SUMMARY PRIVACY STATEMENT - NO HEART NO GLORY CAMPAIGN

This privacy statement was last updated on date of 11 January 2023, it is the first version.

Your privacy is important to us! If you would like to find out more specifically how we handle your data within the No Heart No Glory campaign, you can find the Privacy Statement here. The brief summary of our Privacy Statement below will get you up to speed in less than two minutes. Would you like to know more? Then we invite you to read our full Privacy Statement, which explains everything in detail.

What is there to know?

On average, some thirty Belgians suffer a cardiac arrest every day, and less than ten percent survive. In this context, CLUB BRUGGE NV (hereafter “Club Brugge”), in collaboration with Unibet, launched the No Heart No Glory campaign, whereby by completing a quiz (supported by augmented reality), participants in this campaign can test their knowledge regarding CPR (hereafter “Campaign”). If the participant achieves a perfect score on the quiz, that person is eligible to claim a reward. This Campaign is offered to the participant through a web application (hereinafter “Web Application”).

When participating in the Campaign, Club Brugge processes certain Personal Data of the participants. Club Brugge will protect the Personal Data in every possible processing and respects the Belgian and European legislation in this respect.

What information may we collect from you?

  • Date of birth of Campaign participant.
  • Location, gender and contact information (such as name, first name and email address) of the Campaign participant
  • Participants' answers to quiz questions in the context of the Campaign.

Why do we collect this information?

We collect your Personal Data only to provide you with the best possible participation in the Campaign. Your Personal Data will in no way be used for marketing purposes.

What legal basis do we use to process your Personal Data?

We process your Personal Data based on the contractual relationship between you and Club Brugge, as well as, where appropriate, on the basis of your consent.

Who has access to your Personal Data?

Depending on the purpose and specific context, Club Brugge employees may have access to your Personal Data. However, such access will be limited based on the job content and access rights of such Club Brugge employee, including by providing appropriate access rights.

How long do we keep your Personal Data?

Personal Data will be retained and processed by us for the period we are legally required to do so or for as long as is essential for the purposes of the processing or for the contractual relationship between you and Club Brugge.

A detailed explanation of these retention periods can be found in Article 4 of the full Privacy Statement below

What is in your control?

or any processing of your Personal Data, you may exercise the following rights by sending an e-mail todpo@clubbrugge.be (for more info: see article 5 of the full Privacy Statement below ):

  • Right of access and inspection: you have the right to access your Personal Data and the use we make of your Personal Data, for example, by requesting a copy of your Personal Data that Club Brugge holds and processes;
  • Right of rectification, deletion and restriction: you have the right to have your data rectified, your data deleted (unless we are obliged to retain your Personal Data) or to restrict processing;
  • Right to object: you have the right to withdraw a previously given consent for processing;
  • Right to withdraw consent: u heeft het recht om een eerder verleende toestemming voor verwerking stop te zetten;
  • Right to lodge complaint: you have the right to lodge a complaint with the Data Protection Authority if you suspect that your Personal Data is not being treated properly by Club Brugge;
  • Automated decisions and profiling: you have the right to ask us not to be the subject of a decision based on automated processing (including profiling);
  • Right of free data transfer: you have the right to request your Personal Data in a structured and machine-readable format, or in another commonly used format so that it is readable by another controller.

Article 1 - GENERAL

  1. On average, some thirty Belgians suffer a cardiac arrest every day, and less than ten percent survive. In this context, CLUB BRUGGE NV (hereafter “Club Brugge”), in collaboration with Unibet, launched the No Heart No Glory campaign, whereby by completing a quiz (supported by augmented reality), participants in this campaign can test their knowledge regarding CPR (hereafter “Campaign”). If the participant achieves a perfect score on the quiz, that person is eligible to claim a reward. This Campaign is offered to the participant through a web application (hereinafter “Web Application”).

    This Privacy Statement was created to inform you about how we handle your Personal Data, being any information relating to an identified or identifiable person (hereinafter “Personal Data“) and how you can exercise control over it.

    This Privacy Statement may be revised from time to time. The most recent text is the version found within the Web Application. When we make changes, we will notify you of the changes through the Web Application.
  2. The controller responsible for processing your Personal Data is CLUB BRUGGE NV, with its registered office at 8300 KNOKKE-HEIST, Herenweg 9, registered with the Crossroads Bank for Enterprises, under enterprise number 0460.444.251.
  3. The collection and processing of Personal Data is subject to strict conditions. Club Brugge acts in accordance with:
    • The European Personal Data Protection Regulation 2016/679 of April 27, 2016; and/or
    • All (future) Belgian laws implementing this Regulation.

This Privacy Statement applies to Campaign participants.

You are under no obligation to share Personal Data with us. However, we will not be able to offer you the Campaign in the best possible way if you decide not to share certain Personal Data with us.

