PRIVACY POLICY

This Privacy Policy sets out the data processing practices carried out through the use of the internet and any other electronic communications networks by CSM Sport & Entertainment LLP, trading as CSM Hospitality (company number OC368517) of PO BOX 70693 10 Greencoat Place, London, United Kingdom, SW1P 9ZP (and any of its group companies) (CSM, we or us).

We have appointed a data privacy champion who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the data privacy champion using the details set out below.

CONTACT DETAILS

Full name of legal entity:                   CSM Sport and Entertainment LLP, trading as CSM Hospitality
Title of data privacy champion:       Luke Robinson
Email address:                                    csm.legal@csm.com
Postal address:                                   CSM Sport and Entertainment, 10a Greencoat Place, London, UK, SW1P 1PH

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

CSM operates as a group of companies and CSM Sport and Entertainment LLP will be the controller and responsible for your personal data.

1           DATA COLLECTED

1.1 Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data)
1.2  We collect personal information from visitors to the Website which we have grouped together as follows:

1.3 Only Technical and Usage Data are collected automatically when you visit any of the Websites (please see the section on how we collect your personal data for further information).

2           HOW WE COLLECT YOUR PERSONAL DATA

2.1       We use different methods to collect data from and about you including through:

(a)        Direct interactions. You may give us your Identity, Special Category, Contact, and Marketing and Communications Data by filling in forms, opting-in, completing a registration or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

(b)        Automated technologies or interactions. As you interact with our Website(s), we may automatically collect Technical and Usage Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies. Please see the section on cookies below.

3           USE AND DISCLOSURE OF PERSONAL INFORMATION

3.1 We process personal information collected via this Website for the purposes of:

3.2 We may use your data to send you information regarding our products or services, products or services offered by other companies within our group and companies that CSM work with, including event rights holders but only if you specifically consent to receiving such marketing materials. You may withdraw your consent to receive these marketing materials at any time by selecting the unsubscribe button included in all communications sent to you by us.

3.3 We may also use and disclose information in aggregate (so that no individuals are identified) for marketing and strategic development

3.4 We have set out below, all the ways we use your personal data, and the legal bases on which we rely to do so.

 

Category of Personal Information Collected Source(s) from which that information may be collected Business Purpose Categories of Third Parties to which CSM share this personal information
Full Name
  • The Website (including but not limited to websites, apps, games, customer service)
  • Ticketing partners (e.g. Ticketmaster)
  • Social Media
  • Event partners and licensees
  • Direct from the Booking Client
  • Hospitality Package providers
  • Event rights holders
  • Order fulfilment (e.g. to fulfil event bookings)
  • Personalization
  • Promotions
  • Marketing (if consented)
Event partners and licensees

Event rights holders

Data processing and analytics vendors

Fulfilment vendors

Payment processors

Email address
  • Ticketing partners
  • CRM suppliers
  • Social media
  • Direct from the Booking Client

 

  • Order fulfilment
  • Security and access control
  • Provision of services purchased or requested
  • Marketing (if consented)
Event partners and licensees

Event rights holders

Hospitality Package providers

Data processing and analytics vendors

Fulfilment vendors

Payment processors

CRM partners

 

Street/Physical Address
  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • Order fulfilment

 

Partners and licensees

Data processing and analytics vendors

Fulfilment vendors

Payment processors

Telephone number
  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • Order fulfilment
  • Subscription management
  • Provide requested information
  • Promotion
Data processing and analytics vendors

Fulfilment vendors

Birth date / age
  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • Security and access control
  • Provision of services purchased or requested
  • Legal compliance
Partners and licensees

Data processing and analytics vendors

Fulfilment vendors

Special Category Data (i.e. dietary requirements)
  • Website
  • Direct from the Booking Client
  • Order fulfilment

 

Catering providers

Event management partners

Venues

Payment data
  • Use of the Website
  • Direct from the Booking Client

 

  • Order fulfilment

 

Payment processors
Technical data / IP Address
  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • To use data analytics to improve our Website, marketing, customer relationships and experiences
  • To deliver relevant marketing materials to you (in the form of our newsletter) and to measure or understand the effectiveness of the advertising we serve to you
Event partners and licensees

Event rights holders

Data processing and analytics vendors

Fulfilment vendors

Payment processors

CRM Partners

Location data
  • the Website
  • Ticketing partners
  • Social Media
  • Event partners and licensees
  • Direct from the Booking Client
  • Hospitality Package providers
  • Event rights holders
  • Delivering personalized experiences
  • Providing improved experiences and products
  • Promotions and advertising
Data processing and analytics vendors

Ad serving vendors

Demographic data
  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • Social Media
  • Providing tailored services, experiences and products
  • Improving services, experiences and products
Data processing and analytics vendors
Cookie data
  • Use of the Website
  • Ticketing partners
  • Social Media
  • Delivering optimized services, experiences and products
  • Advertising
Advertising vendors
Usage data
  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • Social Media
  • Delivering optimized services, experiences and products
  • To use data analytics to improve our Website, marketing, customer relationships and experiences
  • To deliver relevant marketing materials to you (in the form of our newsletter) and to measure or understand the effectiveness of the advertising we serve to you
Data processing and analytics vendors

Event partners and licensees

Event rights holders

 

3.5 Under data protection law, we can only use your personal data if we have a proper reason. The above table sets out our purpose for using such data. The reason for using such data will be, in the case of marketing, where you have given your consent. Where you have purchased goods or services, the processing of your personal information will be necessary in order to perform the contract with you. Otherwise, in many other cases, the processing will be necessary for the purpose of legitimate interests we are pursuing, namely facilitating of the purposes for which your personal information is processed as set out above. We may also have to process your personal information to comply with our legal and regulatory obligations.

