Interstitial

Privacy Policy

This Privacy Policy lets you know what happens to any personal data that you provide to us, or any that we may collect about you. If you need any more information, contact us at privacy@fanatics.co.uk. It was last updated on 24 June 2020 to take into account new ways in which we use your personal data, and your rights in relation to it.

This policy applies only to personal information processed by or on behalf of Fanatics (International) Limited. We share some of your information with Club Atlético de Madrid S.A.D. (“Atlético de Madrid”) who shall be the controller of that data shared with them. Their privacy policy sets out how they will use this information.

About us and how to contact us

We are Fanatics (International) Limited. You can contact us at privacy@fanatics.co.uk. Our address is Stubbs Mill, Upper Kirby Street, Manchester M4 6FN.

What personal information do we collect, why, and what are your rights?

We collect information from you when you visit our website, use our mobile applications (collectively our “Properties”), purchase something from us, contact us by telephone or email or receive a communication from us or otherwise interact with us on our social media channels, our advertising or our other properties that we operate. We also receive information about you from Atlético de Madrid. We may also collect information about you from services providers, other third parties that provide information to us, such as Business Partners (as defined below), advertising networks, public sources, social media platforms and networks.  The provision of information to us is voluntary; however, if you do not provide us with Transaction information or Preference information, we may not be able to fulfil your order or provide you with updates. We may also combine information that we receive from the various sources and make inferences from the information to create a profile about you reflecting your preferences and characteristics.

Category of personal data: Contact Information. Examples of your personal data: Name, Email Address, Telephone Number.

Category of personal data: Transaction Information. Examples of your personal data: Contact information, together with purchase details, delivery details, payment details, any communications we have about your purchase.

Category of personal data: Legal Information. Examples of your personal data: Fraud checks or flags raised about your transactions, payment card refusals, complaints.

Category of personal data: Preference Information. Examples of your personal data: Your marketing preferences, your account settings including any default preferences, any preferences we have observed, such as the types of offers that interest you, or the areas of our website that you visit.

Category of personal data: Communications. Examples of your personal data: Communications we may have with you, whether relating to a transaction or not. Please note that we record calls to our customer services team.

Category of personal data: Voluntary Information Examples of your personal data: Any voluntary information you provide us with, such as your date of birth, gender, favourite football teams or players, responses to surveys or competition entries.

Category of personal data: Observed Information. Examples of your personal data: Internet and other electronic activity that is gathered automatically (subject to your consent to our Cookie Policy in certain cases) when you visit our Properties or interact with us or our advertisements, including details of your online browsing activities on and sometimes off our website, such as the pages, products or areas of our website that you visit, the date and time you access the website, the operating system you are using or which link has brought you to our website from our email communications or other websites  including device identifiers (such as advertising IDs, pixel and cookie IDs (see our cookie policy), and IP address.

This information may be identifiable to you because you are logged in to your account, or because we have collected details of your IP address or the device that you have used to access the website. This will also collect the geographic region which your device reports to us that you are located in.

We use the data we collect about you for various purposes. European data protection legislation sets out specific “lawful bases” for processing personal data. The below sets out under which basis we process different information about you and explains the purpose of that processing. It also sets out the specific rights you have in respect of that processing, which may depend on the basis we process it for.

Lawful basis and purpose: Consent: to send you direct marketing in accordance with the preferences you select when you sign up to receive updates or purchase products. You can also change your preferences via the unsubscribe link on any communication from us. What personal data do we use? Contact Information. Specific rights you may request: To withdraw your consent. You can withdraw your consent to receive direct marketing from Fanatics by clicking on the unsubscribe link in any communication from us or by emailing privacy@fanatics.co.uk.

Lawful basis and purpose: Consent: For Atlético de Madrid to send you direct marketing in accordance with the preferences you select when you sign up to receive updates or purchase products. What personal data do we use? Contact Information. Specific rights you may request: If you have consented to Atlético de Madrid sending you direct marketing, once we have notified Atlético de Madrid of this consent, you may withdraw this consent by clicking on the unsubscribe link in any communication from Atlético de Madrid, or as set out in Atlético de Madrid’s privacy policy.  

Lawful basis and purpose: Consent: To collect certain personal data about you via cookies or other similar technologies, as more fully described in our Cookies Statement. What personal data do we use? Observed Information Specific rights you may request: To withdraw your consent.To have your personal data erased.

Lawful basis and purpose: Consent: Where you have given your consent, to market goods and services of our affiliates, Business Partners (as defined below) and other third parties. What personal data do we use? Contact Information Specific rights you may request: To withdraw your consent.To have your personal data erased.

