Personal Data Collected

Purpose

Lawful Basis for Processing

•       Full legal name, email address, residential address and mobile/phone number.

•       A number or code attributed to you by a government to identify who you are, such as a passport number or national identity number (including nationality).

•       Details about You that are stored in documents such as passports, identity cards and utility bills that confirm Your identity and prove the residential address; as well as any other additional documentation as deemed necessary by Our compliance teamWe may monitor, record, store and use any telephone, email or other communication.

·       For the purposes of setting up an account on our system,

·       For the purposes of managing our relationship with you,

·       For the purposes of establishing and investigating any suspicious behaviour in order to protect our business from any risk, fraud or other illegal activities

·       Research and statistics so that We may understand Our Users’ needs and to develop and improve Our services/activities.

·       For the purposes of evaluating your queries and/or requests you send us to use/receive any of our services (including customer support services).

·       For the purposes of maintaining and updating the user accounts records on our system.

·       For the purposes of continuing to manage our relationships with you.

·       For the purposes of developing and managing our brands, products and services.

·       To manage and administer the Site and/or Apps;

·       to enable you to use the Site and/or Apps;

·       to check any order or other instructions given to us;

·       for training purposes;

·       to improve the quality of our customer service;

·       to deal with enquiries, complaints and feedback from you;

·       to send you contractual notices;

·       to keep you informed about your activity relating to the Site and/or Apps;

To disclose to third parties for:

·       the sports teams/Clubs, Players/Sportspersons whose digital assets, tickets, branded goods and services You have specifically opted to use, buy or interact with through our Site and/or Apps

·       To comply with a current judicial proceeding, a court order or legal process served on us or our Site and/or Apps, any request by any regulator who may have jurisdiction over us or for audit purposes and to meet obligations to any relevant regulatory authority or taxing authority;

·       To enforce this Privacy Policy or the Lokkaroom Service Terms;

·       To agents and subcontractors, acting for us, to use for the purpose of operating the Site and/or Apps;

·       to assist any type of investigation into Your actions);

·       In the event of TMA Sports Management Limited or any of its subsidiaries being involved in a merger, sale, restructure, acquisition, joint venture, assignment or transfer (of business, shares, assets or otherwise);

·       To protect and defend Our rights (including the right to property), safety, or to those of Our affiliates, of Users of Our Site;

·       To protect against abuse, misuse or unauthorized use of Our Site or Apps;

·       Cloud Service Provider for the hosting of data under state-of-the-art security protocols and our exclusive control.

·       IT Service Providers for the maintenance and support of our IT systems/Site(s) with restricted access and under strict controls.

·       Customer Support Software Providers for the provision of a customer support software in order to provide our users with a high-level customer support with restricted access and our strict controls.

·       Public Authorities for compliance with legal obligations and only after verifications are made into necessity of disclosure.

·       Our independent financial and legal advisors for the provision of legal and financial support to TMA Sport and affiliated entities

·       Business partners with whom we have a co-operation or partnership agreement to facilitate and improve the services and goods referred to you, including the tailoring of such services and goods, if deemed appropriate.

·       For the purpose of fulfilling orders using our dropship e-commerce model. 

·       performance of a contract

·       compliance with a legal obligation

·       legitimate interests

Information about your device, mobile device or other item of hardware through which you access the Site and/or Apps and your visits to and use of the Site and/or Apps (including your device, operating system, length of visit, page views that you use).

Details about how and when you use Our services (our Site and/or Apps)

IP address of the computer connected to the internet, location data through the mobile phone and Apps used and GPS data.

Personal information such as your name, address and purchase history.

·       For the purposes of providing You with Our services, especially those provided via the Apps.

·       to analyse and improve the features offered on the Site and/or Apps.

·       To ensure that content on the Site and/or Apps is presented in the most effective manner for you and for your device;

·       For the purposes of internal data analysis.

To disclose to third parties for:

·       the sports teams/Clubs, Players/Sportspersons and retailers whose digital assets, tickets, merchandise and services You have specifically opted to use, buy or interact with through our Site and/or Apps

·       To comply with a current judicial proceeding, a court order or legal process served on us or our Site and/or Apps, any request by any regulator who may have jurisdiction over us or for audit purposes and to meet obligations to any relevant regulatory authority or taxing authority;

·       To enforce this Privacy Policy or the Lokkaroom Service Terms;

·       For the purpose of fulfilling orders using our dropship e-commerce model. 

·       performance of a contract

·       legitimate interests

Information relating to your time taken to respond to questions, links you have clicked; and length of time you have spent on the Site and/or Apps,

·       To deal with enquiries, complaints and feedback from you;

·       to analyse and improve the features offered on the Site and/or Apps.

