Privacy Policy

The General Data Protection Regulation (GDPR) seeks to protect and enhance the rights of data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the EU. GDPR does not apply to information already in the public domain.

Leeds United (LUFC) takes your privacy seriously and we are committed to protecting your personal information.

This Privacy Notice applies to personal data (i.e. information concerning any living person (Data Subject)) held by LUFC as data controllers that is not already in the public domain. It explains what personal information we collect, how we collect and use that personal information, with whom we will share it, why and in what circumstances.

LUFC is pleased to provide the following Privacy Notice which covers its websites, mobile applications and mobile websites (Platforms) except where you are notified of another privacy notice or policy by the specific LUFC entity which collects your personal information.

The address for LUFC (a company incorporated in England and Wales under number 06233875 ) is Leeds United, Elland Road, Leeds, LS11 0ES . If you would like to get in touch with us, you can also find contact details in the ‘How to Contact Us’ section below.

You might find external links to third party websites on our Platforms and those websites may have their own privacy notices which are different to this Privacy Notice. Our Privacy Notice does not apply to your use of a third party site and you should therefore make sure that you are comfortable with their privacy notices prior to using those sites.

Our Platforms use cookies. A “cookie” is a small computer file that is downloaded to your device that enables a web server to collect information from your web browser. It collects information as to how you navigate our Platforms and helps us to identify you, to make your visit to our Platforms more enjoyable by personalising your visit by customising our web pages for you,and to build up a demographic profile. For more information on cookies and how to manage cookie settings, please go to our cookie policy. (https://www.leedsunited.com/cookie-policy)

You may withdraw your consent to the processing of your personal information at any time by contacting the Data Privacy Officer (see the ‘How to Contact Us’ section below).

LUFC will only retain your personal information for as long as is reasonably necessary for the purposes for which it was collected and in line with our data retention policy. For example, we will normally keep contractual information for a period of ten years after the expiry of any such contract so that, if we need to establish, exercise or defend our legal interests, we may deal with any dispute or concerns that may arise.

At any point whilst LUFC holds your personal information, you have a number of rights available to you, including the following:

• Right of access – you have the right to access a copy of the information that we hold about you and to obtain information about how we process it;

• Right of rectification – you have a right to request that we correct data that we hold about you if it is inaccurate or incomplete;

• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records;

• Right to restriction of processing – where certain conditions apply you have a right to request that we restrict the processing of your information;

• Right of portability – you have the right to have the data we hold about you provided to you in an electronic format and/or to request that it is transferred to another organisation;

• Right to object – you have the right to object to certain types of processing such as direct marketing;

• Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.

You can exercise these rights in the first instance by contacting the Data Privacy Officer (see ‘How to Contact Us’ section below). Should you wish to do so, we will require you to provide additional information to confirm your identity as follows:

• One piece of photographic identification (e.g. passport, other national identity card or photocard driving licence); and

• One proof of address (e.g. utility bill dated within the last 3 months).

We will advise you promptly if we require further information in order to fulfil your request.

Further to the rights set out above, you can request the following information from us:

• The identity and the contact details of the person or organisation that has determined how and why to process your data;

• Contact details of the Data Privacy Officer, where applicable;

• The purpose of the processing as well as the legal basis for processing;

• If the processing is based on the legitimate interests of LUFC or a third party such as one of its clients, information about those interests;

• The categories of personal data collected, stored and processed;

• Recipient(s) or categories of recipients that your data is/will be disclosed/transferred to;

• How long your data will be stored for;

• Details of your rights to correct or erase your personal data and your rights to restrict or object to the processing of your data;

• Information about your right to withdraw consent at any time;

• How to lodge a complaint with the data protection regulator in the country where you live;

• The source of personal data if it was not collected directly from you;

• Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.

The primary point of contact for all issues arising from this Privacy Notice is our Data Privacy Officer, who can be contacted by email at:

[email protected]

or by post at:

Data Privacy Officer

Leeds United

Elland Road

Leeds

LS11 0ES

In the event that you have any questions, concerns or wish to make a compliant about how your personal data is being processed or regarding our compliance with this Privacy Notice, we would encourage you to contact our Data Privacy Officer in the first instance. We will investigate and attempt to resolve complaints and disputes as quickly as possible. If you do not get a response within 30 days you can complain to the Data Protection