SUMMARY PRIVACY NOTICE WEBSITE, SMARTPHONE APPLICATION & CLUB ID ENVIRONMENT OF CLUB BRUGGE NV
This privacy notice was last updated on date of 2 July 2024, it is the third version.
Your privacy is important to us! If you would like to find out more specifically how we handle your data, you can find our privacy notice here. The short summary of our privacy notice below will inform you in less than two minutes how Club Brugge processes your Personal Data. Would you like to know more? Then we invite you to read our full privacy notice, which explains everything in detail.
What is there to know?
CLUB BRUGGE NV (hereinafter "Club Brugge") is a Belgian football club playing in the first division of the Belgian football league. Club Brugge has various channels through which it may interact with you, such as its website, its smartphone application and its Club ID environment (the "Club Brugge Experience").
In carrying out the above activities, Club Brugge may process your Personal Data. Club Brugge will protect the Personal Data you provide to us during any possible processing and will at all times respect Belgian and European legislation in this respect.
What information may we collect from you?
- Users of the Club Brugge website and smartphone application: your IP address, geographical location, the type and operating system of your mobile device, your visit and the time and duration of this visit and other data and statistics concerning this visit;
- Individuals who create an account through the Club Brugge website or smartphone application: your name, first name, gender, date of birth, (mobile) phone number, address, preferred language, email address, password hash, "single sign-on" (SSO) data (Facebook).
- Club ID users: your subscription number, card number, name, date of birth, email address, mobile number, address and ID card number;
- Persons who have contacted Club Brugge through the website, by e-mail, by telephone or by other means: your contact information and various data to respond to your question or request.
- Applicants: your contact and identification information, resume, specific information related to the position and other information you entrust to us.
- Suppliers: your contact and identification information and billing information.
Why do we collect this information?
We collect your Personal Data primarily to make it possible to offer the services and products within the Club Brugge Experience in an optimal way. In addition, we process your Personal Data:
- To keep you up to date with news about Club Brugge, its players and its team;
- To respond to your inquiries or requests;
- To contact you;
- To keep you informed of our services and products launched and offered within the Club Brugge Experience;
- To fulfill the agreement with you.
What legal basis do we use to process your Personal Data?
We process your Personal Data on the following legal grounds:
- Legitimate interest (Art. 6.1 (f) GDPR)
- Execution of the agreement (Art. 6.1 (b) GDPR)
- Consent (Art. 6.1 (a) GDPR)
Who has access to your Personal Data?
Depending on the purpose and specific context, Club Brugge employees may have access to your Personal Data. However, this access is limited depending on the job description of the relevant employee of Club Brugge as well as by implementing appropriate access rights.
How long do we keep your Personal Data?
We keep your Personal Data for as long as it is essential for the purposes of the processing or for the (contractual) relationship between you and Club Brugge.
For more information on how long we keep your Personal Data, please refer to Article 4 of our full privacy notice below.
What is in your control?
For any processing of your Personal Data, you may exercise the following rights at any time:
- Right of information and access and: you have the right to access your Personal Data and the use we make of your Personal Data, for example, by requesting a copy of your Personal Data that Club Brugge holds and processes;
- Right to rectification: You have the right to have your data amended to correct inaccurate Personal Data as well as to complete incomplete Personal Data;
- Right to erasure: you have the right to have your Personal Data deleted by us (unless we are required to retain your Personal Data). We will retain your request for erasure of your Personal Data for one year after receipt in order to verify our compliance with your request;
- Right to restriction of processing: you have the right to have the processing of your Personal Data restricted;
- Right to object: you have the right to object to processing, for example, by asking us to stop marketing communications at any time;
- Right to withdraw consent: you have the right to stop a previously granted consent for processing;
- Right to lodge complaint: you have the right to lodge a complaint with the Data Protection Authority if you suspect that your data is not being handled correctly by Club Brugge;
- Automated decisions and profiling: you have the right to ask us not to be the subject of a decision based on automated processing (including profiling);
- Right to data portability: you have the right to request your Personal Data in a structured and machine-readable format, or in another standard format so that it is readable by another controller.
