1 Introduction

This policy describes the way in which The Rangers Football Club aims to repay the trust shown by our valued customers and supporters who have shared their personal data with The Club.

2 About Us

The Rangers Football Club (“The Club”) is a sports entertainment company incorporated in Scotland with Company Number SC425159. The registered office is Ibrox Stadium, 150 Edmiston Drive, Glasgow, G51 2XD.
The Rangers Football Club is a part of a group of undertakings comprising Rangers Media Ltd, Garrion Security Services Ltd and Rangers Retail Ltd. The Rangers Football Club is the controller of all personal data processed by these undertakings.

3 Data Protection Officer

The Club’s Data Protection Officer (DPO) can be contacted with the following details:

The Data Protection Officer
The Rangers Football Club
150 Edmiston Drive
Glasgow
G51 2XD
Email: [email protected]
Tel: + 44 141 580 8500

4 About This Policy

We will only provide this privacy policy to you once, generally at the start of our relationship with you. However, if this privacy policy is updated substantially, then we may provide you with details of the updated version. You are encouraged to check back regularly for updates.

This policy is dated – 24th April 2019

5 Personal Data We May Collect From You

When you contact us in person, by email, post, telephone or our website, you may provide us with or we may obtain personal data about you, such as information regarding your;

  • personal contact details that allows us to contact you directly such as name, title, full postal address, email address and telephone numbers;
  • date of birth;
  • gender;
  • records of your interactions with us such as telephone conversations, emails and other correspondence and your instructions to us;
  • any credit/debit card and other payment details you provide so that we can receive payments from you and details of the financial transactions with you;
  • use of and movements through our online portal, passwords, personal identification numbers, IP addresses, user names and other IT system identifying information;
  • a record of emails you have opened from us and any clickthroughs;
  • attendance information obtained through swipecard records;
  • records of your attendance at any events or competitions hosted by us;
  • participation in prize draw competitions or raffles provided by us;
  • suggestions offered as part of our customer service feedback campaign;
  • information about your computer including where available your IP address, operating system and browser type;
  • information about your internet usage obtained using a cookie file which is stored on the hard drive of your computer;
  • images in CCTV, video and/or photographic form;
  • voice recordings and voicemails;
  • your marketing preferences so that we know whether and how we should contact you.

6 Special Categories Of Personal Data

We may also collect, store and use the following “special categories” of more sensitive personal data regarding you:

information about your health, including any medical condition, health and sickness records, medical records and health professional information;

criminal convictions which restrict attendance to football matches.

We may not collect any of the above types of special category personal data about you. In relation to the special category personal data that we do process we do so on the lawful basis that the processing is necessary for:

  • fulfilment of a legal obligation;
  • support for individuals with a particular disability or medical condition; or
  • based on your explicit consent.

7 Where We Collect Your Personal Data

We collect personal data about our customers and supporters when;

  • you create an account on our Rangers FC website here here or Rangers TV website here to open an account with The Club to purchase any services or products we offer online;
  • you open an account in person at our ticket office, by telephone or by post;
  • when you make a query and/or complaint or when you correspond with us by phone, e-mail, online chat, letter, official social media channels; or
  • when personal data has been provided to us from a registered supporters club.

If you are a football player we may also collect personal data about you from any club, school or other organisation you are affiliated with or from other referrals such as from coaches or talent scouts.

If you are providing us with family members and emergency contacts or next of kin data then they have a right to know and to be aware of what personal data we hold about them, how we collect it and how we use and may share that information. Please share this privacy policy with those of them whom you feel are sufficiently mature to understand it. They also have the same rights as set out in section 14 of this privacy policy.

8 Uses Made Of Your Personal Data

The table below describes the main purposes for which we process your personal data, the categories of your personal data involved and our lawful basis for being able to do this.

PurposePersonal Data UsedLawful basis
 

To administer any account(s) you have with us and managing our relationship with you and dealing with payments and any support service or product enquiries made by you.

 

All contact and account details, transaction and payment information, records of your interactions with us, and marketing preferences.

 

 

Performance of a contract. This is necessary to enable us to properly manage and administer our contract with you.

 

 

 

 

To arrange and manage any contracts for the provision of any merchandise, products and/or services.

 

 

All contact and account details.

Transaction and payment information.

 

Performance of a contract. This is necessary to enable us to properly manage and administer our contract with you.

 

 

To send you information concerning your purchases.

 

 

All contact and account details.

 

 

Performance of a contract. This is necessary to enable us to properly manage and administer our contract with you.

 

To send you marketing information which you have requested from us, including our newsletters, information about upcoming matches, events, products and information about our commercial partners.

 

 

 

 

All contact and account details and marketing preferences.

 

 

 

 

Where you have given us your consent to do so.

 

 

To answer your queries or complaints.

 

 

Contact details and records of your interactions with us.

 

 

We have a legitimate interest to provide complaint handling services to you in case there are any issues with your account or contract.

 

 

 

 

 

 

 

 

Retention of records concerning complaints or claims.

 

 

 

 

 

 

 

 

All the personal information we collect.

 

We have a legitimate interest in retaining records whilst they may be required in relation to complaints or claims. We need to retain records to properly administer and manage your account and in some cases, we may have legal or regulatory obligations to retain records.

 

We may process special category personal data concerning complaints or claims on the lawful basis described in section 6.

 

Your usage of our IT systems and online portals.

 

 

IP addresses and cookies.

 

We have a legitimate interest to ensure that our IT systems are secure and efficient.

 

To conduct data analytics studies to better understand event attendance and trends within the sport.

