Data Protection Notice

Croke Park takes your privacy very seriously and is committed to protecting your Personal Data. The following information is being provided to you as outlined in the General Data Protection Regulation. It is intended to inform you of how the Personal Data provided by you will be used, by whom and for what purposes.

How to Contact us in relation to your Personal Data:
If you require any information regarding Data Protection and how your data is processed by Croke Park, please contact our Data Protection Officer
Tel: 01 8658600 or
Email: [email protected]
Post: Data Protection Officer, GAA, Croke Park, Jones Road, Dublin 3

Who is the data controller?
Croke Park is the data controller for the Personal Data provided on this website.

Who is the Data Protection Officer for Croke Park?
Details of our Data Protection Officer are available on the GAA’s website gaa.ie/dataprotection. You can contact our Data Protection Officer by emailing [email protected] or by calling 01 8658600, if you have any questions or wish to make any request in relation to your Personal Data.

What is the purpose for processing my Personal Data?
The purpose for processing your Personal Data is to enable us to administer and provide products or services you request or have expressed an interest in and to communicate with you in relation to such product or service. The purpose is also to keep you informed by way of a newsletter in your chosen area. We will only use your Personal Data for this second purpose if you have provided your explicit consent when ticking the boxes attached to the applicable form.

If you purchase a product from our online shop, the purpose for the collection of your personal data is to enable you to purchase the product, to enable Croke Park to receive payment of same, and to ensure the product will be delivered to you.

What is the legal basis for processing my Personal Data?
The legal basis for processing your Personal Data in relation to the first purpose outlined above is for the legitimate interest of providing you with a product or service which you have requested. The legal basis for processing your Personal Data in relation to the second purpose outlined above is your explicit consent.

If you purchase a product from our online shop, the legal basis is the performance of a contract of sale between you and Croke Park.

Will anyone else receive a copy of my Personal Data?
In order to process your bookings, queries, newsletters and storage of your Personal Data, we utilise other organisations to carry out some of the data processing activities on our behalf. These may include, for example, database facilities, payment processing organisations and mailing houses. If you require further information on any third parties utilised to process your Personal Data, please contact our Data Protection Officer at Tel: 01 8658600, Email: [email protected] or Post: Data Protection Officer, GAA, Croke Park, Jones Road, Dublin 3.

If you browse our online shop, you will note that we utilise Shopify to provide the online shopping experience to our customers. Shopify act as a ‘Data Processor’ in this circumstance. We have a Data Processing Agreement in place with Shopify to ensure your Personal Data is stored safely and securely.

How long will your Personal Data be stored for?
Your Personal Data will be held for the duration of your relationship with us in relation to the provision of products or services. However, we may retain your Personal Data after the relationship ceases if it is strictly necessary to do so in the circumstances. If you provide your consent for us to use your Personal Data to provide you with information by sending you newsletters, your consent will be refreshed for this purpose every 2 years.

How can I obtain a copy of the Personal Data held by Croke Park?
You have the right to request a copy of your Personal Data and can do so by contacting us. This information will be provided to you within one month.

What are my privacy rights relating to my Personal Data?
You have the following rights in relation to your Personal Data as outlined in the General Data Protection Regulation.

1. The Right to be Informed
You have the right to receive information relating to the processing of your Personal Data and this should be provided to you at the point your Personal Data is collected.

2. The Right to Access
You have the right to receive a) Confirmation of whether or not Personal Data concerning you is being processed; b) Where Personal Data concerning you is being processed, a copy of your personal information; c) Where Personal Data concerning you is being processed, other additional information as follows: the purpose(s) of the processing; the categories of Personal Data; any recipient(s) of the Personal Data to whom the Personal Data has or will be disclosed; the retention period or, if that is not possible, the criteria used to determine the retention period; the existence of your rights.

3. The Right to Rectification
If your Personal Data is inaccurate, you have the right to have the data rectified, by the controller, without undue delay. If your Personal Data is incomplete, you have the right to have data completed, including by means of providing supplementary information.

4. The Right to Erasure
This is also known as the ‘right to be forgotten’. You have the right to have your data erased, without undue delay, by the data controller under certain circumstances.

5. The Right to Data Portability
In some circumstances, you may be entitled to obtain your Personal Data from a data controller in a format that makes it easier to reuse your information in another context, and to transmit this data to another data controller of your choosing without hindrance. This is referred to as the right to data portability.

6. The Right to Object to Processing
You have the right to object to certain types of processing of your Personal Data. You have a stronger right to object to processing of your Personal Data where the processing relates to direct marketing.

7. The Right of Restriction
You have a limited right of restriction of processing of your Personal Data by a data controller. Where processing of your data is restricted, it can be stored by the data controller, but most other processing actions, such as deletion, will require your permission.

8. Rights in relation to Automated Decision Making
You have the right to not to be subject to a decision based solely on automated processing. Processing is “automated” where it is carried out without human intervention and where it produces legal effects or significantly affects you.

If you wish to exercise any of the above rights, you can contact our Data Protection Officer on 01 8658600 or [email protected].

Where can I get further information?
Further information regarding your rights can be obtained through the Data Protection Commission’s website at www.dataprotection.ie

How do I make a complaint or report a breach?
Should you wish to make a complaint or report a breach in relation to your Personal Data, you can do so by filling out the appropriate webform on the Data Protection Commission’s website at www.dataprotection.ie.