Privacy Notice for athletes listed on the caytoo platform
24 July 2018
This Privacy Notice is for athletes who have a profile listed on the caytoo platform. The notice below contains information about how we deal with your personal data and how we give you control over how it is used and protecting it. This Privacy Notice also tells you about your rights, how you can exercise those rights, and how the law protects you. Finally, it tells you how you can exercise your preferences to manage the information we have about you, and, if for any reason you do not want to be listed on the caytoo platform, how to ask us to take you out.
caytoo is a sports intelligence business that enables athletes and rightsholders to connect with brands to identify mutually beneficial connections and sponsorship interests. Users of the caytoo platform are able to search for athletes and other rights holders within the caytoo platform.
caytoo is the data controller and is responsible for your personal data (collectively referred to as caytoo, “we”, “us”, or “our” in this Privacy Notice). Our full contact details are below:
419 to 420 Vox Studios
45 Durham Street
Contact telephone number: +44(0)203 1768130
ICO registration number: ZA445074
If at any time you have any questions about this Privacy notice or the way we use your personal data please contact our Data Protection Officer at email@example.com
How we collect athlete data
Information that we hold about athletes is obtained from publicly available sources or directly from athletes. This includes publicly available social media profiles and websites, information about you that is published on an athlete’s personal, sponsor or agents website. This information is gathered by caytoo’s Research team:
- Articles of blogs
- Media appearances – TV, radio, press interview
- Athlete’s personal website
- Agent’s websites
- Publicly available social media profiles (including, for example, Facebook, Twitter, Instagram & LinkedIn).
- Other publicly available online sources.
Prior to your Profile being made live on the caytoo platform, we verify that your contact details are correct via either contacting you or your agent directly or checking against your social media profile or websites which you appear on.
At any time you can:
- View your profile at www.caytoo.co.uk
- Request changes to your profile: firstname.lastname@example.org
- Request the removal of your profile: email@example.com
The purposes for which we will use your personal data
We use data collected to build an Athlete Profile for you and include it on the caytoo platform. The profile is publicly visible.
Profiles are accessible via the caytoo online platform so that brands, agencies and others interested in providing sponsorship, funding or other commercial opportunities to athletes can view profiles and connect to athletes when they think they may be of interest . This is typically commercial opportunities. This is also beneficial for athletes as it means athletes receive targeted commercial opportunities and other information that may be helpful. caytoo’s primary role is to facilitate effective communication between our brands, agencies, athletes and rightsholders.
The main purpose for using your personal data is to create a repository of data regarding athletes, and to make that data available to visitors to our website. Your personal data may be processed in one or more of the following ways:
- Browsing the platform: visitors to our site will be able to view your profile
- Profiling & Tracking: see dedicated section below.
- Systems administration
- Maintaining contact, handling enquiries, complaints and disputes.
- Compliance with all applicable laws & regulations.
caytoo may use athlete data for automated profiling purposes. The profiling caytoo conduct and how it is used is limited. We use profiling to evaluate athlete’s personal preferences, interests, behaviour and audience and make this available to our customers through Profiles within the caytoo platform. caytoo may for example use profiling to help our customers understand what subjects you like to talk about on social and the extent of your audience. This helps our customers, principally brands & agencies, direct their communications to you more efficiently and effectively. The results of this profiling are available on athlete profiles.
We combine the personal data from your athlete profile with the publicly available content that you have produced and present this information to our customers through our customer facing platform. Using profiling, our customers are then able to search these two publicly available datasets and:
- Understand what subjects you are interested in
- View and evaluate your content
- Understand your social audience and its location
caytoo does not make any automated decisions based on profiling. The profiling enables customers to better identify athletes that may be interested in their commercial opportunities.
The caytoo platform is not intended for children and we do not knowingly collect personal data relating to children. If you are under the age of 16, please let us know and we will take you out of the Talent Showcase.
How we share personal data & with who
We may share your personal data with our customers and other parties detailed below. At present we do not make transfers out of the European Economic Area (EEA).
We may share your personal data with one or all of the following:
- Customers: our customers are typically marketing departments within businesses or other institutions, or PR/Media/Advertising/Talent/Sports agencies. Our customers come from all sectors.
- External Third Parties:
- Service providers who work on behalf of caytoo for the performance of any contract we enter into with them, for example: IT support.
- Professional advisors including lawyers, accountants and insurers where we need to do so in order to comply with our legal obligations or for other business reasons.
- Authorities who require reporting of processing activities in certain circumstances.
We may also share your personal data with third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with binding contractual obligations which satisfy the requirements of the data protection legislation.
How long will we use your personal data?
We will keep your personal data only for as long as is necessary for the purposes set out in this privacy notice and to fulfil our legal obligations, but not longer than seven years after you ask to stop receiving communications. We will not keep more data than we need.
Under the General Data Protection Regulation (EU) 2017/676, you have various rights in relation to your personal data. All of these rights can be exercised by contacting us at firstname.lastname@example.org
In certain circumstances, you have the following rights in relation to your personal data:
Right of Access
You have the right to obtain from us information as to whether your personal data is being processed, and, where that is the case, access to such personal data.
Right to Rectification
We will use reasonable endeavors to ensure that your personal information is accurate. In order to assist us with this, you should notify us of any changes to the personal information that you have provided to us by sending us a request to rectify your personal data where you believe the personal data we have is inaccurate or incomplete.
Right to erasure / ‘Right to be forgotten’
Asking us to delete all of your personal data will result in caytoo ltd deleting your personal data without undue delay (unless there is a legitimate and legal reason why caytoo ltd is unable to delete certain of your personal data, in which case we will inform you of this in writing).
Right to restriction of processing
You have the right to ask us to stop processing your personal data at any time.
Right to data portability
You have the right to request that caytoo ltd provides you with a copy of all of your personal data and to transmit your personal data to another data controller in a structured, commonly used and machine-readable format, where it is technically feasible for us to do so and the processing is based on consent or contractual performance.
Right to complain
You have the right to lodge a complaint to a supervisory authority such as the Information Commissioner’s Office in the UK (see www.ico.org.uk). Although we encourage our customers to engage with us in the event they have any concerns or complaints.
caytoo ltd will not ordinarily charge you in respect of any requests we receive to exercise any of your rights detailed above; however, if you make excessive, repetitive or manifestly unfounded requests, we may charge you an administration fee in order to process such requests or refuse to act on such requests. Where we are required to provide a copy of the personal data undergoing processing this will be free of charge; however, any further copies requested may be subject to reasonable fees based on administrative costs.
Asking us to stop processing your personal data or deleting your personal data will likely mean that you are no longer able to use caytoo ltd’s Services, or at least those aspects of the Services which require the processing of the types of personal data you have asked us to delete, which may result in you no longer being able to use the Services.
Where you request caytoo ltd to rectify or erase your personal data or restrict any processing of such personal data, caytoo ltd may notify third parties to whom such personal data has been disclosed of such request. However, such third party may have the right to retain and continue to process such personal data in its own right.
Changes to this policy
For the purpose of the relevant data protection legislation, the data controller is caytoo ltd (company no. 11119333) with registered address at 419-420 Vox Studios, 45 Durham Street, London, SE11 5JH