Specifically, you may exercise the above rights by contacting us through any of the channels listed below:
|
|
|
Club Brugge NV For the attention of the Data Protection Officer Herenweg 9 8300 Knokke-Heist, Belgium |
You have the right to file a complaint with the Belgian Data Protection Authority, the data protection authority overseeing Club Brugge:
Data Protection Authority
Drukpersstraat 35, 1000 Brussels, Belgium
Tel +32 (0)2 274 48 00, Fax +32 (0)2 274 48 35,
Email: contact@apd-gba.be
For more information on how you can exercise the above rights, please see Article 5 of our full privacy notice below.
PRIVACY NOTICE CLUB BRUGGE NV
Version 3.0 – 2 July 2024
Table of contents
Article 2 - COLLECTED PERSONAL DATA. 6
Article 3 - PURPOSE OF PROCESSING. 8
3.3 Transfers to third parties.. 11
Article 4 - DURATION OF PROCESSING. 11
5.1 Right of access and inspection.. 12
5.2 Right to rectification.. 12
5.3 Right to restriction of processing.. 13
5.6 Right to data portability.. 13
5.7 Right of withdrawal of consent. 14
5.8 Automated decisions and profiling.. 14
5.9 Exercise of your rights. 14
5.10 Right to file complaint. 14
Article 6 - SECURITY AND CONFIDENTIALITY. 15
Article 7 - APPLICABLE LAW AND COURT OF APPEAL. 15
8.2 Why does Club Brugge use cookies?. 15
Article 1 - GENERAL
- CLUB BRUGGE NV (hereinafter "Club Brugge") is a Belgian footballclub playing in the first division of the Belgian football league. Club Brugge has various channels through which it may interact with you, including its website, its smartphone application and its Club ID environment (the "Club Brugge Experience"). This privacy notice has been created to inform you about how we handle your Personal Data, being any information relating to an identified or identifiable person (hereinafter ''Personal Data'') and how you can exercise control over it. We encourage you to read this privacy notice carefully as it contains your rights and obligations towards Club Brugge.
This privacy notice may be revised or updated from time to time. The most recent version is the one found on our website (https://www.clubbrugge.be/en/club-brugge-privacy-policy). When we make changes, we will notify you of those changes through our website.
- The controller responsible for processing your Personal Data is CLUB BRUGGE NV, with its registered office at 8300 KNOKKE-HEIST, Herenweg 9, registered with the Crossroads Bank for Enterprises, under enterprise number 0460.444.251.
- The collection and processing of Personal Data is subject to strict conditions. Club Brugge acts in accordance with:
Article 2 - COLLECTED PERSONAL DATA
For the purposes described in Article 3, Club Brugge may process the following categories of your Personal Data:
Relevant Data Subjects |
Personal Data (Detail) |
Context |
Users of the Club Brugge website and smartphone application (Category 1) |
|
|
Persons who create an account through the Club Brugge website or smartphone application (Category 2) |
|
|
Users of the Club ID (Category 3) |
|
|
Individuals who contact Club Brugge via our website, by email, telephone or any other means (Category 4) |
|
|
Applicants (Category 5) |
|
|
Suppliers (Category 6) |
|
Article 3 - PURPOSE OF PROCESSING.
Club Brugge collects and processes your Personal Data in the first place to be able to offer you optimally our services and products within the Club Brugge experience.
