SIX NATIONS – PRIVACY NOTICE
Last updated: 02/2024
Summary of how we use your data
Six Nations Rugby Limited will use your personal data during its interactions with you both online and offline, including to administer your Six Nations online account, verify your identity, send you newsletters and marketing materials, to run competitions, to conduct market research, to manage and operate our website, to manage our relationships with our suppliers and partners and to monitor accounts for the purposes of preventing fraud, terrorism, misrepresentation, security incidents or crime.
We will sometimes share your data with others, including our Unions, other rugby stakeholders, our partners and sponsors, suppliers, and other rugby and sports stakeholders.
Where we rely on your consent, such as for issuing newsletters and other direct marketing messages and managing the website, you can withdraw this consent at any time.
What does this notice cover?
This policy describes how Six Nations Rugby Limited (also referred to as "Six Nations", "we" or "us") will make use of your data when you visit our website, sign up to our newsletter, enter competitions, participate in market research, play the Six Nations Fantasy Rugby game and when you interact with us online and offline, including if you attend our premises or events, apply for a role or make use of Six Nations services.
It also discusses how we make use of information that we may receive from third parties about you, such as social media sites, our Unions, other rugby or sports stakeholders, and our partners, sponsors and suppliers.
This notice does not cover any processing in connection with the Six Nations Rugby store, which is operated independently by Fanatics, Inc in accordance with its privacy policy, available here, although it does describe how we receive and share data with Fanatics. This notice also excludes processing of data relating to participants in Six Nations events, which are covered by our notices attached to our Participation Agreements. A further copy of this can be provided to participants on request.
This notice also describes your data protection rights, including the right to object to some of the processing which Six Nations carries out. More information about your rights, and how to exercise them, is set out in the “Your choices and rights” section.
Personal data we may collect about you
We collect and process personal data about you when you interact with us and our websites.
This includes:
Category | Details |
Identification Information | Your name, gender, date of birth, nationality |
Contact Information | Your email address and phone number |
Marketing Information | Your marketing preferences, including any consents you have given us |
Technical and Analytics Information | Information related to the browser or the device you use to access the website, including cookies and other tracking technologies, and other information collected during your visits to our services, including Internet Protocol (IP) address, login data, browser type and version, device type, time zone setting, browser plug-in types and versions, operating system and platform; |
Application-related information | Information related to your application for a role with Six Nations, including relevant information for your application, which may include you curriculum vitae (CV), cover letter, employment history, education history, qualifications and skills, reference contact information, travel preferences, position preferences, willingness to relocate, desired salary, interests and aspirations, background screening information if relevant, immigration status, and information about your entitlement to work. This may include information related to your health, where this is necessary to offer you reasonable adjustments; |
Employment and business information | Your position and employer, your work contact details and your interaction with us in your role, including information provided during the contractual or client relationship between you or your organisation and Six Nations, or otherwise voluntarily provided by you or your organisation. |
Broadcast and media information | Where you attend a Six Nations event, we will receive images and footage of those events to publicise, promote and distribute footage of these events, which may include your image. |
Other Information | Information you voluntarily provide to us, for example by submitting a comment or message in the “Contact us” section of the website, or providing input to competitions, surveys or forms or selecting |
Sometimes, we receive information about you from third parties. In particular:
Social media sites: The website provides interactive features that engage with social media sites, such as Facebook, Instagram and TikTok. If you use these features, these sites will send us personal data about you, such as identification information, account details and the number of followers you have. If you participate in activities on non-Six Nations websites or apps – such as participating in a Facebook application – you may allow us to have access to personal data held by Facebook, or other site or app owners.
We may also obtain information about you from third party demographics providers, which we may use to help us better understand our fans and users and send them appropriate offers and information.
We also receive some information about our fans on the other ways they engage with Six Nations content, or with other rugby stakeholders such as Unions or other rugby tournament hosts. This includes information from partners, sponsors, Unions and other rugby stakeholders on how fans purchase tickets or engage with their sites and services, from broadcasters on their engagement with premium services or from fantasy games where they have a team. This sharing is described in the sites and policies of those third parties. We typically collect information on your engagement with a third party, including details of your interests and transactions although not about your payment details. We use this to better understand our own fans, and to help create more detailed profiles to help offer them more tailored products and marketing.
