PRIVACY POLICY

1. Data Controller

The “data controller” for your personal data is the London Fenerbahçe Supporters’ Association (London, United Kingdom). Your data is processed for the purposes set out below and in accordance with the applicable legal bases.

2. Data We Collect and Purposes

The Association collects and processes the following personal data solely for the stated purposes:

• Membership operations: First name, surname, email, phone, address, date of birth, membership and family member details — for member registration, membership management, communicating with you and carrying out the association’s activities.
• Contact form: Full name, email, message — to respond to your request and to communicate with you.
• Payment operations: Payment details processed through our payment provider (Stripe) for membership fees and donations — to receive and record payments.
• Ticket / event requests: Relevant member and request details — to process ticket or event requests.
• Technical data: IP address, session information, essential cookies — for the security and proper functioning of the website.

3. Legal Basis (UK GDPR)

Your personal data is processed on one or more of the following legal bases set out in the UK GDPR: (a) your explicit consent, (b) the performance of our contract with you, (c) our legal obligation, (d) the legitimate interests of the association or a third party (for example, providing membership services, security). For matters such as the contact form and marketing, your data is processed on the basis of your explicit consent.

4. Retention Period

Your data is retained for as long as the purpose of processing requires and in line with legal retention obligations in the United Kingdom. At the end of this period the data is deleted or anonymised.

5. Your Rights (UK GDPR)

Under the UK GDPR you have the following rights regarding your personal data:

• Access: To find out whether your data is being processed and, if so, to obtain information about it.
• Rectification: To request that inaccurate or incomplete data be corrected.
• Erasure (“right to be forgotten”): To request the deletion of your data under certain conditions.
• Restriction of processing: To request that the processing of your data be limited in certain circumstances.
• Data portability: To receive your data in a structured, machine-readable format or to request its transfer to another data controller (where applicable).
• Objection: To object to processing based on legitimate interests or to processing for direct marketing purposes.
• Automated decision-making: The right not to be subject to decisions based solely on automated processing (e.g. profiling) (where applicable).

To exercise these rights, you can write to us via the email addresses or the form on the Contact page. You also have the right to lodge a complaint with the United Kingdom’s data protection authority (ICO – Information Commissioner’s Office): ico.org.uk/make-a-complaint.

6. Data Security and Sharing

Your data is protected with appropriate technical and administrative measures. Your data is shared only with parties from whom we receive services and with whom we are bound by a data processing agreement (e.g. payment infrastructure, hosting), and only to the extent necessary. Your data is not sold to third parties or used for commercial purposes without your consent or a legal obligation. Data is kept in the United Kingdom or in countries with an adequacy decision; for transfers to other countries the safeguards required by the UK GDPR are applied.