That said, we only use your Personal Data for the following purposes:
3.1 General purposes
We process your Personal Data on the following legal bases and for the following purposes:
Relevant Data Subjects |
Legal Basis |
Purpose |
Users of the Club Brugge website and smartphone application (Category 1) |
Execution of the agreement (Art. 6.1 (b) GDPR) or Legitimate interest (Art. 6.1 (f) GDPR) or Consent (Art. 6.1 (a) GDPR) |
Your data are processed to allow you to access Club Brugge's website and smartphone application, in accordance with the terms and conditions of our website and smartphone application Your information may be used to keep you informed about our services and products as part of the Club Brugge experience, based on our legitimate interest. We progressively build an individual customer profile based on your interactions with the Club Brugge website, smartphone application, communications and social media channels, from first contact from an anonymous customer to a known customer. This allows us to dynamically segment you based on your profile and provide you with the most relevant content and/or products. We only process your data in this context if you have given your prior consent. |
Persons who create or have created an account through the Club Brugge website or smartphone application (Category 2) |
Execution of the agreement (Art. 6.1 (b) GDPR) or Consent (Art. 6.1 (a) GDPR) or Legitimate interest (Art. 6.1 (f) GDPR) |
Data of persons who create an account via the Club Brugge website or smartphone application are processed to create the account, in accordance with our terms and conditions. If you enter optional data when creating your account, these data are processed based on your prior consent, as you enter them yourself during the account creation process. Your data may also be used to keep you informed about our services and products as part of the Club Brugge experience, based on our legitimate interest. |
Users of the Club ID (Category 3) |
Execution of the agreement (Art. 6.1 (b) GDPR) or Legitimate interest (Art. 6.1 (f) GDPR) |
Your data is processed in order to provide you with the services linked to Club ID, in accordance with our terms and conditions. Your information may be used to keep you informed about our services and products as part of the Club Brugge experience, based on our legitimate interest. |
Individuals who contact Club Brugge via our website, by email, telephone or any other means (Category 4) |
Execution of the agreement (Art. 6.1 (b) GDPR) or Consent (Art. 6.1 (a) GDPR) or Legitimate interest (Art. 6.1 (f) GDPR) |
Data of individuals who contact Club Brugge may be processed to the extent necessary in connection with the performance of the agreement we have entered into or are considering entering into with you. Data of individuals who contact Club Brugge may also be processed by us to respond to your requests or inquiries, based on the consent you have given by actively contacting us. Your data may also be used to keep you informed about our services and products as part of the Club Brugge experience, based on our legitimate interest. |
Applicants (Category 5) |
Execution of the agreement (Art. 6.1 (b) GDPR) or Consent (Art. 6.1 (a) GDPR) or Legitimate interest (Art. 6.1 (f) GDPR) |
We may process your data as an applicant as described in in order to evaluate your application and implement a recruitment policy. Depending on the specific circumstances, some of these processing activities will be necessary for the performance of the contract we are considering entering into with you. Others will be necessary to pursue our legitimate interests in connection with improving our recruitment policies and processes. Finally, where required by law, we will seek your prior consent before processing certain Personal Data about you. |
Suppliers (Category 6) |
Execution of the agreement (Art. 6.1 (b) GDPR) or Legitimate interest (Art. 6.1 (f) GDPR) |
Data from suppliers is used for the execution of the services as stipulated in the agreement with Club Brugge, including payment of invoices regarding these services. All this, pursuant to the execution of the agreement with Club Brugge. In addition, supplier data may be used for internal processes, such as complaint handling and auditing, based on Club Brugge's legitimate interest. |
3.2 Direct marketing
Your Personal Data may be used for direct marketing purposes, based on Club Brugge's legitimate interest and in accordance with the provisions of this Privacy notice.
If we have obtained your electronic contact information as part of providing our services, we may use this information to send you marketing materials via email about similar services we may offer. Specifically, you will be included in Club Brugge's Customer Relationship Management (CRM) system that helps us manage our relationships. In this way, Club Brugge may use your Personal Data to send you marketing material as well as other material related to our general services, to inform you about our services and products within the framework of the Club Brugge Experience and to provide you with specific promotional offers.
Other marketing materials, relating to non-similar services we may offer, will be sent to you only if you have given us your prior consent.
You may opt out of receiving such emails at any time, free of charge and without motivation, by clicking the unsubscribe button at the end of a promotional email or by sending an email to dpo@clubbrugge.be.
3.3 Transfers to third parties
Club Brugge may use third parties to perform and enable the Club Brugge Experience. Examples of these third parties include entities that provide analytics, marketing and web hosting services or help improve the diagnostic competencies of our services.
We guarantee a similar level of protection by making contractual obligations opposable to these third parties, which are similar to this privacy notice and guarantee security and confidentiality regarding your Personal Data.
Further, we will not sell, rent, distribute or otherwise make your Personal Data commercially available to third parties except as provided in this Privacy notice or when you have given us your explicit and prior consent to do so. Accordingly, we have taken all legal and technical precautions to prevent unauthorized access and use of your Personal Data.