Where you make purchases on the Fanatics site, we will receive information relating to your purchases, and Marketing Information that you might supply to them.
Where you engage with us as an employee of a partner or supplier, we may receive information from that partner or supplier, such as your contact details and role.
If we provide online services to a child where we need parental consent for this, we may ask for a parent’s email address, to ask for consent.
How do we use this information, and what is the legal basis for this use?
We will only use your personal data for the purposes and legal bases set out below:
Purpose | Personal Data | Legal Basis |
To register and create an account on our website and provide you with access to that account. | Identification Information Contact Information | It is necessary for us to process your personal data to perform our contract with you, or to take steps at your request prior to entering into a contract with you. If you are under 13, we will instead rely on the consent of your parent or guardian in processing this data. |
To administer your account and send you service emails. | Identification Information Contact Information Other Information | It is necessary for us to process your personal data to perform our contract with you, or to take steps at your request prior to entering into a contract with you. If you are under 13, we will instead rely on the consent of your parent or guardian in processing this data. |
For security purposes, including to verify your identity, and to monitor accounts to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law | Identification Information Contact Information Technical and Analytics Information Other Information Information from Third Party Sources | We have a legitimate interest in ensuring the security of our services and data and in preventing and detecting fraud or other wrongdoing. |
To analyse and understand you and to send you newsletters and other direct marketing in relation to ticket competitions, match highlights, player of the championship voting, updates in relation to the Six Nations Fantasy Rugby and other upcoming campaigns or events, including Fixtures and event communications. | Identification Information Contact Information Marketing Information Technical and Analytics Information Other Information Information from Third Party Sources | We will only send you electronic direct marketing based on your consent. If you are under 16, we will need to seek the consent of your parent or guardian before we send you direct marketing. Without this consent, we will not send you direct marketing (even where you have opted in). We may carry out wider marketing analysis and direct marketing based on our legitimate interests where we are not strictly obliged to seek your consent. |
To run competitions and administer prizes. | Identification Information Contact Information Other Information Information from Third Party Sources | It is necessary for us to process your personal data to perform our contract with you including allowing you to enter the competitions. |
For market research, for example to send you surveys. | Identification Information Contact Information Other Information Information from Third Party Sources | We have a legitimate interest in conducting market research and developing our marketing strategy. |
To manage, improve and maintain our website and services, including to keep it updated and relevant, to develop our business and to inform our marketing strategy and respond to feedback. | Technical and Analytics Information Marketing Information Other Information Information from Third Party Sources | Your consent for the use of any cookies or related technologies – see our Consent Management Tool (currently OneTrust). We have a legitimate interest in operating our site and services, analysing their use and improving our services and our marketing strategy. |
To process your application for a role with Six Nations | Identification Information Contact Information Application-related Information Health Data (where provided) Information from Third Party Sources | Legitimate interests, namely to assess your application and your suitability and carry out any permitted pre-employment background checks. Explicit consent where you provide us details of you health to offer you adjustments. |
To publicise, promote and distribute footage of Six Nations | Broadcast and media information | Where you attend a Six Nations event, we will receive images and footage of those events to publicise, promote and distribute footage of these events, which may include your image. |
To protect our business interests, including use in connection managing our relationships with partners and suppliers, with legal claims, compliance, regulatory, auditing, investigative and disciplinary purposes and ethics and compliance reporting requirements, and processing to protect our IP or enforce company policies. | Any of the data listed | Legitimate interests, namely it is in our interests to process data to protect our business interests, managing our relationships with our partners and suppliers, and legal rights including seeking relevant legal advice and sharing with organisations as needed to assist with these purposes. |
To comply with our legal and regulatory obligations. | Any of the data listed | Compliance with our legal obligations including where we need to comply with: data protection legislation consumer law legislation our duty of care obligations a court order in the context of civil or criminal proceedings |
There are instances where we have a legitimate interest to use your data. Our legitimate interest will vary depending on what we are using your data for, and we explain above what the interest is and how it relates to the processing operations that we are carrying out. Where we process personal data based on a legitimate interest, then – as required by data protection law – we have carried out a balancing test to document our interests, to consider what the impact of the processing will be on individuals and to determine whether individuals interests outweigh our interests in the processing taking place. You can obtain more information about this balancing test by using the contact details at the end of the notice.
