1. INTRODUCTION<\/strong><\/h2>\nThis Privacy Policy (\u201cPrivacy Policy<\/strong>\u201d) relates to (i) the the website\u00a0https:\/\/thefirthgroup.com and\/or any sub-website and\/or associated domains (and\/or sub-domains) (the \u201cSite<\/strong>\u201d), (iii) the owner of the Site , whether direct or indirect, including but not limited to The Firth Group (hereinafter collectively referred to as \u201cWe<\/strong>\u201d, \u201cUs<\/strong>\u201d, \u201cOur<\/strong>\u201d, \u201cOurselves<\/strong>\u201d and\/or \u201cMediarex<\/strong>\u201d).<\/p>\n\u201cYou<\/strong>\u201d, \u201cYour<\/strong>\u201d and \u201cUser<\/strong>\u201d refer to an identified or identifiable natural person being the User of the Site, Apps and\/or client (or prospective client) of any of Our services.<\/p>\nThis Privacy Policy provides detailed, layered information as to how and why We process Personal Data (via the Site, any of Our Apps, or otherwise) as well as detailed information about Your various rights. We are committed to protecting Your privacy and handling your information in an open and transparent manner.<\/p>\n
We strongly encourage You to read this Privacy Policy with care.\u00a0Please contact Us for any clarification You may need<\/strong>. We would be happy to provide You with any information You may need.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n2. CONTENTS OF THIS PRIVACY POLICY<\/strong>\u00a0<\/strong><\/h2>\n\n- Introduction<\/strong><\/li>\n
- Contents of this Privacy Policy<\/strong><\/li>\n
- Applicable Laws<\/strong><\/li>\n
- What is personal data?<\/strong><\/li>\n
- Personal data we collect about you<\/strong><\/li>\n
- How and why we collect personal data<\/strong><\/li>\n
- What we use your personal data for (purpose of processing)<\/strong><\/li>\n
- Special note on consent<\/strong><\/li>\n
- Accuracy of personal data<\/strong><\/li>\n
- Direct marketing<\/strong><\/li>\n
- Transfers to third countries<\/strong><\/li>\n
- Internet communications<\/strong><\/li>\n
- Authorized disclosures<\/strong><\/li>\n
- Sharing of personal data with other categories of recipients<\/strong><\/li>\n
- Security measures<\/strong><\/li>\n
- Retention periods<\/strong><\/li>\n
- Processing for research and statistical reasons<\/strong><\/li>\n
- Links to third-party sources<\/strong><\/li>\n
- Cookies<\/strong><\/li>\n
- Minors<\/strong><\/li>\n
- Your rights under the data protection laws<\/strong><\/li>\n
- Updates<\/strong><\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n\n\n
3. APPLICABLE LAWS<\/strong><\/h2>\nAs an entity established in Malta (EU), the main privacy laws that are applicable to Us in so far as You are concerned, are the following:<\/p>\n
\n- The\u00a0Maltese Data Protection Act<\/strong>\u00a0(Chapter 586 of the Laws of Malta) as well as the various subsidiary legislation issued under the same \u2013 the \u2018DPA\u2019 as may be amended or replaced from time to time;<\/li>\n
- The\u00a0Regulation (EU) 2016\/679<\/strong>\u00a0of the European Parliament and of the Council of 27 April 2016 and the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation<\/strong>) \u2013 the \u201cGDPR<\/strong>\u201d as may be amended or replaced from time to time; and<\/li>\n
- Any successor legislation to the DPA and\/or the GDPR.<\/li>\n<\/ul>\n
All the above is referred to collectively as the \u201cData Protection Laws<\/strong>\u201d<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n4. WHAT IS PERSONAL DATA<\/strong><\/h2>\n\u201cPERSONAL DATA\u201d<\/strong>\u00a0means any information that identifies You as an individual or that relates to an identifiable individual.<\/p>\nWhenever it is not possible or feasible for Us to make use of anonymous and\/or anonymized data (in a manner that does not identify any Users of the Site, Apps or customers of Our services), We are nevertheless committed to protecting Your privacy and the security of Your Personal Data at all times. We collect Personal Data in various ways, digitally via the Site or the Apps (either when you choose to provide Us with certain data or in some cases automatically, or from third parties).<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n5. PERSONAL DATA WE COLLECT ABOUT YOU<\/strong><\/h2>\nWe collect various categories of Personal Data from you, namely:<\/p>\n
\n\n\nCategory of Personal Data<\/u><\/strong><\/td>\nDescription<\/u><\/strong><\/td>\n<\/tr>\n\nContact Details<\/td>\n Full legal name, email address, residential address and mobile\/phone number.<\/td>\n<\/tr>\n \nLocational<\/td>\n IP address of the computer connected to the internet, location data through the mobile phone and Apps used and GPS data<\/td>\n<\/tr>\n \nNational Identifier<\/td>\n A number or code attributed to you by a government to identify who you are, such as a passport number or national identity number (including nationality)<\/td>\n<\/tr>\n \nUsage date<\/td>\n Details about how and when you use Our services (our Site and\/or Apps).<\/td>\n<\/tr>\n \nDocumentary Data<\/td>\n Details about You that are stored in documents in different formats, or copies of them. This includes passports, identity cards and utility bills that confirm Your identity and prove the residential address; as well as any other additional documentation as deemed necessary by Our compliance team.<\/td>\n<\/tr>\n \nSpecial types of data<\/td>\n Data Protection Laws treat some types of personal information as special, which We will only collect and use if the law allows Us to do so. Such data consist of:\u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Political connections<\/p>\n\u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Criminal convictions and offences<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n
<\/div>\n\n\n6. HOW AND WHY WE COLLECT PERSONAL DATA<\/strong><\/h2>\nAs a general rule, We do not collect any Personal Data, that is, information that identifies You as an individual other than that which You choose to provide to Us such as the data (including Contact Details) You provide when registering with our Site or Apps, when contacting Us with enquiries relating to Our services, when subscribing to any service offered by Us or via Our Site or Apps, such as any newsletters as may be issued by Us from time to time or even when subscribing to any offers We (and\/or Our affiliates and\/or corporate partners) may offer from time to time.<\/p>\n
