Should you need to contact us about any of GDPR policies please email firstname.lastname@example.org
“Service” refers to the purchase race tickets and gift vouchers in person or online, contacting us regarding our sponsorship and advertising opportunities, attending our racing events, hiring our venue for an event, and/or availing of our corporate hospitability package.
“You” refers to you, as a user of our Site or our Service.
Who we are?
The Galway Races are a not for profit Trust who organise one the largest racing festivals in the country for the past 150 years.
What information do we collect?
We use personal data about other individuals provided by you, such as those people on in your group. By providing other people’s personal data, you must be sure that they agree to this and you can provide it. You should also ensure that, where appropriate, they understand how their personal data may be used by us.
We operate CCTV in our offices and on the Galway race course grounds. Recording is for security, health and safety reasons only and data is recorded over after 30 days. The recording data would only be used where security has been compromised, or we receive an insurance claim and photographic evidence will be of use. This photographic evidence will only be reviewed by our employees and will only be shared under a formal request with the security services i.e. Garda.
How do we use personal information?
We may collect, hold, use and disclose your information for the following purposes:
When you provide your email address to us to enquire about ticket sales, your contact details may be retained even if the transaction is not completed. These details are held in a secure software program.
What legal basis do we have for processing your personal data?
We will only process your personal data on the following legal basis:
Consent: When you give us explicit permission to process your personal data for example, when you sign up to receive our newsletter via our website. Should you not wish to receive such communication from us please simply indicate your preference to opt out by following the directions provided in the e-mail.
Contract: When you purchase tickets, gift vouchers or enquiry about ticket sales, apply as an accredited photographer or for media reporting purposes, apply for sponsorship and advertising opportunities and/or hire our venue for an event.
Legitimate interest: When we use photos or videos captured at our public racing event and share them for promotional and marketing purposes or when we run competitions over local radio stations or we may use your personal data to better understand your interests, or to improve our services offered. Such processing is in our or a third party`s legitimate interest and these interests do not override your right to privacy.
Legal Obligation: when we are required by law, such as under a court order, or for identification of fraud or regulatory reporting and compliance for example, if a security incident or accident occurred on site, we would be obliged to share CCTV footage under a formal request from the Garda.
In some circumstances we may need to process special categories of personal data, for example health data for medical reasons, we will only do so if more than one of the additional conditions apply. For example, we have your explicit consent; to protect the vital interests of you or another individual and you are physically or legally incapable of giving consent; it is necessary to establish, exercise or defend legal claims; it is necessary for reasons of substantial public interest.
When do we share personal data?
While the Galway racecourse is committed to treat all personal data confidentially, in some circumstances we may need to share it other third parties:
Where do we store and process personal data?
When you book a ticket online your personal data is stored on a secured database. Personal data received through our website is processed using a secure connection and stored in our administration system. Where necessary and in order to promote our racing event our videographer may send videos captured during the event to third parties.
In some cases, these third parties, including Sky Sports Net may be situated outside of the European Economic Area (EEA). Where they are, they are obliged to make sure that your personal information is adequately protected.
How long is your data retained for?
We retain photos and video footage of the racing festival indefinitely for historical and other legitimate business purposes.
After the relevant retention period, we will securely erase personal data in accordance with our Data Retention & Destruction Policy.
How do we secure your personal data?
The protection of your personal data is very important to us. We take appropriate organisational and technical measures to protect your data from loss or other forms of unlawful processing.
All employees have been trained and are kept up-to-date on our security and privacy practices.
Information collected by our Site is stored in operating environments that are not available to the public. Access to this information is restricted to our employees who need to know that information to process your enquiry, ticket purchase and/or application. While, no method of transmitting data over the Internet is 100% secure, we take every reasonable precaution to protect all information collected, such as:
to encrypt your personal and payment transactions.
We are PCI-DSS compliant and process credit card payments using a secure terminal and a third-party payment portal and where information is transacted using industry-standard PPC Secure Socket Layer (SSL) encryption algorithms. We do not retain debit or credit card information.
Your rights regarding your personal data
You can exercise these rights over your data by emailing us at email@example.com or by sending your access request by post to Galway Racecourse, Ballybrit, Galway, Ireland, H91 V654.
We will comply with your requests, unless we have a lawful reason not to do so. We will need you to provide additional details to confirm your identity in order to process your request.
We do not intentionally sell tickets or offer other Services to children. Please be aware that we have not designed our website for, and do not intend for it to be used by, anyone under age 16. In all cases where minors are attending a racing event, the parent/guardian must accompany them to the event and must give their consent to any photos being used for promotional and marketing purposes.
We own and operate our Site where you can sign up to receive our newsletter, send us an enquiry, or apply to attend the racing event as an accredited photographer or media reporter.
Links to other websites
Changes to this Policy