General
We at STVV NV (hereinafter: “STVV” or “we”), value your privacy and are committed to take care of your Personal Data, and we take this responsibility very serious. This Privacy Policy applies to all persons who use or subscribe to STVV’s services, use the website www.stvv.com (hereinafter: “Website”) or purchase tickets.
Definitions
Data Controller means the party that determines the purposes and means of the Processing of Personal Data (“Controller”).
GDPR is a regulation in EU law on data protection and privacy in the European Union (EU) and the European Economic Area (EEA); Regulation (EU) 2016/679 (“GDPR”).
Processing means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (“Processing”).
Personal Data means information that (either in isolation or in combination with other information) enables you to be directly or indirectly identified (“Personal Data”).
Recipient means an entity, authority or agency to which the Personal Information is disclosed, whether a third party or not (“Recipient”).
Third party means a party that processes Personal Information on the Controller’s behalf (“Third Party”).
What Personal Data do we collect from you? (categories of Personal Data)
We mainly process the Personal Data you provide us when you visit our Website or express interest in our products and services, or when you are our customer.
- Online Identifiers: when you visit the Website we obtain your IP address, geolocation, website history, the pages you visited, your duration of the visit and your website activities;
- Personal Identifiers: when you:
- register for the STVV newsletter, we collect your name, e-mail address, address and telephone number;
- purchase tickets, or subscribe for a Season Card, (via Website and offline counter sales), we obtain your name, address, date of birth, e-mail address and telephone number;
- register for “dining at Stayen” (via Website and offline counter sales), we obtain your name, address details, e-mail address, telephone number and any specific dietary requirements;
- enter the stadium, we process your name, birthday, club membership and information on stadium bans. We also may obtain images and video material during your stadium visit.
- Financial Data: when you use the “cashless” function on your subscription (season ticket, cashless card, Binken card, Mobile app), we have access to financial data (card balance).
It is possible that the Personal Data mentioned above is also obtained from minors. STVV recognizes that Personal Data of minors must be protected with a higher degree of protection and STVV is committed to processing Personal Data of minors with utmost vigilance.
How do we collect Personal Data from you?
We collect your Personal Data in various ways:
- by means of cookies (see Cookie policy), based on your given consent, or our legitimate interest.
- by means of a registration form or order form (for the STVV newsletter, "tickets/subscriptions (season ticket, cashless card)" and "dining at Stayen")
- by using the “cashless” function on your subscription (Season ticket, Cashless card, Binken card, Mobile app);
- through access controls at the stadium.
Why do we collect Personal Data from you? (purposes)
We collect online identifiers to maintain and improve the Website and to compile anonymous visitor statistics.
We collect your name, e-mail address, address, telephone number for the purpose of (i) delivering your order and/or (ii) sending a newsletter and/or (personalized) marketing and/or your financial data for (iii) invoicing your order and financial transactions ("tickets", "dining at Stayen", "cashless").
We will therefore process Personal Data in order to conclude and execute a contract with you and to keep you informed about STVV. If you cannot provide the necessary Personal Data, STVV cannot guarantee that it will be able to conclude and execute a contract with you, nor that STVV can keep you informed through newsletters and marketing.
May we process your Personal Data? (legal basis)
We may process your online identifiers because on the one hand you gave consent via the “cookie banner” (Cookie policy) and on the other hand because it is part of our legitimate interest to provide our Website and services.
If you are a customer, your Personal Data is processed for the purpose of contract execution.
In addition, as a football club we are legally obliged to identify every spectator in the stadium. Therefore the processing of your name, birthday, information regarding stadium bans and club memberships is based on our legal obligation, including the house rules that apply when you purchase a ticket and enter the stadium. In absence of a contract, we base such processing on our legitimate interests of maintaining security and order and preventing crime.
If you have registered for the STVV newsletter and/or (personalized) marketing via the Website, you gave us your consent to send the newsletters. This consent can be withdrawn at any time.
If you have purchased a subscription (Season Ticket), we will send you a newsletter and a subscription magazine based on our legitimate interest.
If you have made a reservation for “dining at Stayen” and/or purchased and/or registered “tickets” for the “Cashless” platform, we will send you a newsletter based on our legitimate interest.
Do we share your Personal Data with third parties (whether or not outside the EU/EEA)?
If this is necessary to achieve the intended purposes, your Personal Data may be shared with third party recipients: for example, the creator/host of our Website, social media networks, the bank/payment service provider, the caterer, the printer.
We guarantee that all third party recipients will take the necessary technical and organizational measures to protect your Personal Data.
STVV will not sell, rent or make your Personal Data commercially available to third parties (including STVV’s commercial partners), unless with your prior consent.