In the event of full or partial reorganization or transfer of Club Brugge's business in which Club Brugge reorganizes, transfers, assigns its operations or in the event that Club Brugge would be declared in bankruptcy, your Personal Data may be transferred to new entities or third parties. Club Brugge will, where reasonably possible, inform you in advance that Club Brugge will transfer your Personal Data to a third party.
3.4 Legal obligations
We may need to disclose your Personal Data as a result of a court order or to comply with other mandatory laws or regulations. We will make reasonable efforts to inform you in advance, unless subject to legal restrictions.
Article 4 - DURATION OF PROCESSING.
Your Personal Data will be retained and processed by us for the period we are legally required to do so or for as long as is essential for the purposes of the processing or for the contractual relationship between you and Club Brugge.
If we are no longer able to maintain your data, it will be sent to you electronically and in usually used format.
If you do not exercise your right to erasure, your Personal Data will be retained for the following periods:
Relevant Data Subjects |
Retention period |
Users of the Club Brugge Website and smartphone application (Category 1) |
Data of users of the Club Brugge Website and smartphone application, are kept for up to 2 years after the last visit or use of the Website or smartphone application. |
Persons who create an account through the Club Brugge website or smartphone application (Category 2) |
Data of persons who have created an account through the Club Brugge website or smartphone application will be kept for maximum 2 years after the deletion of the account. |
Users of the Club ID (Category 3) |
Data of Club ID users will be kept for up to 5 years after the last season the Club ID was used. |
Persons who contact Club Brugge via the website, by e-mail, by telephone or by any other means (Category 4) |
Data of persons who contact Club Brugge through the Website, by e-mail, by telephone or by any other means are kept for 2 years after the last contact. |
Applicants (Category 5) |
Applicant data will be kept for 6 months after the last qualitative contact with you as an Applicant. |
Suppliers (Category 6) |
Supplier records are kept for 7 years after the termination of the supplier's services. |
Article 5 - YOUR RIGHTS
5.1 Right of access and inspection
You have the right to access your Personal Data at any time and to obtain information about how we use your Personal Data. This includes the right to request a copy of your Personal Data, for example in the form of screenshots, as well as to receive a summary of your Personal Data in machine-readable form.
5.2 Right to rectification
You always have the right to ask us to modify or complete your Personal Data if it is inaccurate or incomplete.
5.3 Right to restriction of processing
You have the right to obtain restriction of processing of your Personal Data in the following cases:
- You contest the accuracy of the Personal Data, whereby processing of your Personal Data will be restricted for the period necessary for us to verify the accuracy of your Personal Data.
- The processing is unlawful and you oppose the erasure of your Personal Data and request instead the restriction of its use.
- Club Brugge no longer needs your Personal Data for the purposes described in article 3, but you require them for the establishment, exercise, or defense of legal claims.
- You have objected to the processing of your Personal Data, in accordance with article 5.5 of this privacy statement.
When the processing of your Personal Data is restricted, these data, except for storage, will only be processed:
- With your consent;
- For the establishment, exercise, or defense of legal claims;
- To protect the rights of another natural person or legal entity; or
- For important reasons of public interest.
5.4 Right to erasure
You have the right to request Club Brugge to delete your Personal Data to the extent we are not in a position to anonymize it, except where we are required by law to retain it.
Please note that if you request deletion of your Personal Data, we may no longer be able to provide you with the optimal Club Brugge Experience.
In addition, we will retain your request for deletion of your Personal Data for a period of one year after your request. This is in order to substantiate our fulfillment of your request.
5.5 Right of objection
You have the right to object to the processing of your Personal Data that we process based on our legitimate interests, if you have serious and legitimate reasons for doing so. Upon receiving your objection, we will cease processing your Personal Data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or that are related to the establishment, exercise, or defense of legal claims.
You also have the right to object to the use of your Personal Data for direct marketing purposes. In this case, no specific justification will be required. Please refer to article 3.2 above for further details.
5.6 Right to data portability
You have the right to obtain your Personal Data processed by us in a structured, common and machine-readable form and/or to transfer it to other controllers.
5.7 Right of withdrawal of consent
You have the right to withdraw your prior consent for the processing of your Personal Data when such processing is based on your consent.
5.8 Automated decisions and profiling
You have the right to ask us not to be the subject of a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you.
