PRIVACY POLICY
KRC respects your privacy. In our Privacy statement we want to inform you in a clear, transparent, simple but correct way when, why and how KRC Genk collects, uses, shares and protects personal data. This data belongs to people who provide personal data to us via the KRC Genk website and applications.
1. Who are we and what is our objective?
KRC Genk's objective is the organisation, dissemination and promotion of football in all its forms. Its mission is to persuade as many supporters as possible to support our teams as one block and to allow them to attend matches in optimal conditions.
In addition, KRC Genk also has a social role, as football can be a means to help fulfil a number of social objectives such as inclusion, health, children's and human rights & sustainability. Through various social projects they try to highlight and promote the core values of "respect, fair play and education".
This Privacy statement is from:
KRC Genk vzw, with company registration number 0434.825.462 with its registered office at Stadionplein 4, 3600 Genk, BELGIUM.
2. Information we collect
2.1 Which personal data of you do we collect?
Depending on your relationship with KRC Genk we collect different types of personal data. Additional personal data are necessary for some services.
2.1.1 As an employee of KRC Genk
When you register as a worker (such as a player, trainer, staff member, referee, steward, volunteer, etc.) your (first) name, contact data such as telephone number and e-mail address, nationality, date and place of birth, passport photo and sex/gender will be requested. This information is necessary for the performance of the agreement you want to enter into with KRC Genk. Consent to the collection and processing of personal data is a necessary condition for you to be able to join KRC Genk.
To guarantee the quality of your personal data, we prefer to collect this information via eID. On reading the data on your eID, only the data specified above shall be registered. If you still object to your eID being read, the data need to be entered manually into the system.
2.1.2 As a user of one of the KRC Genk applications or services
When you create an account on the website or in one of the KRC Genk applications (e.g. Ticket or webshop) you need to enter an e-mail address. Your password and account information, including your (first) name, date of birth and sex, are requested. In addition, we collect data that you provide yourself to users of the applications (e.g. matches that you will follow). If you register in one of the KRC Genk applications using the social media option, information related to your social media profile will also become available to us. Additional information, such as a profile picture, is optional. The information collected on the website or one of the KRC Genk applications will chiefly depend on the consent given by the user. This means you can always withdraw this consent if you no longer wish KRC Genk to collect and process your data. Please note, however, that some information is required if you wish to use certain services and applications of KRC Genk.
2.2 Analytical information
In addition to the aforementioned information, we use analysis tools, where appropriate from third parties, to measure the use of certain services. These tools can collect information to improve our services and applications.
2.3 Cookies and similar technologies
When you use the KRC Genk website or certain applications, we may save local data about your use of the website or application to align it better to your needs and preferences. Based on this information we can offer certain functionalities to you to improve the user-friendliness.
2.4 Log files
Log files are automatically created when KRC Genk applications are used. These logs save information such as IP address, device information, etc. This information allows us to continuously improve the applications.
2.5 Device identifiers
When the KRC Genk applications are used on a PC, laptop, tablet or smartphone, we can consult, collect, monitor and save ‘device identifiers’ on your phone. These device identifiers are small files that allow us to identify your device and give us information about how the application is used. This is necessary for safety reasons.
2.6 Other data
In addition to the aforementioned data, depending on the used applications or services, we may also collect the following types of personal data:
- User data, e.g. your language preference, family composition, friends you follow, preferences you communicate via social media, promotions, competitions you follow, financial information for payments, purchased goods or services, etc.;
- Location data, e.g. your location in and around the stadium, transport options (public transport or carpooling options).
2.7 Privacy of minors
Of course, KRC Genk collects and processes a lot of personal data of children. For this reason, we ask you to provide the contact data of one of the parents or a guardian in order to obtain parental consent for the processing of children's personal data on registering.
3. Why do we use these data?
We collect and process your personal data for the following purposes:
- The processing of your membership of KRC Genk.
- The processing of your membership of transfers, activities as a player or trainer, including disciplinary decisions.
- The processing of accident files and insurance matters resulting from injuries sustained as a football player.
- To send invitations for talent detection days, trainer training courses or sports coaching.
- To process your registration on the website or a KRC Genk application.
- Preparation or performance of an agreement (membership) that you reached with us.
- To comply with legal or regulatory provisions to which we are subjected (e.g. to guarantee the safety in stadiums).
- To monitor the operation and development through studies, tests and statistics.
- To provide general information about KRC Genk and its partners and direct communication about your matches (e.g. cancellations or match information).
- To optimise the user-friendliness on our platforms (e.g. automatic login, cookies).
- To detect technical problems in our platforms.
- To monitor the use in our platforms.
- The organisation of the social projects of KRC Genk.