However, we may also collect personal data from other sources, including data companies, publicly accessible databases, joint marketing partners, social media platform and other third parties. We may also receive Personal Data about You from third parties when We need to confirm Your contact details. Should this be the case, We will take all measures as required by law to further inform You about the source of such Personal Data as well as the categories of Personal Data We collect and process. There are certain instances at law where We are specifically forbidden from disclosing to You such activity (for example, when carrying out due diligence for anti-money laundering purposes).<\/p>\n
For information about the Personal Data that We may collect automatically via the Site or Apps, please see the Cookies section below.<\/p>\n
Unless otherwise specified and subject to various controls, as a general rule, We only collect Personal Data (from You or elsewhere) that We:<\/p>\n
\n- Need to be able to provide You with the services You request from Us;<\/li>\n
- Are legally required to collect\/use and to keep for a predetermined period of time<\/li>\n
- Believe to be necessary for Our legitimate business interests<\/li>\n<\/ul>\n
A detailed description of the reasons why we process specific categories of personal data as well as the corresponding legal ground(s) for doing so, please see the \u2018What We Use Your Personal Data For (Purpose of Processing)\u2019 below.<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n7. WHAT WE USE YOUR PERSONAL DATA FOR (PURPOSE OF PROCESSING)<\/strong><\/h2>\nThe Data Protection Laws permit us to use personal data only if We have a proper reason to do so. GDPR states that we must have one or more of these reasons:<\/p>\n
\n- To render the services You have contracted to<\/li>\n
- When it is Our legal duty<\/li>\n
- When it is in Our legitimate interest \u2013 this refers to when We have a business or commercial reason to use Your personal data. If We rely on our legitimate interest, We will tell you what that is<\/li>\n
- When You consent to it\u00a0<\/strong><\/li>\n<\/ul>\n
Below is a description of what We use Your personal Data for and the corresponding legal ground(s) we rely on for doing so.<\/p>\n
Please note that where we rely on Your consent, this can be withdrawn at will<\/strong>.<\/p>\n\n\n\nPurpose of the processing<\/u><\/strong><\/td>\n\u00a0Categories of personal data<\/u><\/strong><\/td>\nLegal basis for processing<\/u><\/strong><\/td>\n<\/tr>\n\nSet up an account on Our system<\/td>\n \u00b7 Contact Details\u00b7 Documentary Data<\/p>\n\u00b7 National Identifiers<\/p>\n
\u00b7 Special category (particularly political connections)<\/td>\n
\u00b7 Contractual Necessity\u00b7 Legitimate interest (to ensure we have an accurate account)<\/p>\n\u00b7 Legal duty (for due diligence purposes)<\/td>\n<\/tr>\n
\nTo manage Our relationship with you<\/td>\n \u00b7 Contact Details<\/td>\n \u00b7 Contractual necessity\u00b7 Compliance with the legal obligations<\/td>\n<\/tr>\n \nTo establish and investigate any suspicious behavior in order to protect our business from any risk, fraud or other illegal activities (such as money laundering or terrorist financing)<\/td>\n \u00b7 Documentary Data\u00b7 Contact Details<\/td>\n \u00b7 Compliance with legal obligations\u00b7 Legitimate interest \u2013 detection and prevention of fraud or other illegal activities<\/td>\n<\/tr>\n \nSubscribing to a newsletter or mailing list<\/td>\n \u00b7 Contact details<\/td>\n \u00b7 Your consent<\/td>\n<\/tr>\n \nEvaluating Your queries and\/or requests You send Us to use\/receive any of Our services (including customer support services)<\/td>\n \u00b7 Contact Details<\/td>\n \u00b7 Contractual necessity\u00b7 Legitimate interest (to be able to attend to Your queries)<\/td>\n<\/tr>\n \nMaintain and update the user accounts records on Our system<\/td>\n \u00b7 Contact details<\/td>\n \u00b7 Contractual necessity\u00b7 Legitimate interest (to ensure We have an accurate user account record)<\/td>\n<\/tr>\n \nContinue to manage Our relationship with You<\/td>\n \u00b7 Contact details<\/td>\n \u00b7 Contractual necessity\u00b7 Compliance with legal obligations<\/td>\n<\/tr>\n \nComply with legal and regulatory obligations (including the detection and prevention of any financial crime)<\/td>\n \u00b7 Documentary Data\u00b7 Special types of data<\/p>\n\u00b7 National Identifiers<\/p>\n
\u00b7 Locational Data<\/td>\n
\u00b7 Legal obligations<\/td>\n<\/tr>\n \nTo provide You with Our services \u2013 especially those provided via the App (including location services)<\/td>\n \u00b7 Contact Details\u00b7 Tracking Data<\/td>\n \u00b7 Contractual Necessity<\/td>\n<\/tr>\n \nTo develop and manage our brands, products and services<\/td>\n \u00b7 Contact Details<\/td>\n \u00b7 Legitimate interest (to develop our products and services)<\/td>\n<\/tr>\n \nInternal data analysis<\/td>\n \u00b7 Contact Details\u00b7 Tracking Data<\/td>\n \u00b7 Contractual necessity<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\nShould We need to process Your data for a new purpose in the future, which is entirely unrelated to the above, We will inform You of such processing in advance and You may exercise Your applicable rights (as explained below) in relation to such processing.<\/p>\n
Finally, do note that without certain Personal Data relating to You, We may not be in the position to provide some or all of the services You expect from Us or even to guarantee the full functionality of Our Site and\/or App.<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n9. ACCURACY OF PERSONAL DATA<\/strong><\/h2>\nAll reasonable efforts are made to keep any Personal Data We may hold about You up-to-date and as accurate as possible. You can check the information that We hold about You at any time by contacting Us in the manner explained below. If You find any inaccuracies, We will correct them and where required, delete them as necessary. Please see below for a detailed list of Your legal rights in terms of any applicable Data Protection Laws.<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n10. DIRECT MARKETING<\/strong><\/h2>\nWe only send mail messages, emails, sms and other communications relating to marketing where We are authorized to do so at law. In most cases We rely on Your consent to do so (especially where We use electronic communications). If, at any time, You no longer wish to receive direct marketing communications from Us please let Us know by contacting Us at the details below or update Your preference on any of Our Site(s) or Apps.<\/p>\n
