This UK & Spain Privacy notice should be read in conjunction with our Privacy Policy.
How we use your personal data and your rights:
Controller: (1) Miami Dolphins, Ltd., a company registered with the Companies Register of *, and with registered office at address and (2) South Florida Stadium LLC a company registered with the Companies Register of *, and with registered office at address are each a Data Controller in respect of the personal data processed in connection with Services. The legal representative in the EU (for Spain) is * and in the UK is *.
Cookies: We also may collect information automatically through cookies, web beacons, local shared objects, analytics software and other technologies; when you visit or use the Services, having obtained your prior explicit cookies consent where necessary. You may find further information on the use of such technologies in our UK and Spain Cookies Policy.
Legal Basis for Data Processing: We process personal information for the purposes set out in the [Privacy Policy ]. Our legal basis to process personal information includes processing that is:
- Necessary for the entry into or performance of a contract: When you enter into a transaction with us, we will need to collect, process and share your personal data. Failure to provide the requisite personal data when entering into such an agreement, objecting to this type of processing and/or exercising your deletion rights may unfortunately mean that products and/or services cannot be provided to you.
- Legitimate interest: In certain circumstances we may use your personal data to pursue legitimate interests of our own, but this is provided your interests and fundamental rights do not override those interests. This is on the basis of our legitimate interest to:
- provide you with information and services as requested by you on a non-contractual basis;
- develop and improve our services to you and to our other customers;
- communicate with you and manage our relationship with you;
- administer our websites and applications;
- carry out management analysis, audit, forecasts, business planning and transactions;
- ensure our compliance with applicable laws, regulatory requirements and our policies; and
- deal with legal claims and related administrative activities.
We consider that it is reasonable for us to process your personal data for achieving our legitimate interests, as outlined above, as:
- We process your personal data only so far as is necessary to achieve the purpose outlined in this Privacy Policy; and
- The processing of your personal data does not unreasonably intrude on your privacy and ultimately benefits you in optimizing our provision of services to you.
- Consent: We may, on occasion, send you marketing messages by email and post about us and our events and offers where you have provided clear marketing consent. You may opt out of receiving commercial emails from us by clicking on the opt-out or "unsubscribe" link included in the commercial e-mails you receive. You may opt out of receiving push notifications by turning off push notifications at the device level. Please note that opt-out requests will be effective immediately . Additionally, we may, on occasion, combine data from different sources or share your data on different sources, subject where necessary to having obtained your prior explicit consent. You have the right to withdraw your consent to processing of this nature at any time.
- Compliance with legal obligations: To meet our regulatory and legal obligations, we may need to process some of your personal data.
Children: We do not knowingly collect personal data of children under the age of [18 ] in the UK or Spain through our online Services. If we are made aware we have collected personal information from a child under that age in a manner that is inconsistent with the applicable regulations, we will delete this information as soon as possible. When we intend to collect personal information from children (for example, in relation to their participation at our Youth Football Camps), we take additional steps to protect children's privacy, including: (a) notifying parents about our information practices with regard to the child/children, including the types of personal information we may collect from child/children, the uses to which we may put that information, and whether and with whom we may share that information; (b) in accordance with applicable law, and our practices, obtaining consent from parents for the collection of personal information from their children, or for sending information about our products and services directly to their child/children; (c) limiting our collection of personal information from the child/children to no more than is reasonably necessary to participate in an activity; and (d) subject to applicable laws, giving parents and/or guardians of the child/children the ability to request access to personal information we have collected from their children and in certain circumstances the ability to request that the personal information be changed or deleted.
International Transfers: Please note that we may transfer or disclose your personal data to a recipient in a country outside of the UK/EU/EEA (third country), which may not offer an equivalent level of protection. In particular, we may make transfers of data to the NFL Family which may involve transferring your data to and within the United States of America . We will ensure that appropriate safeguards have been taken (including the UK/EU Commission's standard contract clauses (as applicable), including the data transfer impact assessment required by them) to protect the Personal Data.
You may, under local data protection laws applicable to you, be entitled to request and receive a copy of any documentation demonstrating that appropriate safeguards have been taken in order to protect your personal data during a transfer to a third country. If you would like to know more about the processing of your Personal Data and whether your Personal Data is transferred to a third country, please contact us using the contact details provided in the Privacy Policy.
Your Rights: You have various rights in connection with our processing of your personal data:
- Access. You have the right to request a copy of the personal data we are processing about you, which we will provide back to you in electronic form.
- Rectification. You have the right for any incomplete or inaccurate personal data that we process about you to be rectified.
- Deletion. You have the right to request that we delete personal data that we process about you, except we are not obligated to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
- Restriction. You have the right to restrict our processing of your personal data where you believe such data to be inaccurate, our processing is unlawful or that we no longer need to process such data for a particular purpose. Where we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it, we would mark stored personal data with the aim of limiting particular processing for particular purposes in accordance with your request, or otherwise restrict its processing.
- Objection. Where the legal justification for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim.
- Withdrawing Consent. Where we process certain personal data on the basis of your consent, you have the right to withdraw your consent, including with regard to direct marketing. In relation to the consequences of your withdrawal of consent for us to process your health data, please see above under "The use of consent for processing of your health data".
You may exercise these rights upon request, by emailing our Customer Support at email address or by contacting us by postal mail. In addition, you may also contact our UK/EU (Spain) Representative at: contact details. We will respond to your request within one month of receipt of the request. This period may be extended by two further months where necessary, taking into account the complexity and number of the requests. We shall inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.
In some situations, we may refuse to act or may impose limitations on your rights, as permitted by law. Before we can provide you with any information or correct any inaccuracies, where there are reasonable grounds for doubting your identity, we may ask you to verify your identity and/or provide other details to help us respond to your request. Nonetheless, verification of identity shall be carried out by cross-checking information we already hold from you.
Retention: We will retain your information for as long as your account is active or as needed to provide you services or when applicable, until you revoke your consent. Afterwards, your personal data will subsequently be erased, subject, however, to any applicable statutory retention periods and unless we require the data for asserting, excercising or protecting ourselves against any legal claims. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Complaints: In all cases, you have a right to file a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. You may find further information on the competent local supervisory authority. In the UK, this is the Information Commissioner's Office: https://ico.org.uk/for-the-public. In Spain, this is the AEPD: www.aepd.es.