Article 2 - COLLECTED PERSONAL DATA

The following Personal Data is collected as part of the Campaign:

  • The date of birth of the Campaign participant;
  • The contact information (first name, surname and email address) of the Campaign participant;
  • Gender of the Campaign participant;
  • Location of the Campaign participant;
  • Participants' answers to quiz questions in the context of the Campaign.

Article 3 - PURPOSE OF PROCESSING

Club Brugge collects and processes your Personal Data primarily to provide you with the Campaign in the best possible way.

That being said, we additionally use your Personal Data only for the following purposes:

3.1 General purposes

We process your personal data on the following legal grounds and for the following purposes:

CategoryLegal BasisPurpose
Date of birthExecution of the agreement Art. 6.1 (b) GDPRYour date of birth is processed by us to verify that you are over the age of 18 and to determine whether we may display ads from our partner in the Web Application.

For this processing, we rely on the execution of the agreement (in the form of Terms of Use) concluded between you and Club Brugge.
Contact details (First name Name Email address)Execution of the agreement Art. 6.1 (b) GDPRYour contact information is processed by us to offer you the prize resulting from the execution of the agreement (in the form of Terms of Use) concluded between you and Club Brugge.
GenderConsent Art. 6.1 (a) GDPRYour gender is processed by us to map the demographics of our Campaign, and will only be processed if you submit your further details to receive a reward after completing the Campaign.

For this processing, we rely on your (implied) consent that you provide us by submitting your data within the Web Application.
LocationConsent Art. 6.1 (a) GDPRYour location is processed by us to map the demographics of our Campaign.

For this processing, we rely on your (implied) consent that you provide us by submitting your data within the Web Application.
Answers to the quizExecution of the agreement Art. 6.1 (b) GDPRYour answers to the quiz are processed by us in order to calculate and display your score on the quiz and to offer you the prize as results from the execution of the agreement (in the form of Terms of Use) entered into between you and Club Brugge.

3.2 Direct marketing

Your Personal Data processed by us within the context of the Campaign will in no way be used for direct marketing purposes.

If your email address matches an email address already linked to an existing Club ID, your participation will be registered in your user profile. However, we do not engage in direct marketing targeting based on your participation in the Campaign.

3.3 Transfer to third parties

This Campaign is offered to you by Club Brugge in cooperation with Unibet. However, your Personal Data, in the context of the Campaign, will in no way be passed on to Unibet.

That being said, Club Brugge may provide anonymized statistics relating to the Campaign to Unibet if requested to do so.

3.4 Legal obligations

We may be required to disclose your Personal Information as a result of a court order or to comply with other mandatory laws or regulations. We will make reasonable efforts to inform you in advance, unless subject to legal restrictions.

Article 4 - DURATION OF PROCESSING

Personal Data will be retained and processed by us for the period we are legally required to do so or for as long as is essential for the purposes of the processing or for the contractual relationship between you and Club Brugge.

If we are no longer able to maintain your records, they will be sent to you electronically and in a standard format.

If you do not exercise your right to erasure, your Personal Data will be retained for the following periods:

CategoryRetention period
Date of birthThe date of birth of participants in the Campaign, will be kept for 1 year after the last active contact with the participant.
Contact detailsContact information of Campaign participants, will be kept until 1 year after the last active contact with the participant.
Gender The gender of Campaign participants, will be kept for 1 year after the last active contact with the participant.
LocationThe location of Campaign participants, will be kept for 1 year after the last active contact with the participant.
Answers to the quizResponses from Campaign participants, will be kept for 1 year after the last active contact with the participant.

Article 5 - YOUR RIGHTS

5.1 Right of access

You have the right at any time to learn about your Personal Data and the use we make of your Personal Data or to provide information about your Personal Data. This can be done, for example, by requesting a copy of your Personal Data.

5.2 Right to rectification, erasure and restriction

You are free to communicate or not communicate certain Personal Data to us.

You always have the right to ask us to modify or complete your Personal Data if it is inaccurate or incomplete.

You may also request that the processing of your Personal Data be restricted if you believe that your data is inaccurate and you subsequently notify us of this fact, the processing is unlawful, the data is no longer needed, or if you have objected to the processing.

In addition, you have the right to request Club Brugge to erase your data to the extent that we are not in a position to make it anonymous, unless we are obliged to keep it under a legal obligation incumbent upon us.

However, if you refuse to communicate certain Personal Data, or if you ask us to erase them, we may no longer be able to offer you the Campaign in an optimal manner.

5.3 Right to object

You also have a right to object to the processing of your Personal Data when you have serious and legitimate reasons for doing so.

You also have the right to object to the use of your Personal Data for direct marketing purposes. In this case, no specific justification will be requested. That said, and as already indicated above, your Personal Data will not be processed for direct marketing purposes within the context of this Campaign.