In the case of direct marketing sent by electronic communications (where We are legally authorized to do so) You shall be given an easy way of opting out (or unsubscribing) from any such communications.<\/p>\n
No mobile information will be shared with third parties\/affiliates for marketing\/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.<\/b><\/p>\n
Please note that even if You withdraw any consent You may have given Us or if You object to receiving such direct marketing material from Us (in those cases where We do not need Your consent), from time to time We may still need to send You certain important communications from which You cannot opt out. \u00a0<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n11. TRANSFERS TO THIRD COUNTRIES<\/strong><\/h2>\nAs a general principle, the Personal Data We process about You (collected via any of our Sites or Apps or otherwise) will be stored and processed within the European Union (EU)\/European Economic Area (EEA) or any other non-EEA country deemed by the European Commission to offer an adequate level of protection.<\/p>\n
In some cases, it may be necessary for Us to transfer Your Personal Data to a non-EEA country not considered by the European Commission to offer an adequate level of protection. In such cases, apart from all appropriate safeguards that We implement, in any case, to protect Your Personal Data, We have put in place additional adequate measures. For example, We will ensure that the recipient is bound by the EU Standard Contractual Clauses (the EU Model Clauses) designed to protect Your Personal Data as though it were an intra-EEA transfer. You are welcome to contact Us for more information regarding the adequate safeguards we have in place in relation to such data transfers.<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n12. INTERNET COMMUNICATIONS<\/strong><\/h2>\nYou will be aware that data sent via the Internet may be transmitted across international borders even where sender and receiver of information are located in the same country. We cannot be held responsible for anything done or omitted to be done by You or any third party in connection with any Personal Data prior to Our receiving it including but not limited to any transfers of Personal Data from You to Us via a country having a lower level of data protection than that in place in the European Union, and this, by any technological means whatsoever.<\/p>\n
Moreover, We shall accept no responsibility or liability whatsoever for the security of Your data while in transit through the internet unless Our responsibility results explicitly from a law having effect in Malta.<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n13. AUTHORISED DISCLOSURES<\/strong><\/h2>\nWithout prejudice to anything contained in this Privacy Policy and in the interest of full transparency, We reserve the right to disclose (and otherwise process) any relevant Personal Data relating to You which We may be processing (including in certain cases relevant IP addresses) to authorized third parties in or outside the EU\/EEA if such disclosures are allowed under the Data Protection Laws (whether or not You have provided Your consent) including but not limited to the following instances:<\/p>\n
\n- For the purpose of preventing, detecting or suppressing fraud (for example, if You provide false or deceptive information about Yourself or attempt to pose as someone else, We may disclose any information We may have about You in Our possession so as to assist any type of investigation into Your actions);<\/li>\n
- In the event of TFG or any of its subsidiaries being involved in a merger, sale, restructure, acquisition, joint venture, assignment or transfer (of business, shares, assets or otherwise);<\/li>\n
- To protect and defend Our rights (including the right to property), safety, or to those of Our affiliates, of Users of Our Site or even You own;<\/li>\n
- To protect against abuse, misuse or unauthorize use of Our Site or App;<\/li>\n
- For any purpose that may be necessary for the performance of any agreement You may have entered into with Us (including the request for provision of services by third parties) or in order to take steps at Your request prior to entering into a contract;<\/li>\n
- To comply with any legal obligations such as may arise by way of response to any Court subpoena or order or similar official request for Personal Data; or<\/li>\n
- As may otherwise be specifically allowed or required by or under any applicable law (for example, under anti-money laundering legislation).<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n
14. SHARING OF PERSONAL DATA WITH OTHER CATEGORIES OF RECIPIENTS<\/strong><\/h2>\nRelevant data will also be disclosed or shared as appropriate (and in all cases in line with the Data Protection Laws) to\/with members and staff of TFG , to\/with other affiliated entities of TFG and\/or sub-contractors established within the European Union if pertinent to any of the purposes listed in this Privacy Policy (including to\/with Our services providers who facilitate the functionality of our Site and App and\/or any service You may require).<\/p>\n
Any such authorized disclosures will be done in accordance with the Data Protection Laws (for example all Our processors are contractually bound by the requirements in the said Data Protection Laws, including a strict obligation to keep any information they receive confidential and to ensure that their employees\/personnel are also bound by similar obligations). The said service providers are also bound by a number of other obligations (in -particular, Article 28 of the GDPR).<\/p>\n
Your Personal Data will also be shared with our business partners, particularly the sports teams whose branded goods and services You have specifically opted to use, buy or interact through our Site and\/or App. However, your Personal Data will never be processed by such third parties for their marketing purposes (unless You give Your consent thereto).<\/p>\n
The third parties who We may disclose to and\/or share Your Personal Data with are, at the date of this Privacy Policy, the following:<\/p>\n