 

Records of your attendance at football matches, soccer schools and any other events that you choose to attend.

 

We have a legitimate interest in doing so to ensure that our customer offers are targeted and relevant.

 

To ensure that the content on our website(s) is presented in the most effective manner for you and your computer.

 

 

 

IP address, operating system and browser type.

 

We have a legitimate Interest to provide the best possible user experience when browsing our website(s) or watching video content.

 

 

For the provision of stadium security and the minimisation of crime and disorder.

 

 

CCTV and/or photographic images.

 

We have a legal obligation to provide a safe environment

 

 

 

For the promotion of products and events.

 

 

 

 

Images in video and/or photographic form.

 

We have a legitimate interest to use photography and video recording to promote our products and events.

 

 

 

 

To comply with health and safety requirements.

 

 

 

Records of attendance.

 

We have a legal obligation and a legitimate interest to provide you and other members of our organisation with a safe environment in which to participate in or attend sporting events.

9 Direct Marketing

From time to time we may contact you by email, post or SMS with information about products and services we believe may be relevant to you.

We will only send marketing communications to you in accordance with the marketing preferences you set. You can update your communication preferences or unsubscribe at any time here.

10 How We May Share Your Personal Data

We share your personal data with the following parties:

  • any party approved by you, such as Premium Credit Limited if you choose finance on your season ticket;
  • to any football governing bodies: to allow them to properly administer the sport on a local, regional and national level and to safeguard children and vulnerable adults;
  • the Government: where we are required to do so by law or to assist with their investigations or initiatives;
  • Police, law enforcement and security services: when we are required to assist with the investigation and prevention of crime and the protection of national security

We employ some service providers to provide us with specialist services. These organisations are bound by a contract to respect the privacy of your personal data. Currently this includes;

  • email marketing specialists;
  • share registrar;
  • payment processors;
  • data analysts;
  • CCTV contractors;
  • IT services including CRM, website, video, match day event access systems and teleconference services: and
  • a telephone call handling centre.

We do not disclose personal data to anyone else except as set out above.

11 Profiling and Automated Decision Making

The Club does not perform any profiling or automated decision making that has a significant or legal effect.

12 Transferring Your Personal Data Internationally

We will neither transfer nor process personal data outside the United Kingdom, nor will we permit personal data to be transferred or processed outside the United Kingdom by a third party, unless it is under one or more of the following conditions:

  • the territory into which the data are being transferred is one approved by the UK’s Information Commissioner;
  • the territory into which the data are being transferred is within the European Economic Area;
  • the territory into which the data are being transferred has an adequacy decision issued by the European Commission;
  • the transfer is to the United States of America and the recipient is registered under the EU/US Privacy Shield scheme;
  • the transfer is made under the unaltered terms of the standard contractual clauses issued by the European Commission for such purposes;
  • the transfer is made under the provision of binding corporate rules which have been approved and certified by the European Commission;
  • the transfer is made in accordance with one of the exceptions set out in Data Protection Legislation.

13 How Long Do We Keep Your Personal Data

The duration for which we retain your personal data will differ depending on the type of information and the reason why we collected it from you. However, in some cases personal data may be retained on a long-term basis: for example, personal data that we need to retain for legal purposes will normally be retained in accordance with usual commercial practice and regulatory requirements. Generally, where there is no legal requirement we retain all physical and electronic records for a period of 6 years after your last contract with us. Exceptions to this rule are:

  • CCTV records which are held for no more than 28 days unless we need to preserve the records for the purpose of prevention and detection of crime;
  • Information that may be relevant to personal injury claims, or discrimination claims may be retained until the limitation period for those types of claims has expired. For personal injury or discrimination claims this can be an extended period as the limitation period might not start to run until a long time after the event.

It is important to ensure that the personal data we hold about you is accurate and up-to-date, and you should let us know if anything changes, for example if you change your phone number or email address.

14 Your Rights

You have the following rights concerning your personal data. If you wish to exercise any of your rights, please contact the Data Protection Officer on the details listed in section 3 of this privacy policy.

  
Right of accessYou have the right to obtain confirmation from The Club as to whether or not personal data concerning you is being processed, and, where that is the case, access to that personal data.
Right to rectificationYou have the right to oblige The Club to rectify inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed by providing a supplementary statement.
Right to erasure (right to be forgotten)You have the right (under certain circumstances, but not all) to oblige The Club to erase personal data concerning you.
Right to restriction of processingYou have the right (under certain circumstances, but not all) to oblige The Club to restrict processing of your personal data. For example, you may request this if you are contesting the accuracy of personal data held about you.
Right to data portabilityYou have the right (under certain circumstances, but not all) to oblige The Club to provide you with the personal data about you which you have provided to The Club in a structured, commonly used and machine-readable format.

You also have the right to oblige The Club to transmit those data to another controller.

Right to withdraw consentIf the lawful basis for processing is consent, you have the right to withdraw that consent.
Right to object to direct marketingWhere your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for marketing, which includes profiling to the extent that it is related to such direct marketing.
Rights in relation to automated decision making and profilingThe Club does not perform any automated decision-making based on personal data that produces legal effects or similarly significantly affects you.

15 Your Right To Lodge A Complaint

If you wish to exercise any of your rights concerning your personal data, please contact The Club’s Data Protection Officer in the first instance. The DPO will ensure your request is handled in a professional and timely manner. If however, you are not satisfied with the response you receive, you have the right to lodge a complaint with a supervisory authority. For the UK, the details are listed below:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 03031 231 113
Fax: 01625 524 510