5.4 Right to data portability

You have the right to obtain your Personal Data processed by us in structured, commonly used and machine-readable form and/or to transfer it to other controllers.

5.5 Right to withdraw you consent

You have the right to withdraw your prior consent to the processing of your Personal Data where the processing of your Personal Data is based on your consent.

5.6 Automated decision-making and profiling

You have the right to ask us not to be the subject of a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you.

5.7 Exercise of your rights

You can exercise your rights by contacting us,

via email to dpo@clubbrugge.be

or by mail to,

Club Brugge NV
For the attention of the Data Protection Officer
Herenweg 9
8300 KNOKKE-HEIST

5.8 Right to lodge a complaint

You have the right to lodge a complaint with the Belgian Data Protection Authority, which is the data protection authority under which CLUB BRUGGE NV falls:

Gegevensbeschermingsautoriteit
Drukpersstraat 35, 1000 Brussel,
Tel +32 (0)2 274 48 00, Fax +32 (0)2 274 48 35,
Email: contact(at)apd-gba.be

This is without prejudice to a remedy before a civil court. If you are from or work in an EU member state other than Belgium, you may also lodge a complaint with your national data protection authority.

If you would suffer damages as a result of the processing of Your Personal Data, you may bring a claim for compensation.

Article 6 - SECURITY AND CONFIDENTIALITY

Depending on the purpose and context, certain Club Brugge employees will have access to your Personal Data. However, this only for the purposes set out in this Privacy Statement. This access will also be limited based on the job content and access rights of these Club Brugge employees, including by providing them with appropriate access rights.

We have developed security measures that are adapted on a technical, administrative and organizational level, in order to avoid the destruction, loss, falsification, modification, unauthorized access or erroneous notification to third parties of your Personal Data, as well as any unauthorized processing of this data. However, in the event that this would happen and it would concern your Personal Data, Club Brugge will inform you about the breach, including a description of the potential impact and a recommendation to mitigate the possible negative consequences of the breach.

Club Brugge also provides a secure environment for the use of the Web Application. We securely store your Personal Data on our servers located within the European Economic Area. However, certain processors and/or sub-processors may be located outside the European Economic Area. If this is the case, these parties will only process very minimal and/or pseudonymized Personal Data.

Therefore, under no circumstances can Club Brugge be held liable for any direct or indirect damage resulting from an erroneous or unlawful use by a third party of the Personal Data.

Article 7 - APPLICABLE LAW AND COMPETENT COURT

This Privacy Statement shall be governed, construed and enforced in accordance with Belgian law which is exclusively applicable.

The courts competent for the jurisdiction where Club Brugge's registered office is located have exclusive jurisdiction to take cognizance of any dispute that might arise from the interpretation or implementation of this Privacy Statement.

Article 8 - COOKIES

8.1 What are cookies?

A “cookie“ is a small file transmitted by Club Brugge's server and placed on your computer's hard drive. The information stored on these cookies can only be read by Club Brugge.

8.2 Why does Club Brugge use cookies?

The Web Application uses cookies and similar technologies to enable your participation to the Campaign. The cookies we use are safe, and given that they are essential for the functioning of the Web Application they are not optional. However, in order to be transparent, this Article 8 gives you clear and comprehensive information about the cookies used by Club Brugge, including their purpose.

Aanwezige cookies

Name cookieType of cookieDescriptionRetention period
clubbrugge-cpr-viewerEssentialThis cookie captures your date of birth and your language preferences, in order to offer you the Campaign in accordance with the Terms of Use concluded between you and Club Brugge.1 year
clubbrugge-cpr-quizEssentialThis cookie captures your answers to the quiz, to calculate your score on the quiz and to offer you the prize, as results from the execution of the agreement (in the form of Terms of Use) concluded between you and Club Brugge.1 year

8.3 Manage cookies

You can reject or block these cookies by changing the configuration parameters of your navigation system. Disabling cookies may prevent you from using certain functionalities of the Campaign within the Web application.

More information on how to set your browser can be found at the following links:

Google Chrome
https://support.google.com/chrome/answer/95647?hl=nl

Safari
https://support.apple.com/kb/PH19214?locale=en_US

Internet Explorer
https://support.microsoft.com/nl-nl/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox
https://support.mozilla.org/nl/kb/cookies-in-en-uitschakelen-websites-voorkeuren?redirectlocale=nl&redirectslug=Cookies+in-+en+uitschakelen

Currently, some browsers offer a “do not track“ or “DNT“ option that sends a signal to websites visited to indicate a visitor's tracking preference. Club Brugge does not currently respond to these signals because no common industry standard for DNT has been adopted by industry groups, technology companies or regulators.

Keep in mind that changing settings can cause a website to stop working as expected.

More information about cookies can also be found at the following link:
http://www.allaboutcookies.org/

More information on behavioral online advertising and online privacy can be found at the following link:
http://www.youronlinechoices.eu/