5.9 Exercise of your rights
You may exercise your rights, as set forth under articles 5.1 to 5.8 above, by contacting us through any of the channels listed below:
|
|
|
Club Brugge NV For the attention of the Data Protection Officer Herenweg 9 8300 Knokke-Heist, Belgium |
5.10 Right to file complaint
You have the right to file a complaint with the Belgian Data Protection Authority, the data protection authority overseeing Club Brugge:
Data Protection Authority
Drukpersstraat 35, 1000 Brussels, Belgium
Tel +32 (0)2 274 48 00, Fax +32 (0)2 274 48 35,
Email: contact@apd-gba.be
This is without prejudice to a remedy before a civil court. If you are from or work in an EU member state other than Belgium, you may also file a complaint with your national data protection authority. You can find a list of national supervisory authorities within the EU on the following webpage: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
If you would suffer damages as a result of the processing of your Personal Data, you may bring a claim for compensation.
Article 6 - SECURITY AND CONFIDENTIALITY
Depending on the purpose and context, certain Club Brugge employees will have access to your Personal Data. However, this only for the purposes set out in this Privacy notice. This access will also be limited based on the job content and access rights of these Club Brugge employees.
We have developed security measures adapted on a technical, administrative and organizational level to avoid the destruction, loss, falsification, modification, unauthorized access or inadvertent notification to third parties of your Personal Data as well as any unauthorized processing of this data. However, in the event that this would happen, and it would concern your Personal Data, Club Brugge will inform you about the breach, including a description of the potential impact and a recommendation to mitigate the possible negative consequences of the breach.
Club Brugge also provides a secure, user-controlled environment for use of its website. We store your Personal Data securely on our servers located within the European Economic Area. However, certain processors and/or sub-processors may be located outside the European Economic Area. If this is the case, these parties will only process very minimal and/or pseudonymized Personal Data.
Therefore, under no circumstances can Club Brugge be held liable for any direct or indirect damage resulting from an erroneous or unlawful use by a third party of your Personal Data.
In addition, you bear responsibility for maintaining privacy and security when using our website. You alone are liable for the use of our website on your devices, IP address and identifying information as well as its confidentiality.
Article 7 - APPLICABLE LAW AND COURT OF APPEAL
This Privacy notice shall be governed, construed and enforced in accordance with Belgian law which is exclusively applicable.
The Courts of Bruges shall have exclusive jurisdiction to hear any dispute that may arise from the interpretation or implementation of this Privacy notice.
Article 8 - COOKIES[BD1]
8.1 What are cookies?
A "cookie" is a small file transmitted by Club Brugge's server and placed on your computer's hard drive. The information stored on these cookies can only be read by Club Brugge.
8.2 Why does Club Brugge use cookies?
Our website uses cookies and similar technologies to distinguish your usage preferences from those of other users of our website. This helps us to provide you with a better user experience when you visit or use our website and also allows us to optimize our website. For example, cookies help Club Brugge to optimize your visit to the website, to remember technical choices (for example, a language choice, a newsletter, et cetera) or to show you more relevant services and offers.
As a result of the European e-Privacy Directive, all websites targeting certain parts of the European Union are required to seek your consent to the use or storage of non-essential cookies and similar technologies on your computers or mobile devices. This cookie notice gives you clear and comprehensive information about the cookies used by Club Brugge, including their purpose.
The cookies we use are secure. The information we collect using cookies helps us to identify any errors or to show you specific services that we think may be of interest to you.
8.3 Types of cookies
There are very many different cookies that can be distinguished by functionality, origin or retention period. Below we first give a general description of the types of cookies that exist. Thereafter, a detailed overview of the different cookies used on Club Brugge’s website is given.