Lawful basis and purpose: Performance of our contract with you: to fulfil your order, take payment and deliver your goods to you or the recipient you indicate, to deal with any complaints or any after sales services, including for warranty purposes and to process claims under Transfer Shield. What personal data do we use? Transaction Information. Specific rights you may request: To obtain a machine-readable copy of information you have provided to us (the right of portability)

Lawful basis and purpose: In order to offer you Klarna’s payment options: for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you. General information on Klarna can be found here. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna’s privacy policy. What personal data do we use? Transaction Information, Contact Information. Specific rights you may request: To obtain a machine-readable copy of information you have provided to us (the right of portability).

Lawful basis and purpose: Complying with legal obligations: To confirm your identity. To keep records required by law or to evidence our compliance with laws, including tax laws, consumer protection laws and data protection laws. To provide information to law enforcement agencies or other authorities where we are required to do so. What personal data do we use? Legal information, Transaction information, Communications (where relevant), Preference information in the case of marketing and cookie preferences only. Specific rights you may request: To obtain a machine-readable copy of information you have provided to us (the right of portability)

Lawful basis and purpose: Our legitimate interests: For our internal business administration, to manage customer accounts, including keeping general records of customers, sales, customer care and other interactions, to process claims under Transfer Shield and to protect genuine customers and our business from fraud to minimise the risk of false details being used, and abuse of card details by fraudsters. This is necessary for us to operate efficiently, deal with any issues which may arise and to protect ourselves against any future legal claims and ourselves and others against fraudulent transactions. What personal data do we use? Transaction information, Legal information, Communications, Preference information, Contact information, Preference information, Communications, Voluntary information. Specific rights you may request: To restrict our processing to storing your personal data, using it for purposes of legal advice or action, or to protect another individual. To object to our use of your personal data for the purposes stated. To have your personal data erased where it is used for direct marketing purposes or where we cannot show an overriding legitimate interest.

Lawful basis and purpose: our Legitimate Interests: To manage any competitions or other promotions that you have chosen to participate in. What personal data do we use? Transaction information, Preference information, Communications, Preference information, Voluntary information, Observed information. Specific rights you may request: To restrict the basis of our processing.  To object to our use of your personal data for the purposes stated. To have your personal data erased where it is used for direct marketing purposes or where we cannot show an overriding legitimate interest.

Lawful basis and purpose: our Legitimate Interests: To send you a single Abandoned Cart email where you have placed items in your basket but not completed your order. What personal data do we use? Email address. Specific Rights you may request: To have your personal data erased.

Lawful basis and purpose: our Legitimate Interests: To target our direct marketing to you (where you have consented to receive it): This means that we use the information you provide us with and Observed Information to build a better picture of the type of offers and products we can provide which you might be interested in, so that the communications you receive are more relevant to you. Without using this information, we could only send generic communications to you, and we’d rather not be cluttering up your inbox! We believe this is justified as you are in control over whether you receive our marketing, each time we contact you. What personal data do we use? Transaction information, Preference information, Communications, Preference information, Voluntary information, Observed information. Specific rights you may request: To restrict the basis of our processing. To object to our use of your personal data for the purposes stated. To have your personal data erased where it is used for direct marketing purposes or where we cannot show an overriding legitimate interest.  To withdraw your consent to direct marketing please click in the unsubscribe link in any communication from us or email privacy@fanatics.co.uk.

Lawful basis and purpose: our Legitimate Interests: To customize your visit, to enable us to enhance our service, or for other purposes. For example, information provided through cookies is used to recognize you as a previous user of our Properties, so you do not have to enter your personal information every time and to offer personalized content. What personal data do we use? Observed Information, Transaction Information, Preference Information. Specific rights you may request: To object to our use of your personal data for the purposes stated. To have your personal data erased where it is used for direct marketing purposes or where we cannot show an overriding legitimate interest.

Lawful basis and purpose: Our Legitimate Interests: To improve our marketing activity, Properties and technology more generally: This means we use information about you and about our other customers to work out what is working and what is not in terms of our marketing activity or our sales performance, so that we can develop our Properties, products and offers to be more relevant to our customers generally, to improve your online experience and the products we offer. We will also use information provided by your device to recommend the intended geographic website for the location it reports you as being in. Where possible, we will use statistical or pseudonymised data for these purposes. What personal data do we use? Communications (where relevant), Voluntary information, Observed information. Specific rights you may request: To restrict the basis of our processing. To object to our use of your personal data for the purposes stated. To have your personal data erased where it is used for direct marketing purposes or where we cannot show an overriding legitimate interest.

