Official VIP Hospitality Tickets

Privacy Policy

This Privacy Policy sets out the data processing practices carried out through the use of the internet and any other electronic communications networks by CSM Sport & Entertainment LLP, trading as CSM Hospitality (company number OC368517) of PO BOX 70693 10 Greencoat Place, London, United Kingdom, SW1P 9ZP (and any of its group companies) (CSM, we or us). 

We have appointed a data privacy champion who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the data privacy champion using the details set out below.

CONTACT DETAILS

Full name of legal entity:                   CSM Sport and Entertainment LLP, trading as CSM Hospitality

Title of data privacy champion:       Luke Robinson

Email address:                                    csm.legal@csm.com

Postal address:                                   CSM Sport and Entertainment, 10a Greencoat Place, London, UK, SW1P 1PH

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

(each a Website)

CSM operates as a group of companies and CSM Sport and Entertainment LLP will be the controller and responsible for your personal data.

  1. DATA COLLECTED
    1. Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
    2. We collect personal information from visitors to the Website which we have grouped together as follows:
      1. Identity Data such as first name, last name and date of birth;
      2. Special Category Data such as dietary requirements;
      3. Contact Data such as address, email address and telephone numbers;
      4. Technical Data such as internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Website;
      5. Usage Data such as information about how you use the Website, products and services; and
      6. Marketing and Communications Data such as your preferences with regards to receiving marketing from us.
    3. Only Technical and Usage Data are collected automatically when you visit any of the Websites (please see the section on how we collect your personal data for further information).

  1. HOW WE COLLECT YOUR PERSONAL DATA
    1. We use different methods to collect data from and about you including through:
      1. Direct interactions. You may give us your Identity, Special Category, Contact, and Marketing and Communications Data by filling in forms, opting-in, completing a registration or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
        • subscribe to our service or publications;
        • request marketing to be sent to you;
        • enter a competition, promotion or survey;
        • purchase tickets or hospitality packages; or
        • give us some feedback.
      2. Automated technologies or interactions. As you interact with our Website(s), we may automatically collect Technical and Usage Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies. Please see the section on cookies below.

  1. USE AND DISCLOSURE OF PERSONAL INFORMATION
    1. We process personal information collected via this Website for the purposes of:
      1. providing and personalising our services;
      2. dealing with your enquiries and requests;
      3. maintaining information as a reference tool or general resource;
      4. carrying out market research campaigns;
      5. providing you with information about products and services;
      6. complying with legal, statutory or regulatory obligations.
    2. We may use your data to send you information regarding our products or services, products or services offered by other companies within our group and companies that CSM work with, including event rights holders but only if you specifically consent to receiving such marketing materials. You may withdraw your consent to receive these marketing materials at any time by selecting the unsubscribe button included in all communications sent to you by us.
    3. We may also use and disclose information in aggregate (so that no individuals are identified) for marketing and strategic development purposes.
    4. We have set out below, all the ways we use your personal data, and the legal bases on which we rely to do so.

 

Category of Personal Information Collected

Source(s) from which that information may be collected

Business Purpose

Categories of Third Parties to which CSM share this personal information

Full Name

  • Website (including but not limited to websites, apps, games, customer service)
  • Ticketing partners (e.g. Ticketmaster)
  • Social Media
  • Event partners and licensees
  • Direct from the Booking Client
  • Hospitality Package providers
  • Event rights holders
  • Order fulfilment (e.g. to fulfil event bookings)
  • Personalization
  • Promotions
  • Marketing (if consented)

Event partners and licensees

Event rights holders

Data processing and analytics vendors

Fulfilment vendors

Payment processors

Email address

  • Ticketing partners
  • CRM suppliers
  • Social media
  • Direct from the Booking Client

  • Order fulfilment
  • Security and access control
  • Provision of services purchased or requested
  • Marketing (if consented)

Event partners and licensees

Event rights holders

Hospitality Package providers

Data processing and analytics vendors

Fulfilment vendors

Payment processors

CRM partners

Street/Physical Address

  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • Order fulfilment

Partners and licensees

Data processing and analytics vendors

Fulfilment vendors

Payment processors

Telephone number

  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • Order fulfilment
  • Subscription management
  • Provide requested information
  • Promotion

