Politique de confidentialité

This policy explains what we do with personal data, including children's data, when you register a player for an Arsenal FD Camp in Switzerland or Luxembourg.

Who is responsible

The data controller is Soccer Atlantic, a company incorporated in the United States, with its place of business at Jersey City, New Jersey, United States. We operate these camps under the name Arsenal FD Camps.

Contact: contact@arsenaleucamps.com

We are established outside the European Union and outside Switzerland. You can contact us directly about anything to do with your personal data, at contact@arsenaleucamps.com, and we will answer within one month.

Which law applies

Because we offer our camps to people in the European Union, the EU General Data Protection Regulation (GDPR) applies to this processing. Because we also offer them to people in Switzerland, the Swiss Federal Act on Data Protection (FADP) applies as well. Where the two differ we apply whichever gives you more protection.

What we collect

About the player: full name, date of birth, gender, playing position, kit size, and any medical condition, allergy, dietary requirement or medication you tell us about.
About you, the parent or guardian: name, email address, mobile number, and billing details.
Emergency contact: the name and phone number of the person you nominate.
Order data: what you bought, when, for how much, and in which currency.
Website data: pages visited and similar technical data, only where you have accepted the relevant cookies.
Images: photographs and video taken at camps, only where you have given separate consent.

We do not see or store your card number. Payment details go directly to our payment provider.

Health data about your child

Information about a child's health, allergies or medication is a special category of personal data under Article 9 GDPR and sensitive personal data under the Swiss FADP. It gets stricter treatment:

We process it on the basis of your explicit consent, given when you complete the registration form, and — in an emergency where consent cannot be obtained — to protect the vital interests of the child.
Access is restricted to the coaching and medical staff responsible for that player at that camp.
We do not use it for any other purpose, and never for marketing.
You may withdraw your consent at any time, but we may then be unable to accept the player onto a camp, because we cannot supervise a medical condition we are not allowed to know about.

Why we use your data, and on what legal basis

Purpose	Legal basis
Delivering the camp you booked, and contacting you about it	Performance of our contract with you (Art. 6(1)(b))
Player safety, supervision and responding to a medical incident	Explicit consent (Art. 9(2)(a)); in an emergency, vital interests (Art. 6(1)(d) and 9(2)(c))
Taking payment, accounting and tax records	Legal obligation (Art. 6(1)(c))
Preventing fraudulent orders	Our legitimate interest in protecting the business (Art. 6(1)(f))
Camp news and offers by email	Your consent (Art. 6(1)(a)), withdrawable at any time
Photographs and video used to promote our camps	Your separate, specific consent (Art. 6(1)(a)), withdrawable at any time
Analytics and marketing cookies	Your consent, given through the cookie banner

Consent to photography is optional and is never a condition of taking part. A player whose parent declines is kept out of promotional material and takes part in exactly the same camp.

Who we share it with

Shopify, which hosts this store and processes orders on our behalf.
Our payment providers, who act as controllers of the payment data in their own right.
The coaching staff and venue operators delivering the camp your child attends.
Arsenal Football Club, where our licence requires it.
Emergency and medical services, if a player needs them.
Google, where we use a spreadsheet to manage camp registers.

We do not sell personal data and we do not share it with advertisers.

Transfers outside Europe

We are based in the United States, and some of our providers are too, so your data is transferred to the United States and processed there. That country has not been found to offer a level of protection equivalent to European law for all recipients.

If you want to know what safeguards apply to your data when it is transferred, write to contact@arsenaleucamps.com and we will tell you.

How long we keep it

Data	Kept for
Registration data and camp records	The season, plus 3 years, so we can answer an incident or a claim
Health data about a player	Deleted 3 months after the camp ends, unless an incident is recorded
Accounting and tax records	As required by the applicable tax law
Marketing consent and email address	Until you withdraw consent
Photographs and video	Until you withdraw consent

Your rights

You can ask us to:

Access the data we hold about you or your child, and receive a copy
Correct anything inaccurate or incomplete
Delete it, where we have no continuing reason to keep it
Restrict or object to how we use it
Receive it in a portable format, or have it sent to another provider
Withdraw any consent you have given, at any time, without affecting what we did before you withdrew it

Write to contact@arsenaleucamps.com. We answer within one month. Exercising these rights is free.

We do not make decisions about you by automated means, and we do not profile you.

Complaints

If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to a supervisory authority:

Luxembourg: Commission nationale pour la protection des données (CNPD)
Switzerland: Federal Data Protection and Information Commissioner (FDPIC / PFPDT)
Elsewhere in the EU: the data protection authority of the country where you live

Children

We collect a child's data only from a parent or legal guardian. We do not knowingly allow a child to register themselves, and we do not market to children.

Cookies

We use cookies that are strictly necessary for the store to work, and — only after you agree — cookies that help us understand how the site is used. Nothing that is not strictly necessary is set before you choose. You can change your choice at any time from the cookie banner. See our Cookie Policy.

Security

We keep personal data on access-controlled systems and limit it to the staff who need it. Camp registers containing health data are shared only with the staff working that camp and are removed afterwards.