26 June 2024, 10:44

Personal Data Protection Policy

INTRODUCTION

AS MONACO FC takes the protection of your personal data very seriously. We would therefore like to inform you through this “Personal Data Protection Policy” of the way in which we collect and process this data and how you can control its use, in accordance with the data protection regulations in force in Monaco, namely the GDPR (General Data Protection Regulation) and Monégasque Act 1.165 of 23 December 1993 on personal data protection.

DEFINITIONS

Personal Data: Any data enabling a natural person to be identified directly or indirectly.

Data Controller: AS MONACO FC is responsible for the Processing of Personal Data collected directly or indirectly from visitors to its website and service users. In this capacity, we therefore guarantee that your data will be processed in compliance with the European regulation on Personal Data protection (GDPR).

Processing of Personal Data: “Processing” means any operation or set of operations performed upon Personal Data, such as collection, recording, use, transmission or dissemination.

Data Processor: Legal entity that processes Personal Data on behalf of the Data Controller.

SECURITY AND CONFIDENTIALITY

AS MONACO FC, as Data Controller, determines and implements the necessary measures to protect Personal Data processing systems in order to avoid any malicious intrusions to the extent possible and to prevent any loss, alteration or disclosure of data to unauthorised persons.

We determine and implement technical and organisational measures to ensure that data is kept confidential in accordance with the requirements of the GDPR and the legislation in force. This includes taking the following steps:

Appointing a Data Protection Officer (DPO): this person is responsible for all the tasks set out in the GDPR, amongst other things. The DPO can also answer any questions you may have about the application of the aforementioned regulation.
Raising awareness of the Processing of Personal Data and ensuring that all our employees are committed to complying with the GDPR.
Using complex and regularly updated passwords.
Taking all necessary measures to secure workstations (including antivirus and malware protection software and firewalls).
Implementing backup and business continuity measures (including having a secure backup and archive management system).
Ensuring physical security: our premises are physically secure (including the use of access controls and video surveillance).

PERSONAL DATA COLLECTED

AS MONACO FC collects only necessary and relevant information which it receives from you via our websites and the services you use.

In some cases, you provide us directly with personal information, for example when you create an account, make a purchase, subscribe to our newsletters, enter a competition or contact us.

We also receive data by recording how users browse our website, for example by using technologies such as cookies and by receiving error reports or usage data from software.

Personal Data collected by AS MONACO FC may include the following:

Data enabling you to be identified (such as your surname, first names, title, date of birth, details of your identity document and nickname).
Contact details (e-mail address and telephone number, in particular).
Data relating to transactions performed on our websites (products and tickets purchased, subscription type, purchase history, delivery and/or billing address).
Payment details and information relating to the transaction performed.
Technical data relating to the browser or device used (name, operating system for your device, preferred language and so on) to access our website.
IP address and device identifiers.
Authentication data (such as account creation, connection and usage logs and unique identifier).
Data relating to events and travel arrangements for away matches (arrival time, access gate, etc.).
Data relating to the use of the form: subject of the request, message contents and so on.

AS MONACO FC strives to collect and process Personal Data that is relevant, adequate, non-excessive and strictly necessary to achieve the purposes that have been previously determined and takes all necessary steps to ensure that your data is accurate, complete and, as necessary, up-to-date.

AS MONACO FC also undertakes to obtain the consent of the data subjects whenever this is required and to inform them of the processing of their data.

PURPOSE OF COLLECTION

AS MONACO FC processes your Personal Data for explicit and specific purposes to:

supply products and services requested;
process and track your order, including product delivery;
answer your questions, solve your problems and obtain your feedback;
register your participation in a competition or survey;
manage payment for your purchases;
organise direct marketing and sales campaigns;
conduct research and collect statistics to improve your experience;
analyse the use of products and services in order to improve what we offer;
identify and fix bugs that may occur on our websites to ensure that they function properly;
protect you against fraudulent transactions and wrongdoing;
defend our rights in court and manage litigation; and
guarantee that you can exercise your rights.

AS MONACO FC undertakes to process and collect your Personal Data fairly and lawfully.

AS MONACO FC guarantees that, in this context, the legal basis for the aforementioned processing is, in addition to the performance of the contract, the legitimate interest of AS MONACO FC and specifically its economic interest in constantly improving its services and understanding your needs in order to meet your expectations.

With your consent, we will also send you marketing communications and news about products, services and events organised by AS MONACO FC.

RECIPIENTS AND DATA TRANSFERS

The Personal Data collected is intended only for authorised company staff and our service providers and partners.

These include:

service providers insofar as they are involved in supplying a product or service, such as postal and delivery services;
payment service providers handling payment transactions and the appropriate checks;
third parties who provide us with IT services, such as platform providers, hosting services and suppliers of technical support for our software which may contain data concerning you, data analysis, e-mail distribution and so on; and
service providers associated with the staging of shows and events organised by AS MONACO FC, including those responsible for access and security within the stadium complex.

Your data may be processed outside the European Union. In this case, we take the necessary steps with our service providers to guarantee an adequate level of protection for your data, in full compliance with the regulations in force.

RETENTION OF PERSONAL DATA

All Personal Data collected is retained for a limited period depending on the purpose of the processing and the retention period stipulated by the legislation in force.

COOKIES

Please note that, when you visit our websites, cookies may be installed on your browser in accordance with the GDPR to provide the best user experience. Cookies consist of data stored on the internet user’s terminal equipment. They are used by our websites to send information to the internet user’s browser and enable this browser to send information back to the original site (for example, a session identifier, choice of language or date).

RIGHTS OF DATA SUBJECTS

AS MONACO FC will take all necessary steps to guarantee the effectiveness of your rights with regard to your Personal Data, namely:

The right of access: you have the right to obtain confirmation as to whether or not Personal Data concerning you is being processed and, where that is the case, to obtain access to and a copy of such data.
The right of rectification: you have the right to obtain the rectification of any inaccurate Personal Data concerning you.
The right to erasure: in certain cases, you have the right to obtain the erasure of your Personal Data. However, this right is not absolute, since AS MONACO FC may have legal or legitimate grounds to retain the data in question.
The right to portability: in certain cases, the right to receive the Personal Data you have provided to us in a structured, commonly used format and the right to transmit this data to another data controller, where technically possible. This right only applies where the processing of your Personal Data is based on your consent or on the performance of a contract and is carried out by automated means.
The right to object: you have the right to object, on grounds relating to your particular situation, at any time to processing of Personal Data concerning you which is based on the legitimate interests of AS MONACO FC.
The right to lodge a complaint with a supervisory authority: you have the right to contact a supervisory authority in order to lodge a complaint about AS MONACO FC’s Personal Data protection practices.

To exercise these rights, you can send a request to our DPO by e-mail, providing proof of your identity, to the following address: dataprotection@asmonaco.com

AMENDMENT OF THE POLICY

AS MONACO FC may update this Personal Data Protection Policy at any time to adapt it to any new regulations or practices. It is your responsibility to check for any updates to this policy. If significant changes are made, you will be informed by means of a notice on our website.

CONTACT DETAILS

If you have any questions about this Personal Data Processing Policy, you can contact us by:

sending an e-mail to our DPO at the following address: dataprotection@asmonaco.com; or
writing to us at the following address: AS Monaco FC – Stade Louis II, BP 698 – 98 014 Monaco Cedex