When we have a legitimate interest, which we always weigh against your right to privacy.
Subject to consent we collect personal data for the following specific objectives:
- To give users of our platforms a personal experience with personalised messaging, whether or not through profiling and taking into account your interests, preferences, consumption behaviour, behaviour on social media.
- Commercial promotions of KRC Genk and its partners.
4. Whom do we share your information with?
We share your personal data in so far as necessary for the performance of the services.
We try to pseudonymise or anonymise your personal data when we share it with external parties. We do this by aggregating sufficient personal data (e.g. statistical research) or omitting certain parts of personal data so that the information can no longer be associated with an individual.
We do not sell personal data to third parties nor do we pass it on to third parties without your permission, with the exception of:
- The Royal Belgian football association (KBVB) and the Pro League
- When there is a legal obligation
- If necessary for our services or in the event of a legitimate interest, (e.g. the sale of tickets) whereby your fundamental right of privacy will always be weighed.
- Subject to your permission, we may share your data with our partners for commercial promotions.
- With regard to the international transfer of personal data (e.g. FIFA or UEFA), we protect your data in accordance with the level of protection required by European regulations.
5. How do we protect your data?
KRC Genk makes every effort to protect your personal data and privacy at all times. Various positions within the organisation ensure compliance with legislation and the security of your information, our infrastructure and systems. We constantly try to implement new technical measures, such as encryption, firewalls, access control with strict password requirements, intrusion and anomaly detection, and physical security. However, should there be an incident involving your data, you will be personally notified in the circumstances provided by law.
The workers who have access to your personal data are restricted and have been meticulously selected. These workers are given access to personal data in so far they need this information to properly carry out their jobs. Our workers are trained to correctly handle confidential information. Furthermore, for new projects that may have an impact on your privacy, a comprehensive analysis will be conducted to ensure your rights, security and protection of your personal data.
Our websites may contain links to sites of third parties (social media, event organisers we sponsor or other partners) whose terms of use do not fall within the scope of this privacy policy. Please carefully read their policy concerning the protection of your personal data. When we effectively share personal data with external parties, a processor agreement is reached in which sufficient (technical) measures must always be included so that the security of your data is guaranteed as well as possible.
6. Your rights and how to exercise them
6.1 Right of access, portability and rectification of your data
We value the quality and accuracy of your personal data. That is why you always have the right to access your personal data held by us. The contact data for this can be found below.
To exercise your right of access, and to prevent any unauthorised disclosure of your personal data, you must provide us with proof of your identity. We therefore ask you to enclose, preferably, a copy of the front of your identity card with your request.
For the sake of completeness, we inform you that if we do not respond to your request, refuse it or if our response does not meet your expectations, you always have the right to contact the Privacy Commission, via commission@privacycommission.be, which will intervene in the context of its mediation assignment.
6.2 Right to removal of your data
You have the right to have incomplete, erroneous, inappropriate or outdated personal data removed or amended. For this you can also submit a request to the aforementioned services. We do reserve the right to determine whether your request is justified. Please also note that, depending on your request, we may no longer be able to offer you some services. In addition, we must comply with certain legal retention periods, which means we cannot grant your request for removal.
To keep your data up to date, please notify us of any changes, such as new contact data. The possibility to update your data is provided in our platforms.
6.3 Right to object
6.3.1 Right to object against the processing of data for direct marketing
You always have the right to object to the use of your personal data for direct marketing purposes without giving any reason. You can do this by contacting the services below, or by using the unsubscribe options in commercial e-mails.
6.3.2 Right to object to publication of your image
You always have the right to object, without giving any reason, to publication of your image on a public application of KRC Genk. To do this, you must submit an objection request to the following services.
7. How long are your data saved?
KRC Genk undertakes not to keep your data longer than necessary for our services within the purpose for which we collected them. However, retention periods may vary depending on the purpose. For example, we make a clear distinction between contact data, sports data, medical data, disciplinary data or user behaviour. On expiry of the applicable retention period(s), personal data will be rendered anonymous.
8. How must you contact us?
If you have any questions about this Privacy Statement, your wish to exercise your rights in relation to your privacy or have any other questions about our privacy policy, please contact us:
KRC Genk vzw - Dienst Privacy - Stadionplein 4, 3600 Genk
E-mail: privacy@krcgenk.be
If you want to contact the supervisory authority, please send to:
Privacy Commissie - Commission for the Protection of Privacy
Drukpersstraat 35, 1000 Brussel / Rue de la Presse 35, 1000 Brussels
Phone: +32 (0)2 274 48 00
E-mail: commission@privacycommission.be
9. Amendments to our privacy statement
Our privacy statement may be updated from time to time. We therefore advise you to check it regularly.