To disclose to third parties for:

·       the sports teams/Clubs, Players/Sportspersons whose digital assets, tickets, branded goods and services You have specifically opted to use, buy or interact with through our Site and/or Apps

·       To comply with a current judicial proceeding, a court order or legal process served on us or our Site and/or Apps, any request by any regulator who may have jurisdiction over us or for audit purposes and to meet obligations to any relevant regulatory authority or taxing authority;

·       To enforce this Privacy Policy or the Lokkaroom Service Terms;

·       performance of a contract

·       compliance with a legal obligation

·       legitimate interests

Correspondence between you and us

·       to manage and administer the Site and/or Apps;

·       to enable you to use the Site and/or Apps;

·       to deal with enquiries, complaints and feedback from you;

To disclose to third parties for:

·       the sports teams/Clubs, Players/Sportspersons whose digital assets, tickets, branded goods and services You have specifically opted to use, buy or interact with through our Site and/or Apps to help deal with complaints;

·       To comply with a current judicial proceeding, a court order or legal process served on us or our Site and/or Apps, any request by any regulator who may have jurisdiction over us or for audit purposes and to meet obligations to any relevant regulatory authority or taxing authority;

·       To enforce this Privacy Policy or the Lokkaroom Service Terms;

·       performance of a contract

·       compliance with a legal obligation

·       legitimate interests

Details of your answers to Questions via the Site and/or Apps

·       to conduct surveys

·       to manage and administer the Site and/or Apps;

·       to enable you to use the Site and/or Apps;

·       for statistical analysis;

·       to develop and improve the Site and/or Apps;

To disclose to third parties for:

·       the sports teams/Clubs, Players/Sportspersons whose digital assets, tickets, branded goods and services You have specifically opted to use, buy or interact with through our Site and/or Apps;

·       To comply with a current judicial proceeding, a court order or legal process served on us or our Site and/or Apps, any request by any regulator who may have jurisdiction over us or for audit purposes and to meet obligations to any relevant regulatory authority or taxing authority;

·       To enforce this Privacy Policy or the Lokkaroom Service Terms;

·       to agents and subcontractors, acting for us, to use for the purpose of operating the Site and/or Apps;

·       performance of a contract

·       compliance with a legal obligation

legitimate interests

Records of any telephone, email or other communication with you

·       to improve the quality of our customer service.

To disclose to third parties for:

·       To comply with a current judicial proceeding, a court order or legal process served on us or our Site and/or Apps, any request by any regulator who may have jurisdiction over us or for audit purposes and to meet obligations to any relevant regulatory authority or taxing authority;

·       To enforce this Privacy Policy or the Lokkaroom Service Terms;

·       performance of a contract

·       compliance with a legal obligation

·       legitimate interests

Name, email address, sporting preferences, purchase history

·       Direct marketing (e.g. mailing lists for newsletters);

·       For the purposes of subscribing to a newsletter or mailing list.

·       For the purpose of sending personalised communications and product recommendations.

To disclose to third parties for:

·       Marketing and Customer Retention Management Tools for the provision of marketing email communications send-outs under our strict control and management.

·       Advertising partners and social media platforms for marketing purposes to send adverts to You because You may be interested in Our services or to send Our adverts to people who have a similar profile to You, utilizing Our advertising, sponsor and affiliate partners.

·       For the purpose of fulfilling orders using our dropship e-commerce model. 

·       Consent

Rights

Exception

Right of Access: To obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; (f) the right to lodge a complaint with a supervisory authority; (g) where the personal data are not collected from the data subject, any available information as to their source; (h) the existence of automated decision-making, including profiling and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Right to rectification: to obtain from us without undue delay the rectification of inaccurate personal data concerning you.

We must communicate to each recipient to whom the rectified personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

We shall inform you about those recipients if you request that information.

Right to erasure: to obtain from us the erasure of personal data concerning you without undue delay where:

(a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

(c) you object to the processing based on legitimate interest where there are no overriding legitimate grounds for the processing;

(d) the personal data have been unlawfully processed;

(e) the personal data have to be erased for compliance with a legal obligation to which we are subject.

We must communication to each recipient to whom the erased personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

We shall inform you about those recipients if you request that information.

Processing is necessary for

(b) compliance with a legal obligation which requires processing by law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; or

(e) the establishment, exercise or defence of legal claims.

Right to request the restriction of processing concerning you: to be obtained from us where:

(a) the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;

(b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;

(c) we no longer need the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims;

(d) you object to the processing based on legitimate interest pending the verification whether our legitimate grounds override yours.

We must communication to each recipient to whom the restricted personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

We shall inform you about those recipients if you request that information.

Where processing has been restricted under this right, such personal data shall, with the exception of storage, only be processed:

(a)        with your consent; or

(b)        for the establishment, exercise or defence of legal claims; or

(c)        for the protection of the rights of another natural or legal person; or

(d)        for reasons of important public interest of the UK.

The right to data portability: to receive your personal data, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where:

(a) the processing is based on consent or is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract; and

(b) the processing is carried out by automated means.

You have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

The exercise of this right shall be without prejudice to the right to erasure.

That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

The right to object to processing: to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on processing necessary for the purposes of the legitimate interests pursued by us or a third party (except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data), including profiling.

Where:

(a)  we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject; or

(b) for the establishment, exercise or defence of legal claims.

The right to ask us not to process your personal data for direct marketing purposes: to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You can exercise your right to prevent such processing by contacting us at marketing@tmasport.com.

The right not to be subject to automated individual decision-making, including profiling: to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

If the decision:

(a) is necessary for entering into, or performance of, a contract between you and us;

(b) is authorised by law to which we are subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or

(c) is based on the data subject's explicit consent.

In the cases referred to in points (a) and (c) we shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on our part, to express his or her point of view and to contest the decision.