3.6 We will disclose personal information to other companies within our group of companies, government bodies and law enforcement agencies, successors in title to our business and suppliers we engage to process data on our behalf.

3.7 We will be required to disclose your personal information, including Special Category Data, to third parties as set out in the table above for the purposes of fulfilling your event booking (including the purchase of Ticket(s) and Hospitality Packages).

3.8 We are permitted to pass on your details pursuant to this clause 3 for the reasons set out in clause 3.5. If you have any questions in regards to any disclosures, please contact us.

4           TRANSFER

4.1 We may be required to transfer your personal data to third parties outside of the European Economic Area. In those cases we will comply with applicable UK laws designed to ensure the privacy of your personal data.

4.2 Under data protection laws, we can only transfer your personal data to a country outside the UK where:

 

4.3 Where we transfer your personal data outside the UK, we do so on the basis of an adequacy regulation or legally-approved standard data protection clauses recognised or issued further to Article 46(2) of the UK GDPR. In the event we cannot or choose not to continue to rely on either of those mechanisms at any time, we will not transfer your personal data outside the UK unless we can do so on the basis of an alternative mechanism or exception provided by UK data protection law and reflected in an update to this policy. Further details are set out in our client framework agreement with you.

5           SECURITY

5.1 We take the security of your information very seriously and have controls and processes to minimise the risk of a data breach occurring, though you must take responsibility when visiting other websites, even if following a link to them from our

5.2 We have put in place procedures to deal with any suspected or actual personal data breach and will notify you or the appropriate regulator where we are legally required to do so, and we will make all efforts to minimise the

5.3 We may use external companies to process information which are based overseas and outside Europe. We ensure that they have strict checks and controls in place to keep your information

6           DOCUMENT RETENTION

6.1 We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

6.2 To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

7           OTHER WEBSITES

Our Website may contain links to other websites which are outside our control and are not covered by this Privacy Policy. If you access other sites using the links provided, the operators of these sites may collect information from you which will be used by them in accordance with their privacy policy, which may differ from ours.

8           ACCESS RIGHT

Under certain circumstances, you have rights under data protection laws in relation to your personal data such as:

If you wish to exercise any of these rights please email us at csm.legal@csm.com. No fee is usually required to exercise your rights under data protection law, however we may charge £10 if your request is clearly unfounded, repetitive, excessive or if you require further copies of the information that we have already sent you.

9           INTERNET-BASED TRANSFERS

Given that the Internet is a global environment, using the Internet to collect and process personal data necessarily involves the transmission of data on an international basis. Therefore, by browsing this Website and communicating electronically with us, you acknowledge and agree to our processing of personal data in this way.

10        COOKIE POLICY

10.1 Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our site. By continuing to browse the site, you are agreeing to our use of A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.

We use the following cookies:

10.2 Use of cookies:

 

For Tickets and Hospitality Purchases made through https://mlblondonseries.csm.com/  – the following cookies apply:

Cookie Purpose Retention
ASP.NET_SessionId Net_SessionId is a cookie which is used to identify the users session on the server. The session being an area on the server which can be used to store data in between http requests.

 

Browser Session
user Stores the logged in users encrypted identifier

 

30 days
csm Used by the website and CMS tool

 

Browser Session
cookiePanelClosed Used to determine when a user has given consent to use cookies on the Website

 

365 days
_ma_trk Used by CSM Marketing Automation Platform which enables core website functionality.

 

365 days
_ma_cls Used by CSM Marketing Automation Platform which enables core website functionality.

 

Browser Session
_ga, _ga_XXX To provide data about the way the Website is used in order to improve your experience. Google Analytic’ cookies record visitors, city locations, browser type and site journey. They do not record personal information.

 

Expires after 1 year

 

For Tickets and Hospitality Purchases made through www.csm-hospitality.com – the following cookies apply:

 

Cookie Purpose Retention
ASP.NET_SessionId Net_SessionId is a cookie which is used to identify the users session on the server. The session being an area on the server which can be used to store data in between http requests. Browser Session
cookieconsent_status Used to determine when a user has given consent to use cookies on the Website 365 days
_ma_trk Used by CSM Marketing Automation Platform which enables core website functionality. 365 days
_ma_cls Used by CSM Marketing Automation Platform which enables core website functionality. Browser Session
__dd_s DataDog Real User Monitoring Expires after 1 hour
_ _ga To provide data about the way the Website is used in order to improve your experience. Google Analytic’ cookies record visitors, city locations, browser type and site journey. They do not record personal information. Expires after 2 years
_ _gat To provide data about the way the Website is used in order to improve your experience. Google Analystics’ cookies record visitors, city locations, browser type and site journey. They do not record personal information. Expires after 10 minutes

 

11           Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting

12           You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our

 

Last update: 24 November 2022.