Privacy

Castlemagner GAA is responsible for the personal information collected through this website. This notice explains what is held, why, and what you can ask for.

Written to info@castlemagnergaa.com, or by post to (the club has not yet published a postal address — please ask by email).

The website itself is built and run for the club by Imperial Resources Limited, trading as The Crest, who process this information on the club's instructions and for no purpose of their own.

What is collected, and why

If you book a facility

Your name, email address, phone number and the details of the booking. The club needs these to give you the pitch or the hall at the time you asked for, to contact you if something changes, and to keep a record that the booking was paid for.

The lawful basis is performance of a contract: you asked to book something, and the club cannot do that without knowing who you are.

Card details are handled by Stripe and are never seen or stored by the club or by The Crest.

If you buy something, or give to a fundraiser

The same, and what you bought or gave. Again a contract, and — for the receipts and the accounts — a legal obligation under tax law to keep a record.

If you enter the club lottery

Your name, email address, and the entry itself. Lottery records are kept for as long as the club's permit or licence requires them to be kept, and are held under a legal obligation rather than because the club wants them.

Every entrant confirms they are eighteen or over. The club does not knowingly accept an entry from anybody younger.

If you send an enquiry

Whatever you write in the form, with your name and email address so the club can reply. The lawful basis is the club's legitimate interest in answering people who get in touch with it.

If you turn on alerts

If you press Get alerts, your browser gives the club an address that its push service — Apple, Google or Mozilla, depending on your phone or browser — uses to wake it, and the club keeps that address with the teams you chose to follow — the club's own, or a team at one of its blitzes or tournaments, whose phone then hears only that team's day. Nothing else: no name, no email, nothing that says whose phone it is. The alert itself is fetched from the club's own site when it arrives, so the push service never sees what it says. The lawful basis is your consent, which the button asks for and the same button withdraws.

Turn alerts off with that button, or in your browser's settings, and the address is deleted. An address the push service reports as no longer in use is deleted automatically.

If you book a place at a camp or a course

Your own name, email address and phone number, as for anything else you book.

Where the club has asked for it, the first name of the person each place is for — usually a child. This is the only information about anybody under eighteen that this website holds, and it is collected because the club cannot run a camp it has been paid for without knowing who is coming.

There is nowhere on the form to enter anything else about them. No age, no date of birth, no school, no dietary or medical information — the form refuses it, and if the club needs any of that it will ask you separately, away from this website. The lawful basis is performance of a contract: you booked a place, and the place is for somebody.

A first name is deleted automatically thirty days after the event. Nobody has to remember to do it. You can ask the club to remove one sooner, at any time, and it will be gone the same day.

If you enter a team in a blitz or tournament

The team's name, its club if you give it, and your name, email address and, if you give it, phone number, as the adult to contact about the team. The club needs these to confirm the entry and to reach you about the day. Nothing about the players is asked for, and there is nowhere on the form to put it. The lawful basis is performance of a contract: you asked to enter a team.

Whoever enters a team confirms they are eighteen or over. An entry fee, where there is one, is paid to the club through Stripe, as anything else you buy.

Your contact details are deleted automatically thirty days after the event. The team's name stays on the schedule and the results.

If you are an officer of the club

Your name and role, and — where the club has chosen to publish it — a contact email or phone number so that people can reach the right person. Committee members can ask for their details to be taken off the public site at any time.

Children

The only thing this website ever holds about a child is a first name against a place at a camp or a course, and only where the club has asked for one.

That is a deliberate limit rather than an accident of design, and everything else follows from it. There are no member records, no player records, no parent accounts, no squad lists, and no way to enter one. Bookings, orders and lottery entries are all confirmed as being made by an adult. If a club needs to hold anything more about underage players — a date of birth, a medical note, a consent form — it uses its governing body's system for that and not this website, because this website has nowhere to put it.

The first name is held by the club, is visible only to the people who run the club rather than to everybody who can edit the website, and deletes itself thirty days after the event.

If you believe a child's details have reached this site anyway, write to info@castlemagnergaa.com and they will be removed.

Who else sees it

The club's own committee, so far as their role needs it.

The Crest run the website and the database it sits in. They act only on the club's instructions, under a written data processing agreement, and use a small number of other companies to do it — payments, email, hosting. Each is named, with what they hold and where they hold it, at The Crest's sub-processor list.

Nobody's details are sold, and nothing on this website tracks you across other websites.

How long it is kept

• Bookings — anonymised two years after the booking, so that the club keeps the pattern of use without keeping you.
• Orders and donations — for as long as tax law requires the records to be kept.
• Lottery entries — for as long as the club's permit or licence requires.
• Enquiries — until the club has dealt with them, and no longer than a year afterwards.
• Names on a camp place — thirty days after the event, automatically. A place that was never paid for is forgotten within a day.
• Team entry contacts — thirty days after the event, automatically; an entry whose fee was never paid is forgotten within a day.
• Officers — until they leave the committee.

Cookies

This site sets two cookies, both of them strictly necessary for it to work, and does not track you. There is a fuller explanation on the cookies page.

What you can ask for

You have the right to:

• see what is held about you;
• correct it if it is wrong;
• have it deleted, unless the club is required to keep it;
• restrict or object to what is done with it;
• receive a copy in a portable form, where it was given under a contract or with consent.

Ask by writing to info@castlemagnergaa.com. The club has one month to answer, and does not charge for it.

A name on a camp place is deleted on request the same day, and in any case thirty days after the event whether anybody asks or not.

There is one thing the club cannot delete on request: the record of a lottery entry, for as long as the permit under which the lottery runs requires it to be kept. That is Article 17(3)(b) of the GDPR — a legal obligation overriding erasure — and it is the only such case on this website.

If you are unhappy

Tell the club first, at info@castlemagnergaa.com. If that does not resolve it, you can complain to the Data Protection Commission:

Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 dataprotection.ie

Anything else the club does

The club has not added anything here. If it collects personal details in any way other than through this website, it should.

Version v4.