How we share your personal data
We may share your data with the following categories of recipients:
Personal Data Category | Category of Recipient | Why? |
All categories of personal data | Group entities | For any of the purposes set out above. |
All categories of personal data | Third party service providers | We employ other companies and individuals to perform functions on our behalf. Examples include website hosting and maintenance, customer service operations etc |
Contact Information, Marketing Information, Technical and Analytics Information Other Information | Ad-tech and social media suppliers | To carry out appropriate direct marketing activities, which may include sharing your details to allow us to send you targeted adverts to be displayed on social media or other websites. |
Identification Information, Contact Information, Marketing Information, Technical and Analytics Information, Other Information | Unions, Sponsors, Partners and other rugby and sports stakeholders | To allow us to jointly assess our audience and fans with our fellow stakeholders and partners, and to share information in relation to joint campaigns and to share any opt-ins you may have granted to us to allow these third parties to send you direct marketing. In particular, Diageo plc has placed a pixel on this site for the purposes of collecting visitor cookie data and retargeting users with relevant online advertising. Please see Diageo’s privacy policy for more information. |
All categories of personal data | Government authorities and/or law enforcement bodies or officials | Where required to comply with law or protect or pursue our business interests. |
All categories of personal data | Prospective Buyer/Seller | In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business. |
Identification Information, Contact Information | Individuals invited by you to join a Fantasy rugby league | Where you invite an individual to join a Fantasy rugby league via email, your email address will be shared with the individual whom you have invited. Where you invite an individual to join your Fantasy rugby league via your social media account, your identification information (name, social media profile) will be shared with the individual whom you have invited. |
Where we transfer your personal data
For several purposes set out above, the data sharing described is likely to result in the sharing of your data with third parties located outside your country; in principle, this may be any country in the world. Where information is transferred outside the EEA, and where this is to a third party in a country that is not to a country considered adequate under EU law, data is usually adequately protected by approved standard contractual clauses, or a vendor's Processor Binding Corporate Rules.
Where we transfer based on an adequacy mechanism, a copy of the relevant mechanism can be provided for your review on request by contacting us using the details set out below.
Your choices and rights
You have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine-readable format.
In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We may however have other legal grounds for processing your data for other purposes, such as those set out above.
You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or, where you want to opt out of direct marketing from us, by contacting us using the details set out below.
To opt out of direct marketing from our partners, you should follow the instructions in their communication where this is an electronic message, or by referring to their privacy policy. Our fixtures and calendar communications syncing function is delivered by ECAL. Please contact ECAL directly if you want to stop receiving these communications. Instructions on how to unsubscribe from ECAL can be found here and a copy of ECAL's privacy policy is available here.
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where it would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in Irish and other applicable data protection laws. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, you can contact us using the details set out below. If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred. This may be the DPC in Ireland.
How long we retain your personal data
Where we process registration data, we do this for as long as you are an active user of our sites and for 6 years after this. For anyone under 13 whose account is not properly authorised by their parent/guardian, we will delete the data they have provided within 30 days.
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period of 7 days after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
Where we process personal data in connection with performing a contract or for a competition, we keep the data for 6 years from your last interaction with us.
Updates to this privacy notice
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
Contact us
The data controller for your personal data is Six Nations Rugby Limited. If you have questions about this privacy notice or wish to contact us for any reason in relation to our personal data processing, please contact us at [email protected].
English version takes precedence
In the event of any inconsistency between the English language version of this Privacy Notice and any other language translation, the English language version takes place.