\n\n\nCATEGORY OF RECIPIENT<\/strong><\/td>\nPURPOSE OF PROCESSING<\/strong><\/td>\n<\/tr>\n\nCloud Service Provider<\/td>\n Hosting of data under state-of-the art security protocols and our exclusive control<\/td>\n<\/tr>\n \nIT Service Providers<\/td>\n Maintenance and support of our IT systems\/Site(s) \u2013 with restricted access and under our strict controls<\/td>\n<\/tr>\n \nCustomer Support Software Providers<\/td>\n Provision of a customer support software in order to provide our users with a high level customer support with restricted access and our strict controls.<\/td>\n<\/tr>\n \nMarketing and Customer Retention Management Tools<\/td>\n Provision of marketing email and communications sendouts under our strict control and management<\/td>\n<\/tr>\n \nPublic Authorities<\/td>\n Compliance with legal obligations and only after verifications are made into necessity of disclosure<\/td>\n<\/tr>\n \nOur independent financial and legal advisors<\/td>\n Provision of legal and financial support to TFG and affiliated entities<\/td>\n<\/tr>\n \nBusiness partners with whom we have a co-operation or partnership agreement<\/td>\n To facilitate and improve the services and goods rendered to You, including the tailoring of such services and goods, if deemed appropriate<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n\n\n15. SECURITY MEASURES<\/strong><\/h2>\nThe Personal Data which We may hold (and\/or transfer to any affiliates\/partners\/subcontractors as the case may be) will be held securely in accordance with Our internal security policy and the applicable law.<\/p>\n
We use reasonable efforts to safeguard the confidentiality of any and\/or all Personal Data that We may process relating to You and regularly review and enhance Our technical, physical and managerial procedures so as to ensure that Your Personal Data is protected from:<\/p>\n
\n- Unauthorized access<\/li>\n
- Improper use or disclosure<\/li>\n
- Unauthorized modification<\/li>\n
- Unlawful destruction or accidental loss<\/li>\n<\/ul>\n
We have implemented security policies, rules and technical and organizational measures to protect the Personal Data that We may have under Our control. All our members, staff and data processors (including specific subcontractors and cloud service providers established within the European Union), who may have access to and are associated with the processing of Personal Data, are further obliged (under contract) to respect the confidentiality of Our Users\u2019 or clients\u2019 Personal Data as well as other obligations as imposed by the Data Protection Laws.<\/p>\n
Despite all the above, We cannot guarantee that a data transmission or a storage system can ever be 100% secure. Authorized third parties, and external\/third-party service providers, with permitted access to Your Personal Data (as explained in this Privacy Policy) are specifically required to apply appropriate technical and organizational security measures that may be necessary to safeguard the Personal Data being processed from unauthorized or accidental disclosure, loss or destruction and from any unlawful forms of processing.<\/p>\n
As stated above, the said service providers are also bound by a number of other obligations in line with the Data Protection Laws (particularly, Article 28 of the GDPR).<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n16. RETENTION PERIODS<\/strong><\/h2>\nWe will retain Your Personal Data only for as long as is necessary (taking into consideration the purpose for which it was originally obtained). The criteria We use to determine what is \u2018necessary\u2019 depends on the particular Personal Data in question and the specific relationship We have with You (including its duration).<\/p>\n
Our standard practice is to determine whether there is\/are any specific EU and\/or Maltese law(s) (for example tax or corporate laws) permitting or even obliging Us to keep certain Personal Data for a certain period of time (in which case We will keep the Personal Data for the maximum period indicated by any such law).<\/p>\n
We would also have to determine whether there are any laws and\/or contractual provisions that may be invoked against Us by You and\/or third parties and if so, what the prescriptive periods for such actions are (this is usually five (5) years). In the latter case, We will keep any relevant Personal Data that We may need to defend Ourselves against any claim(s), challenge(s) or other such action(s) by You and\/or third parties for such time as is necessary.<\/p>\n
We will retain your Personal Data on Our systems for the longest of the following periods:<\/p>\n
\n- As long as You are a customer or user of Our services<\/li>\n
- Any retention period that is required by applicable law<\/li>\n
- The end of the period in which litigation or investigations might arise in respect of Our products or services<\/li>\n<\/ul>\n
Where Your Personal Data is no longer required by Us, We will either securely delete or anonymize the Personal Data in question.<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n17. PROCESSING FOR RESEARCH AND STATISTICAL REASONS<\/strong><\/h2>\nResearch and statistics using User or client information is only carried out so that We may understand Our Users\u2019 and\/or clients\u2019 needs and to develop and improve Our services\/activities. In any case, We will always ensure to obtain any consent We may legally require from You beforehand. As in all other cases, We will also ensure to implement all appropriate safeguards as may be necessary.<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n18. LINKS TO THIRD-PARTY SOURCES<\/strong><\/h2>\nLinks that We may provide to third-party websites are clearly marked and We are not in any way whatsoever responsible for (nor can We be deemed to endorse in any way) the content of such websites (including any applicable privacy policies or data processing operations of any kind). We suggest that You should the privacy policies of any such third-party websites.<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n19. COOKIES<\/strong><\/h2>\nWhen You visit Our site or use our App, We will collect certain categories of Personal Data automatically through the use of cookies and similar technologies.<\/p>\n
