Privacy Notice (website)
1. Who we are:
"Sportsfile" is a business name registered to Ray McManus & Associates Limited. When we say "Sportsfile", "us", "our" or "we", we are referring to Ray McManus & Associates Limited. Our registered office is situated at 14 South Circular Road, Portobello, Dublin 8.
Sportsfile is the "data controller" for the purposes of applicable data protection laws.
Our data protection representative is Ray McManus who may be contacted by writing to the above address or by email to { gdpr@sportsfile.com confirm }
2. Why we process your data, the lawful basis for processing your data and who we share it with
Personal Data we collect
A. For people who view and interact with our website, we process data such as your name and email address:
· to respond to your query when sent through our 'contact us' form
· to sign up to our newsletter when you request subscription through our website
The legal basis for this processing is our legitimate interest in the administration and operation of our business as well as our legitimate interest in marketing and promoting our sports photography services and product range.
We always include an unsubscribe button in our communications, so you can opt out of receiving such communications at any time.
Your contact details and all information submitted to us, either via our online enquiry form or otherwise, will be treated as strictly private and confidential.
We share information such as your name and email address with our newsletter services provider who sends out our newsletters. This provider is not permitted to use this data other than on our behalf.
We will retain this personal data for as long as you are registered with our website.
B. For customers wishing to purchase photographs, we process data such as name, billing and postal address, telephone and payment details :
· in order for you to use our website to purchase products and services
· in connection with customer services in relation to any purchases
The legal basis for the processing of this data is to enter into or perform our contract with you in relation to the provision of goods or services which you purchase through the website.
We use Pay & Ship Limited t/a Realex payments to process payments for any purchases you make online. When you place an order with us, we do not retain payment card details for future sales.
In addition, we share information with core services providers required for this part of our business to function. This may include companies who we engage to pick and pack orders, make deliveries, print materials or customer services.
We will retain this personal data for as long as you are a customer and for an additional period of [12 months] to deal with any customer complaints, queries refund etc.
Non Personal Data we Collect
We use Cloudfare for Content Delivery Network which caches our website content for faster delivery and higher performance.The information we collect about you is statistical data about users' browsing actions and patterns, and does not identify any individual. It helps us to improve our website and to deliver a better service.
In addition when you browse the website or make a purchase, we may automatically collect information about your visit by using cookies. The following non-personal information may be retained about that visit:
-your device type
-the search engine used to access the website
-how you came to the website
-how you interacted with the website
Most non-personal information is collected via cookies or other analysis technologies. This information may be used to monitor or improve website performance or deliver targeted advertising. Information from the cookie alone generally will not identify you personally and we will not use this information in connection with any personally identifiable information you have provided.
In addition, we use third party services such as Google Analytics that collect, monitor and analyze this information
Cookies
Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive.
Like many sites, we use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.
3. Transfers of data outside the European Economic Area
We transfer data relating our web services to Cloudfare located in the USA. The safeguard we have put in place for this transfer is to enter into European Commission approved standard contractual clauses with the provider.
We use Google Analytics and the safeguard we have in place is to monitor to ensure the EU-US Privacy shield remains valid for Google.
4. Your rights relating to personal data
You have the following rights under the GDPR, in certain circumstances and
subject to certain exemptions, in relation to your personal data:
∙ right to access the data - you have the right to request a copy of the
personal data that we hold about you, together with other information about
our processing of that personal data.
∙ right to rectification- you have the right to request that any inaccurate
data that is held about you is corrected, or if we have incomplete
information you may request that we update the information such that it is
complete.
∙ Right to erasure - you have the right to request us to delete personal
data that we hold about you. This is sometimes referred to as the right to
be forgotten.
∙ Right to restriction of processing or to object to processing - you have
the right to request that we no longer process your personal data for
particular purposes, or to object to our processing of your personal data
for particular purposes.
∙ . Right to data portability - you have the right to request us to provide
you, or a third party, with a copy of your personal data in a structured,
commonly used machine readable format.
In order to exercise any of the rights set out above, please contact us at
the contact details at the start of this privacy notice.
If we are processing personal data based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing which took place prior to its withdrawal.
If you are unhappy with how we process personal data, we ask you to contact us so that we can rectify the situation.
You may lodge a complaint with a supervisory authority. The Irish supervisory authority is the Data Protection Commission.
5. Requirement to process personal data
You may browse our website without providing us with any personal data and this will not affect your ability to view our website.
If you do not provide us with your information for the purposes described above, we cannot send your our newsletter or respond to your queries sent through our contact us form.
6. Automated decision-making and profiling
We do not use any personal data for the purpose of automated decision-making or profiling.