Third-party recipients of your Personal Data may be situated outside the EU/EEA. Consequently, your Personal Data might also be transferred to countries such as Japan or the United States. STVV commits to engage only with providers outside the EU/EEA who offer adequate measures regarding the security and protection of Personal Data, in line with the requirements of the GDPR. Additionally, when we transfer your Personal Data to such entities outside of the EU/EEA, we ensure that appropriate safeguards and protections are in place as per the GDPR. For instance, we establish agreements incorporating Standard Contractual Clauses endorsed by the European Commission.
Finally, we may share your Personal Data with government institutions (including the police, prosecuting authorities, the judiciary, the Ministry of the Interior, etc.), especially in the event of any criminal convictions.
How long do we keep your Personal Data?
Your Personal Data will only be processed for as long as necessary to achieve the purposes for what it was initially collected for, or to meet legal requirements (including in the field of accounting or in the context of specific football legislation).
What about links to third party websites, e.g. online fan shop?
The STVV online fan shop is operated by a third party (“Belgoshop”). The privacy conditions can be found at https://shops.topfanz.com/nl/service/privacy-policy/. STVV is not responsible for the content of the websites linked from STVV by the administrator or visitors. The visitor is aware that the privacy of other websites may differ from STVV.
What technical and organizational security measures have we taken to protect your Personal Data?
We have developed security measures that are adapted at a technical and organizational level to prevent the destruction, loss, falsification, modification, unauthorized access or inadvertent notification to third parties of Personal Data, as well as any other unauthorized processing of this data in accordance with applicable data protection laws. For example, Personal Data for an SSL certificate, the Personal Data is only accessible for an administrator account.
When handling Personal Data, our employees are obliged to comply with the regulations of the GDPR.
Under no circumstances can STVV be held liable for any direct or indirect damage resulting from incorrect or unlawful use of the Personal Data by a third party.
You must comply with the safety regulations at all times. You are therefore solely responsible for the use made from the Website of your computer, IP address and your identification data, as well as for their confidentiality.
What are your rights?
You have the following rights:
Right of Access - right to obtain confirmation of which of your Personal Data is processed and information about it, for instance, which are the purposes of the Processing, what are the conservation periods, among others.
Right to Erasure or "right to be forgotten" - right to erase your Personal Data, provided that there are no valid grounds for its retention, for example in cases where we have to keep the Personal Data to comply with legal obligation or because a court case is in progress.
Right to Data Portability - right to receive the Personal Data you have provided us in a digital format of current use and automatic reading or to request the direct transmission of your Personal Data to another entity that becomes the new responsible for your Personal Data, however only if technically possible.
Right of Rectification - right to request modification of your Personal Data that is inaccurate or request incomplete Personal Data, such as the address, VAT, email, telephone contacts, or others.
Right to Withdraw Consent or Right of Opposition - right to object or withdraw consent at any time to Processing, for example in the case of Processing for marketing purposes, provided that no Legitimate Interests exist prevailing over your interests, rights and freedoms, such as defending a right in a judicial process.
Right of Limitation - right to request the limitation of the Processing of your Personal Data, in the form of: (i) suspension of Processing or (ii) limitation of the scope of Processing to certain categories of Personal Data or purposes of Processing.
Right to complain - right to complain to the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, Tel +32 (0)2 274 48 00, e-mail: contact@apd-gba.be, in addition to us.
To exercise your rights, simply contact us, either via contact page
(https://prighter.com/q/12396155) or by mail to Tiensesteenweg 168, 3800 Sint-Truiden. The period for handling a request is 30 days unless it is a particularly complex request. Additional identification may be requested for identification purposes.
Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
Changes to our data protection provisions
We reserve the right to modify this Privacy Policy, so it is always in compliance with the current legal requirements or to implement changes to services in the Privacy Policy, e.g., when introducing new services. In this case, your future visits to our website will be subject to the updated Privacy Policy. If you have additional questions regarding the processing of your Personal Data, please feel free to contact us directly, either by email at privacy@stvv.com or via mail to to Tiensesteenweg 168, 3800 Sint-Truiden, Belgium.
Contact information
If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data, your choices and rights regarding such use please do not hesitate to contact us:
Controller
Name: STVV NV, VAT BE0845.049.251
Postal Address: Tiensesteenweg 168, 3800
Sint-Truiden, Belgium
E-Mail: privacy@stvv.com
Data Protection Officer
Name: Maetzler Rechtsanwalts GmbH & Co KG
Postal Address: Schellinggasse 3/10 1010
Vienna, Austria
E-Mail: privacy@stvv.com
Version: March, 2024