Data processing and analytics vendors

Fulfilment vendors

Birth date / age

  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • Security and access control
  • Provision of services purchased or requested
  • Legal compliance

Partners and licensees

Data processing and analytics vendors

Fulfilment vendors

Special Category Data (i.e. dietary requirements)

  •  Website
  • Direct from the Booking Client
  • Order fulfilment

Catering providers

Event management partners

Venues

Payment data

  • Use of the Website
  • Direct from the Booking Client

  • Order fulfilment

Payment processors

Technical data / IP Address

  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • To use data analytics to improve our Website, marketing, customer relationships and experiences
  • To deliver relevant marketing materials to you (in the form of our newsletter) and to measure or understand the effectiveness of the advertising we serve to you

Event partners and licensees

Event rights holders

Data processing and analytics vendors

Fulfilment vendors

Payment processors

CRM Partners

Location data

  • the Website
  • Ticketing partners
  • Social Media
  • Event partners and licensees
  • Direct from the Booking Client
  • Hospitality Package providers
  • Event rights holders
  • Delivering personalized experiences
  • Providing improved experiences and products
  • Promotions and advertising

Data processing and analytics vendors

Ad serving vendors

Demographic data

  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • Social Media
  • Providing tailored services, experiences and products
  • Improving services, experiences and products

Data processing and analytics vendors

Cookie data

  • Use of the Website
  • Ticketing partners
  • Social Media
  • Delivering optimized services, experiences and products
  • Advertising

Advertising vendors

Usage data

  • Direct from the Booking Client
  • Use of the Website
  • Ticketing partners
  • CRM suppliers
  • Social Media
  • Delivering optimized services, experiences and products
  • To use data analytics to improve our Website, marketing, customer relationships and experiences
  • To deliver relevant marketing materials to you (in the form of our newsletter) and to measure or understand the effectiveness of the advertising we serve to you

Data processing and analytics vendors

Event partners and licensees

Event rights holders

    1. Under data protection law, we can only use your personal data if we have a proper reason. The above table sets out our purpose for using such data. The reason for using such data will be, in the case of marketing, where you have given your consent. Where you have purchased goods or services, the processing of your personal information will be necessary in order to perform the contract with you. Otherwise, in many other cases, the processing will be necessary for the purpose of legitimate interests we are pursuing, namely facilitating of the purposes for which your personal information is processed as set out above. We may also have to process your personal information to comply with our legal and regulatory obligations.
    2. We will disclose personal information to other companies within our group of companies, government bodies and law enforcement agencies, successors in title to our business and suppliers we engage to process data on our behalf.
    3. We will be required to disclose your personal information, including Special Category Data, to third parties as set out in the table above for the purposes of fulfilling your event booking (including the purchase of Ticket(s) and Hospitality Packages).
    4. We are permitted to pass on your details pursuant to this clause 3 for the reasons set out in clause 3.5. If you have any questions in regards to any disclosures, please contact us.

  1. TRANSFER
    1. We may be required to transfer your personal data to third parties outside of the European Economic Area. In those cases we will comply with applicable UK laws designed to ensure the privacy of your personal data.
    2. Under data protection laws, we can only transfer your personal data to a country outside the UK where:
      1. the UK government has decided the particular country ensures an adequate level of protection of personal data (known as an ‘adequacy regulation’) further to Article 45 of the UK GDPR. A list of countries the UK currently has adequacy regulations in relation to is available here.
      2. there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you; or
      3. a specific exception applies under relevant data protection law.

    1. Where we transfer your personal data outside the UK, we do so on the basis of an adequacy regulation or legally-approved standard data protection clauses recognised or issued further to Article 46(2) of the UK GDPR. In the event we cannot or choose not to continue to rely on either of those mechanisms at any time, we will not transfer your personal data outside the UK unless we can do so on the basis of an alternative mechanism or exception provided by UK data protection law and reflected in an update to this policy. Further details are set out in our client framework agreement with you.

  1. SECURITY
    1. We take the security of your information very seriously and have controls and processes to minimise the risk of a data breach occurring, though you must take responsibility when visiting other websites, even if following a link to them from our Website.
    2. We have put in place procedures to deal with any suspected or actual personal data breach and will notify you or the appropriate regulator where we are legally required to do so, and we will make all efforts to minimise the impact.
    3. We may use external companies to process information which are based overseas and outside Europe. We ensure that they have strict checks and controls in place to keep your information safe.