Different types of existing cookies
Type |
Function |
Essential/Strictly necessary cookies |
These cookies are necessary for a website to function and cannot be disabled in our systems. They are usually set only in response to actions taken by you, such as setting your privacy preferences, logging in or filling out forms. They are necessary for proper communication and they facilitate navigation (e.g., returning to a previous page, etc.). |
Functional cookies |
These cookies increase the usability of a website by remembering Your choices (e.g. language preference) and provide improved functionality and personalization to the visitor. For example, these cookies allow certain settings to be personalized at your request. If You do not accept these cookies, it may affect the performance and functionality of the website and may restrict access to content on the website. |
Performance/Analytics cookies |
These cookies collect data about the use of a website such as the number of visitors, the time visitors spend on a web page and any error messages. They help to improve the performance of a website. These cookies do not identify you as an individual. |
Third party cookies |
First party cookies are cookies sent from the servers or domains, from where the requested service is provided. Third party cookies are cookies sent to your browser from a server or domain not operated by the service provider, but by a collaborating organization. Only these third parties have access to those cookies and the information collected by the cookie. If you would like to know more about these cookies, please refer to the policies offered by these parties on their respective websites. Please note that the service provider has no influence on the content of these policies or on the content of these third-party cookies. |
Cookies used by Club Brugge on its website[BD2]
First Party Cookies
Domain name:
Cookie name |
Type of cookie |
Description |
Retention time |
BC Session ID BC Temp ID AWSELB BCPermissionLevel |
Performance/Analytics cookies |
These cookies are placed by BlueConic and are used to show you personalized information and relevant ads on our website based on analysis and combination of online data and (personal) data such as click behavior, product ownership. |
1 year forever 1 week unknown |
_dc_gtm_UA |
Performance/Analytics cookies |
This cookie is associated with Google Universal Analytics and is used to record the number of service requests. |
1 minute |
_gid |
Performance/Analytics cookies |
This cookie is associated with Google Universal Analytics and is used to store and update a unique value for each page visited. |
1 day |
_ga |
Performance/Analytics cookies |
This cookie is associated with Google Universal Analytics. This cookie is used to distinguish unique users by assigning a randomly generated number as a customer identifier. It is included in every page request on a site and used to calculate visitor, session and campaign data for the sites analytics reports. |
2 years |
_hjAbsoluteSessionInProgress |
Performance/Analytics cookies |
This cookie is associated with Hotjar. This cookie is used to distinguish unique visits to the Website. |
1 session |
_hjFirstSeen |
Performance/Analytics cookies |
This cookie is associated with Hotjar. It is set to identify the first session of a new user. It stores a true/false value indicating whether this was the first time Hotjar saw this user. |
1 session |
_hjTLDTest |
Performance/Analytics cookies |
This cookie is associated with Hotjar. When the Hotjar script is run, it attempts to determine the most common cookie path. This is done so that cookies can be shared across subdomains. |
1 session |
_hjid |
Performance/Analytics cookies |
This cookie is associated with Hotjar. This cookie is used to store a unique User ID. |
1 year |
_hjIncludedInPageviewSample |
Performance/Analytics cookies |
This cookie is associated with Hotjar. This cookie is set to let Hotjar know if that user is included in the data sample defined by the Website's pageview limit. |
30 minutes |
has_js |
Functional cookies |
This cookie is used to perform functionalities across web pages. |
1 session |
8.4 Your consent
Upon your first visit to our website, you will be asked to accept or decline cookies. With this consent, you agree to the different types of cookies Club Brugge uses on its website.
8.5 Manage cookies
You can reject or block cookies by changing the configuration parameters of your navigation system. Disabling cookies may prevent you from using certain functionalities of the website.
More information on how to set your browser can be found at the following links:
Google Chrome
https://support.google.com/chrome/answer/95647?hl=en&sjid=14654691705610680415-EU
Safari
https://support.apple.com/kb/PH19214?locale=en_US
Microsoft Edge
Mozilla Firefox
https://support.mozilla.org/en-US/kb/clear-cookies-and-website-data-single-domain-android
Currently, some browsers offer a "do not track" or "DNT" option that sends a signal to websites visited to indicate a visitor's tracking preference. Club Brugge does not currently respond to these signals because no common industry standard for DNT has been adopted by industry groups, technology companies or regulators. The third parties that place cookies on our website may or may not react to any such signal.
Keep in mind that changing settings can cause a Web site to stop working as expected.
More information about cookies can also be found at the following link:
http://www.allaboutcookies.org/
More information on behavioral online advertising and online privacy can be found at the following link:
http://www.youronlinechoices.eu/
[BD1]Cookie Policy needs to be reviewed in light of what was published on the website (https://www.clubbrugge.be/nl/club-brugge-cookie-policy).
[BD2]To be verified whether the below is still correct. This table dates from a previous version.