PRIVACY NOTICE
F1 DRIVE – London
1. INTRODUCTION
1.1 This Privacy Notice is intended to describe the practices Tottenham Hotspur Stadium Limited act as a data controller in its own right, follows in relation to the F1 DRIVE – London with respect to the privacy of all individuals whose personal data is processed at the Stadium.
1.2 This means that the Stadium is responsible for deciding how it holds and uses personal information about you. It makes you aware of how and why your personal data will be used, and how long it will usually be retained for. It provides you with certain information that must be provided under the UK General Data Protection Regulation (“UK GDPR”).
2. WHY DO WE NEED YOUR INFORMATION?
The Stadium is required to hold your personal information (and your child’s personal information) for the purposes of visiting the F1 DRIVE – London and participating in karting and other related karting activities. We use this information to provide to you a secure, identifiable user account and to fulfill and communicate with you about your purchases and your race results. We also use this to send you the Tottenham Hotspur Stadium and its events, and the F1 DRIVE – London’s latest news, competitions, ticket information and merchandise updates, and offers should you chose to receive this information. To legitimise the processing of your personal data, the Stadium relies on your consent, legitimate interest, and the performance of the contract you entered into to participate in karting and other related karting activities at F1 DRIVE – London.
3. WHAT TYPE OF INFORMATION DO WE HOLD ABOUT YOU?
3.1 The Stadium processes these personal data categories:
3.1.1 first name and last name of the participant and parent/guardian;
3.1.2 date of birth;
3.1.3 gender of the participant;
3.1.4 Images of the participant;
3.1.5 home address of the participant and parent/guardian;
3.1.6 telephone number of the participant, and parent/guardian;
3.1.7 email address of the participant, and parent/guardian;
3.1.8 race and/or ethnicity of the participant;
3.1.9 disability of the participant;
3.1.10 medical and health information of the participant;
3.1.11 emergency contact information;
3.1.12 signature of the participant, and parent/guardian; and
3.1.13 credit card/debit card details.
3.2 This data is sourced from you when completing the registration from and purchasing tickets for the F1 DRIVE – London. Your, personal data is accessed by individuals in the Stadium involved in operating and managing the F1 DRIVE – London and by Business & Marketing Improvement NV (company number: BE0562.755.594) whose are organised and existing under the laws of Belgium and whose registered office is at Molseweg 160, 2440 Geel, Belgium (“BMI Leisure”). BMI Leisure assist the Stadium in providing the booking systems used in connection with the F1 DRIVE – London.
4. SENSITIVE PERSONAL DATA
4.1 Sensitive personal data reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation.
4.2 The Stadium will collect and process the following sensitive personal data:
4.2.1 race, ethnicity, and/or disability of the participant. We indirectly collect this personal data if you choose to provide a photograph of yourself when completing the registration form which may be displayed when you attend F1 DRIVE - London; and
4.2.2 medical and health information of the participant. We have a duty of care for all participants that purchase tickets for the F1 DRIVE – London. Processing this information enables us to administer appropriate first aid in the event that participants are injured or taken ill whilst on our premises.
4.3 The Stadium relies on your consent to legitimise the processing of your sensitive personal data
5. DATA RETENTION
5.1 The Stadium will retain your personal information for as long as reasonably necessary in accordance with UK GDPR and in any event in respect of:
5.1.1 in respect of your personal information you share in relation to your purchases, no longer than for a period of six (6) years after the date you have completed the registration from and purchased tickets for the F1 DRIVE; and
5.1.2 in respect of all other personal information that you share in connection with your visit to and participation in F1 DRIVE – London, no longer than for a period of two (2) years after the date you have visited and participated in F1 Drive – London.
6. SECURITY
6.1 The Stadium is committed to making sure your personal data is secure. The Stadium has put in place appropriate security measures to prevent your personal information being accidently lost, used or being subject to unauthorised access or disclosure, the Stadium has technical and organisational measures to safeguard and secure your personal data. In addition, the Stadium limits access to your personal information to those personnel involved in operating and managing the F1 DRIVE – London, BMI Leisure who need to process your personal information when providing services in relation to the booking systems, and other third parties the Stadium engages who need to process your personal information from time to time in relation to the F1 DRIVE – London. BMI Leisure and any other third party engaged by the Stadium will only process your personal information on the Stadium’s instructions and they will be subject to a duty of confidentiality.
7. CONTROLLING YOUR PERSONAL DATA
7.1 The Stadium will not transfer your personal data to third parties unless we have your permission or are required by law to do so.
7.2 To confirm whether your personal data is processed or to access your personal data, email your request to personaldata@tottenhamhotspurstadium.com.
8. IMAGE RELEASE
8.1 By taking part in F1 DRIVE - London, you
8.1.1 consented to:
(a) photographs and/or video footage being taken of yourself and anyone in you care; and
(b) the publication of photographs and/or video footage for advertising, promotional and marketing purposes;
8.1.2 waived any rights that you may have in respect of such photography or video footage.
8.2 You understand that when you visit F1 DRIVE – London you may be identifiable in any footage and/or imagery from your visit to F1 DRIVE – London which may be used for commercial purposes by the Stadium, and that you will not be able to be anonymised in any of the footage and/or imagery.
8.3 You understand that the images taken could constitute personal data and the Stadium and its employees, representatives, agents, directors, officers and assigns process such personal data acting as data controller for the purposes of their legitimate interests in promoting their business in accordance with article 6 of the General Data Protection Regulation (GDPR) as transposed into UK law pursuant to the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019. You understand that the images captured for these purposes will not constitute special category personal data as defined under GDPR.
8.4 You are able to withdraw such consent (as detailed by clause 8.1.1 above) by emailing your request to: personaldata@tottenhamhotspurstadium.com.
9. RECTIFICATION, ERASURE, RESTRICTION OF PROCESSING OR DATA PORTABILITY
9.1 Under certain circumstances, by law you have the right to:
9.1.1 Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information the Stadium holds about you and to check that the Stadium is lawfully processing it.
9.1.2 Request correction of the personal information that the Stadium holds about you. This enables you to have any incomplete or inaccurate information the Stadium holds about you corrected.
9.1.3 Request erasure of your personal information. This enables you to ask the Stadium to delete or remove personal information where there is no good reason for the Stadium continuing to process it. You also have the right to ask the Stadium to delete or remove your personal information where you have exercised your right to object to processing (see below).
9.1.4 Object to processing of your personal information where the Stadium are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where the Stadium is processing your personal information for direct marketing purposes.
9.1.5 Request the restriction of processing of your personal information. This enables you to ask the Stadium to suspend the processing of personal information about you, for example if you want the Stadium to establish its accuracy or the reason for processing it.
9.1.6 Request the transfer of your personal information to another party.
9.2 If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact personaldata@tottenhamhotspurstadium.com in writing.
10. COMPLAINTS
10.1 If you are concerned about an alleged breach of data protection law or any other regulation, contact the Stadium’s Data Protection Officer (“DPO”) via email at personaldata@tottenhamhotspurstadium.com or via your usual Stadium representative. The DPO will investigate your complaint and provide information about how it will be handled and resolved.
10.2 If you are not satisfied with how the Stadium resolved your complaint, you have the right to make a complaint at any time to the Information Commissioner’s Office (“ICO”) who is responsible for data protection issues in the UK.
11. CONTACT US
If you have additional questions or concerns, contact your usual Stadium representative or email personaldata@tottenhamhotspurstadium.com.