet United Football Club (EUFC) only.

2. Consent

The General Data Protection Regulation (GDPR) allows the use of Legitimate Interest Assessment (LIA) as a means of obtaining the consent of individuals whose data is held, in cases where the individual might reasonably expect such data to be held and where there is minimal impact on the individual’s privacy. The Club will use LIA as a means of consent wherever appropriate and will seek opt-in consent where the above conditions do not apply.

3. The Individual’s Rights Under GDPR

The Club, in complying with the principles of GDPR, will ensure that:

1. data, in respect of an individual, is held only when there is a lawful basis for doing so. A lawful basis will include, but may not be limited to:
   1. a legal obligation
   2. a contract
   3. the protection of an individual’s vital interest
2. every individual whose data is held by the Club is entitled to request, and the Club will provide, within one month of the request, a copy of the data held for that individual, with a clear explanation of the lawful basis for it being held. The Club will promptly rectify such data, if requested. Such requests should be made by email to [email protected] or in writing to the Club.
3. every individual has the right to request that his data be erased. The Club may refuse to erase data where there is a legal reason for it being held and, in other circumstances, will advise of any disadvantage that might accrue to the individual by the erasure, before acting on the request.
4. it will advise of the right to object should data be used for Direct Marketing and shall immediately cease the processing of data for such purposes.
5. it will not use automated decision making or profiling in the processing of data.
6. data is held on a secure drive with access limited to specific data owners in order to ensure appropriate security.
7. it keeps its Privacy Statement under regular review and updates its websites accordingly

4. Data Retention

The Club confirms that it will retain ticket related data for historical, statistical purposes only for as long as it considers such data to be of use. All other data will be retained for a maximum of seven years

5. Match Photography

Please note that we may also record footage of individuals attending Club home or away matches as part of any image and/or audio-visual recording created by the Club of spectators attending any such match. We may use any such images and recordings for our commercial activities where such use is in our legitimate interests (so long as our interests are not overridden by the impact on you). Such activities may include Club promotional activities and displaying such images on the Official EUFC website and other official platforms in relation to any competition or promotion operated by the Club.

6. Cookies

EUFC sites use cookies for our legitimate interests in ensuring that you receive the best possible visitor experience. A cookie is a small file containing an identity code. With your consent, your computer accepts the cookie and stores it. When you next visit either Site, the code is retrieved, allowing an individual visitor or computer to be recognised. Further information on which cookies we deploy on each site is available in our Cookie Policy.