Privacy Policy regarding the processing of personal data

FUTBALL KLUB CSIKSZEREDA Association

1. Introduction

FK CSIKSZEREDA Association respects the right to the protection of personal data of all persons who use the website and the ticket and season ticket sales platform.

This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national legislation.

2. Data Controller

The controller of personal data is:

FK CSIKSZEREDA Association

  • Address: 32 Lunca Mare, Miercurea Ciuc, Harghita County

  • E-mail: info@fkcsikszereda.ro

  • Telephone: +40 740 400 702

  • Website: fkcsikszereda.ro

For questions regarding the protection of personal data, you may contact us at:

cs_szilard@yahoo.com

3. What Data Do We Collect?

Depending on the services used, we may collect the following categories of data:

Identification Data

  • first name and surname;

  • Romanian Personal Numerical Code (CNP).

Contact Data

  • e-mail address;

  • telephone number.

Order Data

  • tickets and season tickets purchased;

  • order history;

  • transaction values;

  • payment method.

Stadium Access Data

When electronic tickets or personalised season tickets are used, we may process:

  • QR codes;

  • validations at access gates;

  • date and time of access.

4. Purposes of Processing

Personal data are processed for the following purposes:

  • issuing and managing tickets and season tickets;

  • processing payments;

  • sending order confirmations;

  • verifying access to the stadium;

  • preventing fraud and unauthorised use of tickets;

  • complying with legal obligations;

  • handling requests and complaints;

  • communicating information regarding changes to the competition schedule;

  • improving services and platform security;

  • sending commercial communications only with the consent of the data subject or under the conditions provided by law.

5. Legal Basis for Processing

The processing of personal data is based on one or more of the following legal grounds:

  • performance of the contract concerning the purchase of tickets and season tickets;

  • compliance with legal obligations;

  • the legitimate interests of the Association regarding the security of sporting events and the prevention of fraud;

  • the consent of the data subject for newsletters and marketing communications;

  • protection of vital interests in cases provided for by law.

6. Payment

Payments are processed through an authorised payment processor.

The Association does not store complete bank card details.

Payment data are processed exclusively by authorised payment service providers under security conditions compliant with international standards.

7. Recipients of the Data

Personal data may be disclosed to the following categories of recipients:

  • competent public authorities where required by law.

All processors process personal data exclusively on the basis of contracts concluded with the Association and in compliance with the GDPR.

8. Data Retention Period

Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected.

In general:

  • order data are retained in accordance with applicable financial and accounting legislation.

9. Rights of Data Subjects

Data subjects have the following rights:

  • the right to be informed;

  • the right of access to personal data;

  • the right to rectification;

  • the right to erasure of personal data (“the right to be forgotten”);

  • the right to restriction of processing.

10. Data Security

The Association implements appropriate technical and organisational measures to protect personal data, particularly against:

  • unauthorised access;

  • unauthorised modification.

Access to personal data is limited exclusively to authorised persons.

11. Newsletter and Commercial Communications

Where you have given your consent, we may send you information regarding:

  • matches;

  • promotional campaigns;

  • special offers;

  • events organised by the Association.

You may withdraw your consent at any time by using the unsubscribe link or by contacting the Association.

12. Amendments to the Policy

We reserve the right to amend this Privacy Policy in order to reflect legislative or operational changes.

The updated version will be published on the website together with the date of the latest amendment.

13. Contact

For any request concerning the protection of personal data, you may contact:

FK CSIKSZEREDA Association

  • Address: 32 Lunca Mare, Miercurea Ciuc, Harghita County

  • E-mail: info@fkcsikszereda.ro

  • Telephone: +40 740 400 702