Cookies Notice
Cookies are small text files stored on your computer by your browser. They are used for many things, such as remembering whether you’ve visited the site before, so that you remain logged in – or to help us work out how many new website visitors we get each month. They contain information about the use of your computer but do not include personal information about you e.g. they don’t store your name.
This Cookie Policy applies to our Website, which includes any website or mobile application operated by or on behalf of The Cardiff City Supporters’ Trust, regardless of how you access the network. By accessing the Website, you agree that this Cookie Policy will apply whenever you access the Website on any device. Any changes to this policy will be posted here. We reserve the right to vary this Cookie Policy from time to time and such changes shall become effective as soon as they are posted. Your continued use of the Website constitutes your agreement to all such changes.
We may collect information automatically when you visit the Website, using cookies. The cookies allow us to identify your computer and find out details about your last visit. You can choose not to allow cookies and you can delete cookies via the settings on your browser. If you do, we cannot guarantee that your experience with the Website will be as good as if you do allow cookies. The information collected by cookies does not personally identify you; it includes general information about your computer settings, your connection to the Internet e.g. operating system and platform, IP address, your browsing patterns and timings of browsing on the Website and your location. Most internet browsers accept cookies automatically, but you can change the settings of your browser to erase cookies or prevent automatic acceptance if you prefer. Remember that if you turn off cookies in your browser then these settings apply to all websites and not just our website.
The Data Protection Act 2018 controls how your personal information is used by organisations, businesses or the government.
The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR). GDPR sets out a number of different reasons a company may collect and process your personal data, including:
Consent
In specific situations, we can collect and process your data with your consent – e.g. when you sign up to receive our email newsletter. When collecting your personal data, we’ll always make clear to you which data is necessary in connection with a particular service.
Contractual obligations
In some instances, we need your personal data to comply with contractual obligations. For example, if you join The Cardiff City Supporters’ Trust, we need your address details to deliver your Trust magazine and Trusts documents.
Legal compliance
We may be legally bound to collect and process your data. For example, if someone is involved in criminal activity or fraud, we may need to pass details to law enforcement.
Legitimate interest
We require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running the The Cardiff City Supporters’ Trust.
How we collect your personal data
There are a number of ways in which we may collect information about you, not limited to:
- When you sign up as a member and provide your email address, the club you support and other contact information.
- When you email us/contact us through social media.
- When you sign up for our email newsletter.
- When you have given a third party permissions to share information they hold about you with us.
- When you complete a survey.
- When you sign up for an The Cardiff City Supporters’ Trust event or campaign
The type of personal data we collect
The data we may collect includes your name, your email address, phone number, postal address, date of birth, gender, social media account name(s), ethnicity, sexual orientation, your membership of other supporter/trade union organisations or your bank account details for reimbursement of expenses.
How and why we use your personal data
We use your data to provide you with appropriate information about the The Cardiff City Supporters’ Trust and our activities.
The data privacy law allows this as part of our contractual obligations and legitimate interest in understanding our members and providing the highest levels of service. We will hold your data in our systems for as long as is necessary for each relevant activity or as long as is set out in any agreement we have with you.
Protection of your personal data
The security of your personal data is important, and we take care to handle and store it as best we can. This includes using encrypted https links between our web server and your browser which means that all data passed between you and us cannot be intercepted.
We do not store your card details ourselves when you sign up for membership or make a one-off donation, but instead use STRIPE, who are a PCI compliant payment processing provider for all orders placed online.
We also regularly assess the safety of our servers and electronic storage in line with industry standards.
Length of time we keep your personal data
We only keep your data for as long as is necessary for the purpose it was collected. In the case of membership of the The Cardiff City Supporters’ Trust, it is retained as long as the membership remains active.
You also have the right to access and rectify mistakes in the data we hold about you at any time, and each of our email newsletters has a link to unsubscribe at the bottom should you wish to opt out.
You can also make any changes to your personal information by contacting the The Cardiff City Supporters’ Trust.
Data processor
Data is processed by, or under the direction of, The Cardiff City Supporters’ Trust committee members.
We never share your data with third parties without consent.
Complaints
If you are at all unhappy about the handling of your data, you can send a complaint to the Information Commissioner’s Office by calling 0303 123 1113 or go online to www.ico.org.uk/concerns
If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.