For more detailed information including what cookies are and how and why We process such data in this manner (including the difference between \u2018essential\u2019 and \u2018non-essential\u2019 cookies) please read Our detailed Cookies Policy.<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n20. MINORS<\/strong><\/h2>\nOur Site, App and services are not intended to be used by any person under the age of sixteen (16) and therefore We will never intentionally collect any Personal Data from such persons. If You are under the age of consent, please consult and get Your parent\u2019s or legal guardian\u2019s permission to use the site, App and any of Our other services.<\/p>\n
We shall consider that any Personal Data of any persons under the age of sixteen (16) received by Us, shall be sent with the proper authority from the holder of parental responsibility over the child and that the sender can demonstrate such authority at any time, upon Our request.<\/p>\n<\/div>\n<\/div>\n
<\/div>\n\n\n21. YOUR RIGHTS UNDER THE DATA PROTECTION LAWS<\/strong><\/h2>\nBefore addressing any request You make with Us, We may first need to verify Your identity.<\/p>\n
As explained in the Retention Periods section above, We may need to keep certain Personal Data for compliance with Our legal retention obligations but also to complete transactions that You requested prior to the change or deletion that You requested.<\/p>\n
Under certain circumstances, by law You have the right to:<\/p>\n
\n- Be informed in a clear, transparent and easily understandable way about how We use Your Personal Data and about your rights.<\/li>\n<\/ul>\n
\n- Request access to your personal information (commonly known as a \u201cdata subject access request\u201d). This enables you to receive a copy of the Personal Data we hold about You and to check that We are lawfully processing it.<\/li>\n<\/ul>\n
\n- Request rectification of the Personal Data that we hold about you. This enables You to have any incomplete or inaccurate information We hold about You corrected.<\/li>\n<\/ul>\n
\n- Request erasure of Your Personal Data. This enables You to ask Us to delete or remove personal information where there is no good reason for Us continuing to process it (for instance, we may need to continue using your Personal Data to comply with Our regulatory and legal obligations).<\/li>\n<\/ul>\n
\n- Object to the processing of Your Personal Data where We are relying on a legitimate interest (or those of a third party) and there is something that makes You want to object to Us using Your Personal Data and we do not have a legitimate basis for doing so, which overrides Your rights, interests and freedoms (for instance, We may need it to defend a legal case). You also have the right to object when We are processing your personal information for direct marketing purposes.<\/li>\n<\/ul>\n
\n- Request the restriction of processing of Your Personal Data. This enables You to ask us to suspend the processing of Personal Data about You, for example if You want Us to establish its accuracy or the reason for processing it.<\/li>\n<\/ul>\n
\n- Request the transfer of Your Personal Data to another party where you provided it to Us and We are using it based on your consent, or to carry out a contract with You, and we process it using automated means.<\/li>\n<\/ul>\n
\n- Withdraw consent. In the limited circumstances where We are relying on Your consent (as opposed to the other legal grounds set out above) to the collection, processing and transfer of your Personal Data for a specific purpose, You have the right to withdraw Your consent for that specific processing at any time. Once we have received notification that You have withdrawn Your consent, We will no longer process Your Personal Data for the purpose or purposes You originally agreed to, unless We have a legitimate interest in doing so or We are bound by regulatory requirements to continue doing so for a defined period of time.<\/li>\n<\/ul>\n
\u201cYou<\/strong>\u201d, \u201cYour<\/strong>\u201d and \u201cUser<\/strong>\u201d refer to an identified or identifiable natural person being the User of the Site, Apps and\/or client (or prospective client) of any of Our services.<\/p>\n This Privacy Policy provides detailed, layered information as to how and why We process Personal Data (via the Site, any of Our Apps, or otherwise) as well as detailed information about Your various rights. We are committed to protecting Your privacy and handling your information in an open and transparent manner.<\/p>\n We strongly encourage You to read this Privacy Policy with care.\u00a0Please contact Us for any clarification You may need<\/strong>. We would be happy to provide You with any information You may need.<\/p>\n<\/div>\n<\/div>\n As an entity established in Malta (EU), the main privacy laws that are applicable to Us in so far as You are concerned, are the following:<\/p>\n All the above is referred to collectively as the \u201cData Protection Laws<\/strong>\u201d<\/p>\n<\/div>\n<\/div>\n \u201cPERSONAL DATA\u201d<\/strong>\u00a0means any information that identifies You as an individual or that relates to an identifiable individual.<\/p>\n Whenever it is not possible or feasible for Us to make use of anonymous and\/or anonymized data (in a manner that does not identify any Users of the Site, Apps or customers of Our services), We are nevertheless committed to protecting Your privacy and the security of Your Personal Data at all times. We collect Personal Data in various ways, digitally via the Site or the Apps (either when you choose to provide Us with certain data or in some cases automatically, or from third parties).<\/p>\n<\/div>\n<\/div>\n We collect various categories of Personal Data from you, namely:<\/p>\n \u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Criminal convictions and offences<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n As a general rule, We do not collect any Personal Data, that is, information that identifies You as an individual other than that which You choose to provide to Us such as the data (including Contact Details) You provide when registering with our Site or Apps, when contacting Us with enquiries relating to Our services, when subscribing to any service offered by Us or via Our Site or Apps, such as any newsletters as may be issued by Us from time to time or even when subscribing to any offers We (and\/or Our affiliates and\/or corporate partners) may offer from time to time.