  1. DOCUMENT RETENTION
    1. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
    2. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

  1. OTHER WEBSITES

             Our Website may contain links to other websites which are outside our control and are not covered by this Privacy Policy. If you access other sites using the links provided, the operators of these sites may collect information from you which will be used by them in accordance with their privacy policy, which may differ from ours.

  1. ACCESS RIGHT

             Under certain circumstances, you have rights under data protection laws in relation to your personal data such as:

  • Requesting access to your personal data;
  • Requesting a correction to your personal data;
  • Requesting erasure of your personal data;
  • Objecting to the processing of your personal data;
  • Requesting a restriction on the processing of your personal data;
  • Requesting a transfer of your personal data; and/or
  • Your right to withdraw your consent.

If you wish to exercise any of these rights please email us at csm.legal@csm.com. No fee is usually required to exercise your rights under data protection law, however we may charge £10 if your request is clearly unfounded, repetitive, excessive or if you require further copies of the information that we have already sent you.

  1. INTERNET-BASED TRANSFERS

             Given that the Internet is a global environment, using the Internet to collect and process personal data necessarily involves the transmission of data on an international basis. Therefore, by browsing this Website and communicating electronically with us, you acknowledge and agree to our processing of personal data in this way.

  1. COOKIE POLICY
    1. Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

             We use the following cookies:

  • Strictly necessary cookies. These are cookies that are required for the operation of our Website. They include, for example, cookies that enable you to log into secure areas of our Website, use a shopping cart or make use of e-billing services.
  • Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our Website when they are using it. This helps us to improve the way our Website works, for example, by ensuring that users are finding what they are looking for easily.
  • Functionality cookies. These are used to recognise you when you return to our Website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
  • Targeting cookies. These cookies record your visit to our Website, the pages you have visited and the links you have followed. We will use this information to make our Website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

    1. Use of cookies:
      1. We process personal information collected via this Website for the purposes of dealing with your enquiries and requests.
      2. You can find more information about the individual cookies we use and the purposes for which we use them in the tables below

For Tickets and Hospitality Purchases made through https://mlblondonseries.csm.com/  - the following cookies apply:

Cookie

Purpose

Retention

ASP.NET_SessionId

Net_SessionId is a cookie which is used to identify the users session on the server. The session being an area on the server which can be used to store data in between http requests.

Browser Session

user

Stores the logged in users encrypted identifier

30 days

csm

Used by the website and CMS tool

Browser Session

cookiePanelClosed

Used to determine when a user has given consent to use cookies on the Website

365 days

_ma_trk

Used by CSM Marketing Automation Platform which enables core website functionality.

365 days

_ma_cls

Used by CSM Marketing Automation Platform which enables core website functionality.

Browser Session

_ga, _ga_XXX

To provide data about the way the Website is used in order to improve your experience. Google Analytic’ cookies record visitors, city locations, browser type and site journey. They do not record personal information.

Expires after 1 year

For Tickets and Hospitality Purchases made through www.csm-hospitality.com - the following cookies apply:

                 

Cookie

Purpose

Retention

ASP.NET_SessionId

Net_SessionId is a cookie which is used to identify the users session on the server. The session being an area on the server which can be used to store data in between http requests.

Browser Session

Cookieconsent_status

Used to determine when a user has given consent to use cookies on the Website

365 days

_ma_trk

Used by CSM Marketing Automation Platform which enables core website functionality.

365 days

_ma_cls

Used by CSM Marketing Automation Platform which enables core website functionality.

Browser Session

_dd_s

DataDog Real User Monitoring

Expires after 1 hour

_ _ga

To provide data about the way the Website is used in order to improve your experience. Google Analytic’ cookies record visitors, city locations, browser type and site journey. They do not record personal information.

Expires after 2 years

_ _gat

To provide data about the way the Website is used in order to improve your experience. Google Analystics’ cookies record visitors, city locations, browser type and site journey. They do not record personal information.

Expires after 10 minutes

  1. Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
  2. You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

Last update: 24 November 2022.