Lawful basis and purpose: Our legitimate Interests: To target our marketing activity more generally (where you have consented to receive marketing communications): This means that we share details of existing customers with third parties to create ‘lookalike’ audiences. We do this to build a better picture of the type of individuals who may be interested in our products and focus our marketing activity on those individuals. This marketing activity may occur on one of our Properties or on other websites that you may visit (including social media sites).To personalize our marketing, our affiliates and Business Partners. What personal data do we use? Contact Information, Preference information, Observed Information Specific rights you may request: To restrict the basis of our processing. To object to our use of your personal data for the purposes stated. To have your personal data erased where it is used for direct marketing purposes or where we cannot show an overriding legitimate interest.

Lawful basis and purpose: Our legitimate interests: To share your information with Atlético de Madrid: This means that although we control this website and sell the products you purchase directly to you (including managing all aspects of fulfilment), we have been asked to do so by Atlético de Madrid and are licensed to use their brand. As a part of that relationship, we share details of customers of Atlético de Madrid products. Atlético de Madrid will use your personal data in accordance with their privacy policy and you can contact them directly with any questions by emailing the relevant contact set out in their privacy policy. What personal data do we use? Contact Information, Preference Information, Observed Information, Voluntary Information

Lawful basis and purpose: Where you have given your consent, to deliver targeted advertising and match you across devices, channels and platforms (as set out in our Cookie Policy) (about our products, products of our affiliates or other third parties and services as otherwise described in this Policy). What personal data do we use? Contact Information, Preference Information, Observed Information, Voluntary Information. Specific rights you may request: To restrict the basis of our processing. To object to our use of your personal data for the purposes stated. To have your personal data erased.

Lawful basis and purpose: To provide you with FanCash that you can spend on the Properties operated by us or our affiliates that may be participating in our FanCash program and provide you with FanCash balance updates. What personal data do we use? Contact Information, Voluntary Information, Observed Information, Transaction Information. Specific rights you may request: To object to our use of your personal data for the purposes stated. To have your personal data erased where it is used for direct marketing purposes or where we cannot show an overriding legitimate interest.

In all cases, you may have the right:

·         To access the personal data, we hold about you

·         To correct the personal data, we hold about you

Third-Party Websites and Social Media Services

The website may contain links to other websites or Internet resources. When you click on one of those links, you are contacting another website or Internet resource. We have no responsibility or liability for, or control over, those other websites or resources or their collection, use and disclosure of your information. We suggest that you read the privacy policy and terms of use of each such website.

Social Media, Widgets and Open Forums

Our Properties may allow you to engage with social media services, such as Facebook, Twitter, Pinterest and Instagram ("Social Networks"), and widgets such as the "Share this" button, or interactive mini-programs that run on our website or which link from Social Networks to our website ("Social Functions"). These Social Functions may access, collect, and integrate with your Social Network accounts and information. For example, these Social Functions may collect your IP address, identify which page you are visiting on our Properties, or set a cookie. We may make available the opportunity for Social Functions to be used to register you as a website user. For example, if you are not currently registered as a website user and you use certain Social Functions, you will be asked to enter your Social Network credentials and then be given the option to register and join the Website. If you choose to use these Social Functions, you may be sharing certain Social Network profile elements with us, including your name, birthday (month/day), comments, contacts, email address, photos, or favourite teams. This sharing is subject to each Social Network's own privacy policy and terms of use. We do not control those Social Networks or your profiles on those services. Nor do we modify your privacy settings on those services or establish rules about how your personal information on those services will be used. Social Functions are either hosted by a third party or hosted directly on www.allaboutcookies.org. Please refer to the privacy settings in your Social Network account to manage the data that is shared with us through your account. Information you include and transmit online in a publicly accessible blog, chat room, or Social Network, or that you share in an open forum such as an in-person panel or survey, may be viewed and used by others without any restrictions. We do not control such uses of your personal information, and by using such services you assume the risk and acknowledge that the personal information provided by you may be viewed and used by us and/or third parties for any number of purposes and that the usage restrictions set forth in this Privacy Policy do not apply to such services.

Exercising your rights

You may exercise any of the rights outlined above by emailing us at privacy@fanatics.co.uk.

Please contact us if you have any concern about how your personal information is processed at privacy@fanatics.co.uk and we will try to resolve your concerns. However, if you consider that we are in breach of our obligations under data protection laws, you may lodge a complaint with the Information Commissioner’s Office in the United Kingdom or your home country.

If you wish to restrict or block the cookies which are set by our website, or any other website, you can do this through your browser settings. The 'Help' function within your browser should tell you how. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org. You may also wish to visit www.youronlinechoices.com/uk/your-ad-choices to learn more about the cookies on your device set by other companies, and opt out of them if you wish. However, if you use your browser settings to block all cookies (including strictly necessary cookies) you may not be to access all or parts of our site.