<\/p>\n However, we may also collect personal data from other sources, including data companies, publicly accessible databases, joint marketing partners, social media platform and other third parties. We may also receive Personal Data about You from third parties when We need to confirm Your contact details. Should this be the case, We will take all measures as required by law to further inform You about the source of such Personal Data as well as the categories of Personal Data We collect and process. There are certain instances at law where We are specifically forbidden from disclosing to You such activity (for example, when carrying out due diligence for anti-money laundering purposes).<\/p>\n For information about the Personal Data that We may collect automatically via the Site or Apps, please see the Cookies section below.<\/p>\n Unless otherwise specified and subject to various controls, as a general rule, We only collect Personal Data (from You or elsewhere) that We:<\/p>\n A detailed description of the reasons why we process specific categories of personal data as well as the corresponding legal ground(s) for doing so, please see the \u2018What We Use Your Personal Data For (Purpose of Processing)\u2019 below.<\/p>\n<\/div>\n<\/div>\n The Data Protection Laws permit us to use personal data only if We have a proper reason to do so. GDPR states that we must have one or more of these reasons:<\/p>\n Below is a description of what We use Your personal Data for and the corresponding legal ground(s) we rely on for doing so.<\/p>\n Please note that where we rely on Your consent, this can be withdrawn at will<\/strong>.<\/p>\n \u00b7 National Identifiers<\/p>\n \u00b7 Special category (particularly political connections)<\/td>\n \u00b7 Legal duty (for due diligence purposes)<\/td>\n<\/tr>\n \u00b7 National Identifiers<\/p>\n \u00b7 Locational Data<\/td>\n Should We need to process Your data for a new purpose in the future, which is entirely unrelated to the above, We will inform You of such processing in advance and You may exercise Your applicable rights (as explained below) in relation to such processing.<\/p>\n Finally, do note that without certain Personal Data relating to You, We may not be in the position to provide some or all of the services You expect from Us or even to guarantee the full functionality of Our Site and\/or App.<\/p>\n<\/div>\n<\/div>\n All reasonable efforts are made to keep any Personal Data We may hold about You up-to-date and as accurate as possible. You can check the information that We hold about You at any time by contacting Us in the manner explained below. If You find any inaccuracies, We will correct them and where required, delete them as necessary. Please see below for a detailed list of Your legal rights in terms of any applicable Data Protection Laws.<\/p>\n<\/div>\n<\/div>\n We only send mail messages, emails, sms and other communications relating to marketing where We are authorized to do so at law. In most cases We rely on Your consent to do so (especially where We use electronic communications). If, at any time, You no longer wish to receive direct marketing communications from Us please let Us know by contacting Us at the details below or update Your preference on any of Our Site(s) or Apps.<\/p>\n In the case of direct marketing sent by electronic communications (where We are legally authorized to do so) You shall be given an easy way of opting out (or unsubscribing) from any such communications.<\/p>\n No mobile information will be shared with third parties\/affiliates for marketing\/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.<\/b><\/p>\n Please note that even if You withdraw any consent You may have given Us or if You object to receiving such direct marketing material from Us (in those cases where We do not need Your consent), from time to time We may still need to send You certain important communications from which You cannot opt out. \u00a0<\/strong><\/p>\n<\/div>\n<\/div>\n As a general principle, the Personal Data We process about You (collected via any of our Sites or Apps or otherwise) will be stored and processed within the European Union (EU)\/European Economic Area (EEA) or any other non-EEA country deemed by the European Commission to offer an adequate level of protection.<\/p>\n In some cases, it may be necessary for Us to transfer Your Personal Data to a non-EEA country not considered by the European Commission to offer an adequate level of protection. In such cases, apart from all appropriate safeguards that We implement, in any case, to protect Your Personal Data, We have put in place additional adequate measures. For example, We will ensure that the recipient is bound by the EU Standard Contractual Clauses (the EU Model Clauses) designed to protect Your Personal Data as though it were an intra-EEA transfer. You are welcome to contact Us for more information regarding the adequate safeguards we have in place in relation to such data transfers.<\/p>\n<\/div>\n<\/div>\n You will be aware that data sent via the Internet may be transmitted across international borders even where sender and receiver of information are located in the same country. We cannot be held responsible for anything done or omitted to be done by You or any third party in connection with any Personal Data prior to Our receiving it including but not limited to any transfers of Personal Data from You to Us via a country having a lower level of data protection than that in place in the European Union, and this, by any technological means whatsoever.<\/p>\n Moreover, We shall accept no responsibility or liability whatsoever for the security of Your data while in transit through the internet unless Our responsibility results explicitly from a law having effect in Malta.<\/p>\n<\/div>\n<\/div>\n Without prejudice to anything contained in this Privacy Policy and in the interest of full transparency, We reserve the right to disclose (and otherwise process) any relevant Personal Data relating to You which We may be processing (including in certain cases relevant IP addresses) to authorized third parties in or outside the EU\/EEA if such disclosures are allowed under the Data Protection Laws (whether or not You have provided Your consent) including but not limited to the following instances:<\/p>\n Relevant data will also be disclosed or shared as appropriate (and in all cases in line with the Data Protection Laws) to\/with members and staff of TFG , to\/with other affiliated entities of TFG and\/or sub-contractors established within the European Union if pertinent to any of the purposes listed in this Privacy Policy (including to\/with Our services providers who facilitate the functionality of our Site and App and\/or any service You may require).<\/p>\n Any such authorized disclosures will be done in accordance with the Data Protection Laws (for example all Our processors are contractually bound by the requirements in the said Data Protection Laws, including a strict obligation to keep any information they receive confidential and to ensure that their employees\/personnel are also bound by similar obligations). The said service providers are also bound by a number of other obligations (in -particular, Article 28 of the GDPR).<\/p>\n Your Personal Data will also be shared with our business partners, particularly the sports teams whose branded goods and services You have specifically opted to use, buy or interact through our Site and\/or App. However, your Personal Data will never be processed by such third parties for their marketing purposes (unless You give Your consent thereto).<\/p>\n The third parties who We may disclose to and\/or share Your Personal Data with are, at the date of this Privacy Policy, the following:<\/p>\n The Personal Data which We may hold (and\/or transfer to any affiliates\/partners\/subcontractors as the case may be) will be held securely in accordance with Our internal security policy and the applicable law.<\/p>\n We use reasonable efforts to safeguard the confidentiality of any and\/or all Personal Data that We may process relating to You and regularly review and enhance Our technical, physical and managerial procedures so as to ensure that Your Personal Data is protected from:<\/p>\n We have implemented security policies, rules and technical and organizational measures to protect the Personal Data that We may have under Our control. All our members, staff and data processors (including specific subcontractors and cloud service providers established within the European Union), who may have access to and are associated with the processing of Personal Data, are further obliged (under contract) to respect the confidentiality of Our Users\u2019 or clients\u2019 Personal Data as well as other obligations as imposed by the Data Protection Laws.<\/p>\n Despite all the above, We cannot guarantee that a data transmission or a storage system can ever be 100% secure. Authorized third parties, and external\/third-party service providers, with permitted access to Your Personal Data (as explained in this Privacy Policy) are specifically required to apply appropriate technical and organizational security measures that may be necessary to safeguard the Personal Data being processed from unauthorized or accidental disclosure, loss or destruction and from any unlawful forms of processing.<\/p>\n As stated above, the said service providers are also bound by a number of other obligations in line with the Data Protection Laws (particularly, Article 28 of the GDPR).<\/p>\n<\/div>\n<\/div>\n We will retain Your Personal Data only for as long as is necessary (taking into consideration the purpose for which it was originally obtained). The criteria We use to determine what is \u2018necessary\u2019 depends on the particular Personal Data in question and the specific relationship We have with You (including its duration).<\/p>\n Our standard practice is to determine whether there is\/are any specific EU and\/or Maltese law(s) (for example tax or corporate laws) permitting or even obliging Us to keep certain Personal Data for a certain period of time (in which case We will keep the Personal Data for the maximum period indicated by any such law).<\/p>\n We would also have to determine whether there are any laws and\/or contractual provisions that may be invoked against Us by You and\/or third parties and if so, what the prescriptive periods for such actions are (this is usually five (5) years). In the latter case, We will keep any relevant Personal Data that We may need to defend Ourselves against any claim(s), challenge(s) or other such action(s) by You and\/or third parties for such time as is necessary.<\/p>\n We will retain your Personal Data on Our systems for the longest of the following periods:<\/p>\n Where Your Personal Data is no longer required by Us, We will either securely delete or anonymize the Personal Data in question.<\/p>\n<\/div>\n<\/div>\n Research and statistics using User or client information is only carried out so that We may understand Our Users\u2019 and\/or clients\u2019 needs and to develop and improve Our services\/activities. In any case, We will always ensure to obtain any consent We may legally require from You beforehand. As in all other cases, We will also ensure to implement all appropriate safeguards as may be necessary.<\/p>\n<\/div>\n<\/div>\n Links that We may provide to third-party websites are clearly marked and We are not in any way whatsoever responsible for (nor can We be deemed to endorse in any way) the content of such websites (including any applicable privacy policies or data processing operations of any kind). We suggest that You should the privacy policies of any such third-party websites.<\/p>\n<\/div>\n<\/div>\n When You visit Our site or use our App, We will collect certain categories of Personal Data automatically through the use of cookies and similar technologies.<\/p>\n For more detailed information including what cookies are and how and why We process such data in this manner (including the difference between \u2018essential\u2019 and \u2018non-essential\u2019 cookies) please read Our detailed Cookies Policy.<\/p>\n<\/div>\n<\/div>\n Our Site, App and services are not intended to be used by any person under the age of sixteen (16) and therefore We will never intentionally collect any Personal Data from such persons. If You are under the age of consent, please consult and get Your parent\u2019s or legal guardian\u2019s permission to use the site, App and any of Our other services.<\/p>\n We shall consider that any Personal Data of any persons under the age of sixteen (16) received by Us, shall be sent with the proper authority from the holder of parental responsibility over the child and that the sender can demonstrate such authority at any time, upon Our request.<\/p>\n<\/div>\n<\/div>\n Before addressing any request You make with Us, We may first need to verify Your identity.<\/p>\n As explained in the Retention Periods section above, We may need to keep certain Personal Data for compliance with Our legal retention obligations but also to complete transactions that You requested prior to the change or deletion that You requested.<\/p>\n Under certain circumstances, by law You have the right to:<\/p>\n2. CONTENTS OF THIS PRIVACY POLICY<\/strong>\u00a0<\/strong><\/h2>\n