Mobile Application-Based Opt-Outs. To the extent we have launched an App, cookie-based opt-outs are not effective on mobile applications. You may opt out of certain advertisements on mobile applications or reset advertising identifiers via their device settings. To learn how to limit ad tracking or to reset the advertising identifier on your iOS and Android device, click on the following links: 

·         iOS - https://support.apple.com/en-us/HT202074

·         Android - https://support.google.com/ads/answer/2662922?hl=en

Location Data Opt-Out. In some cases, such as when using an App, you may also adjust the settings on your mobile device to allow or restrict the sharing of location information. For example, the "location" permissions on your mobile device may allow you to elect whether to never share location information with us, to share location information only while you are using the Properties or always share location information even if you are not using the Properties. If you elect to not share your location information, you may be unable to access some features of our services that are designed for mobile devices. Also, if you prevent the sharing of location information, we may still estimate your general location based on the IP address you use to access our services.

Who do we share personal information with and where are they?

As set out above, we share your personal data with Atlético de Madrid, whose brand we are licensed to use in the provision of this website and the products sold on it.

We will share your personal data with our service providers, our parent company and affiliated entities. We will have in place an agreement with our service providers (including our parent company Fanatics Inc, and other affiliated entities who provide some services for us) which will restrict how they are able to process your personal information and require them to keep it secure. We use some service providers directly in the fulfilment of your orders, for example for personalisation services, or where products are shipped directly by the manufacturer from their warehouse. Other service provider examples include IT providers, internet service providers, and data analytics providers. We may also use service providers in less direct ways, such as in the provision of our payment and finance systems, and to anticipate, prevent, and detect fraud. If any service provider or affiliated entity is based outside of the United Kingdom or the European Economic Area, we will ensure that the provider is either a current subscriber to the EU/US Privacy Shield, or we have an appropriate contract for the international transfer of personal information with them. In respect of Fanatics Inc, and our affiliates entities we have a contract in place in the form authorised by the European Commission and the United Kingdom Information Commissioners Office for the international transfer of personal data.

We share some of your data with Rokt Pte Ltd (“Rokt”), who use that information to target their direct marketing to you (where you have consented to receive it). This means that Rokt use the information you provide us with, so that they can serve on-site advertisements to you.  We believe this is justified as you are in control over whether you receive our direct marketing, each time we contact you. More information about how Rokt process your personal data and how you may exercise your rights in relation to that data can be found in their privacy policy.

Our website also contains scripts from third party affiliates who will gather Observed information about you in order to verify referrals from third party advertising. We do not process this information, but it is collected directly by them and processed in accordance with their privacy policies.

We may disclose your information to third parties to provide you with services or benefits. For example, if you participate in our FanCash program, we may share your personal information with Business Partners and other third parties to operate the program and allow you to acquire and redeem points.

We may share any of your personal data with a prospective purchaser or purchaser of any part of our business, or otherwise in connection with a sale, merger, change of control, bankruptcy, or similar transaction on the basis of our legitimate interests and the interests of our purchaser, so that they can appropriately value the business and assess any risks and continue doing business with you after the acquisition.

We may share your personal information: (a) as required by law or legal process; (b) to investigate suspected fraud, harassment, or other violations of any law, rule, or regulation; (c) to investigate suspected violations of any terms or policies applicable to the Properties or the services provided by us or our third party providers or affiliates; or (d) where we reasonably conclude that it is necessary for defending, exercising or establishing our legal rights.

Business Partners.  If you have consented, we may share your personal information with third parties for their own purposes (“Business Partners”) (or their service providers), such as for marketing purposes. In many cases, such sharing is related to our operation of the website, such as sharing your personal information with a Business Partner when you purchase that Business Partner's merchandise from us. You may contact us to opt out of such sharing in some cases. However, we do not control how Business Partners use and share your information once they receive it. You will need to contact such Business Partners directly for information about their privacy practices or to exercise rights you may have (including if you would like to opt-out of receiving future emails from a Business Partner).

With other third parties with your consent.

How long do we keep your information for?

We will only retain your personal information for the purposes set out in the policy and for as long as we have a legal or business requirement to do so.  By law, different retention periods apply for to different types of records and data, however the longest we will normally hold any personal data is 7 years from the date of your last transaction, for taxation, accounting and risk management purposes. This may be extended in the event of a query, investigation or dispute until fully resolved.

Where is your data located?

Our servers are maintained in the United States of America ("USA"). You understand that data stored in the USA may be subject to lawful requests by the courts or law enforcement authorities in the USA.