\n
3. APPLICABLE LAWS<\/strong><\/h2>\n
\n
4. WHAT IS PERSONAL DATA<\/strong><\/h2>\n
5. PERSONAL DATA WE COLLECT ABOUT YOU<\/strong><\/h2>\n
\n\n
\n Category of Personal Data<\/u><\/strong><\/td>\n Description<\/u><\/strong><\/td>\n<\/tr>\n \n Contact Details<\/td>\n Full legal name, email address, residential address and mobile\/phone number.<\/td>\n<\/tr>\n \n Locational<\/td>\n IP address of the computer connected to the internet, location data through the mobile phone and Apps used and GPS data<\/td>\n<\/tr>\n \n National Identifier<\/td>\n A number or code attributed to you by a government to identify who you are, such as a passport number or national identity number (including nationality)<\/td>\n<\/tr>\n \n Usage date<\/td>\n Details about how and when you use Our services (our Site and\/or Apps).<\/td>\n<\/tr>\n \n Documentary Data<\/td>\n Details about You that are stored in documents in different formats, or copies of them. This includes passports, identity cards and utility bills that confirm Your identity and prove the residential address; as well as any other additional documentation as deemed necessary by Our compliance team.<\/td>\n<\/tr>\n \n Special types of data<\/td>\n Data Protection Laws treat some types of personal information as special, which We will only collect and use if the law allows Us to do so. Such data consist of:\u2013\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Political connections<\/p>\n 6. HOW AND WHY WE COLLECT PERSONAL DATA<\/strong><\/h2>\n
\n
7. WHAT WE USE YOUR PERSONAL DATA FOR (PURPOSE OF PROCESSING)<\/strong><\/h2>\n
\n
\n\n
\n Purpose of the processing<\/u><\/strong><\/td>\n \u00a0Categories of personal data<\/u><\/strong><\/td>\n Legal basis for processing<\/u><\/strong><\/td>\n<\/tr>\n \n Set up an account on Our system<\/td>\n \u00b7 Contact Details\u00b7 Documentary Data<\/p>\n \u00b7 Contractual Necessity\u00b7 Legitimate interest (to ensure we have an accurate account)<\/p>\n \n To manage Our relationship with you<\/td>\n \u00b7 Contact Details<\/td>\n \u00b7 Contractual necessity\u00b7 Compliance with the legal obligations<\/td>\n<\/tr>\n \n To establish and investigate any suspicious behavior in order to protect our business from any risk, fraud or other illegal activities (such as money laundering or terrorist financing)<\/td>\n \u00b7 Documentary Data\u00b7 Contact Details<\/td>\n \u00b7 Compliance with legal obligations\u00b7 Legitimate interest \u2013 detection and prevention of fraud or other illegal activities<\/td>\n<\/tr>\n \n Subscribing to a newsletter or mailing list<\/td>\n \u00b7 Contact details<\/td>\n \u00b7 Your consent<\/td>\n<\/tr>\n \n Evaluating Your queries and\/or requests You send Us to use\/receive any of Our services (including customer support services)<\/td>\n \u00b7 Contact Details<\/td>\n \u00b7 Contractual necessity\u00b7 Legitimate interest (to be able to attend to Your queries)<\/td>\n<\/tr>\n \n Maintain and update the user accounts records on Our system<\/td>\n \u00b7 Contact details<\/td>\n \u00b7 Contractual necessity\u00b7 Legitimate interest (to ensure We have an accurate user account record)<\/td>\n<\/tr>\n \n Continue to manage Our relationship with You<\/td>\n \u00b7 Contact details<\/td>\n \u00b7 Contractual necessity\u00b7 Compliance with legal obligations<\/td>\n<\/tr>\n \n Comply with legal and regulatory obligations (including the detection and prevention of any financial crime)<\/td>\n \u00b7 Documentary Data\u00b7 Special types of data<\/p>\n \u00b7 Legal obligations<\/td>\n<\/tr>\n \n To provide You with Our services \u2013 especially those provided via the App (including location services)<\/td>\n \u00b7 Contact Details\u00b7 Tracking Data<\/td>\n \u00b7 Contractual Necessity<\/td>\n<\/tr>\n \n To develop and manage our brands, products and services<\/td>\n \u00b7 Contact Details<\/td>\n \u00b7 Legitimate interest (to develop our products and services)<\/td>\n<\/tr>\n \n Internal data analysis<\/td>\n \u00b7 Contact Details\u00b7 Tracking Data<\/td>\n \u00b7 Contractual necessity<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n 9. ACCURACY OF PERSONAL DATA<\/strong><\/h2>\n
10. DIRECT MARKETING<\/strong><\/h2>\n
11. TRANSFERS TO THIRD COUNTRIES<\/strong><\/h2>\n
12. INTERNET COMMUNICATIONS<\/strong><\/h2>\n
13. AUTHORISED DISCLOSURES<\/strong><\/h2>\n
\n
14. SHARING OF PERSONAL DATA WITH OTHER CATEGORIES OF RECIPIENTS<\/strong><\/h2>\n
\n\n
\n CATEGORY OF RECIPIENT<\/strong><\/td>\n PURPOSE OF PROCESSING<\/strong><\/td>\n<\/tr>\n \n Cloud Service Provider<\/td>\n Hosting of data under state-of-the art security protocols and our exclusive control<\/td>\n<\/tr>\n \n IT Service Providers<\/td>\n Maintenance and support of our IT systems\/Site(s) \u2013 with restricted access and under our strict controls<\/td>\n<\/tr>\n \n Customer Support Software Providers<\/td>\n Provision of a customer support software in order to provide our users with a high level customer support with restricted access and our strict controls.<\/td>\n<\/tr>\n \n Marketing and Customer Retention Management Tools<\/td>\n Provision of marketing email and communications sendouts under our strict control and management<\/td>\n<\/tr>\n \n Public Authorities<\/td>\n Compliance with legal obligations and only after verifications are made into necessity of disclosure<\/td>\n<\/tr>\n \n Our independent financial and legal advisors<\/td>\n Provision of legal and financial support to TFG and affiliated entities<\/td>\n<\/tr>\n \n Business partners with whom we have a co-operation or partnership agreement<\/td>\n To facilitate and improve the services and goods rendered to You, including the tailoring of such services and goods, if deemed appropriate<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n 15. SECURITY MEASURES<\/strong><\/h2>\n
\n
16. RETENTION PERIODS<\/strong><\/h2>\n
\n
17. PROCESSING FOR RESEARCH AND STATISTICAL REASONS<\/strong><\/h2>\n
18. LINKS TO THIRD-PARTY SOURCES<\/strong><\/h2>\n
19. COOKIES<\/strong><\/h2>\n
20. MINORS<\/strong><\/h2>\n
21. YOUR RIGHTS UNDER THE DATA PROTECTION LAWS<\/strong><\/h2>\n
\n
\n
\n
\n
\n
\n
\n
\n