The company APOEL Football (Public) LTD, (‘APOEL’) is committed to the protection of the personal data it maintains for all members who register with the APOEL FC Loyalty Membership Scheme (either through the purchase of a season ticket or the purchase of a match ticket), and collects and processes such personal data in full compliance with the General Data Protection Regulation of the EU (Regulation 2016/679) (‘GDPR’) and the applicable legislation in Cyprus.

1. Collection of Personal Data

We collect information from our members in the following ways:

(i) In person during the registration process of a prospective member for the provision of our services and products,
(ii) Through the use of our website and other electronic platforms and communication means,
(iii) Through correspondence and/or electronic mail,
(iv) Through the completion of any surveys aimed at improving our services, which the member may participate in,
(v) Through participation in any competitions we may organize from time to time and in which the member may participate.

2. Types of Personal Data Collected

The information collected through the above methods includes the following data (depending on the collection context):

Personal contact details, including but not limited to full name, identity number, date of birth, phone number, email address, and residence address and district.

3. Processing of Personal Data

We process our customers’ personal data in accordance with the provisions of the GDPR and the applicable local legislation concerning personal data protection.

The purposes and reasons for processing such personal data are as follows:

(i) For the provision of our services to members, including informing members about team news, offering special deals from APOEL, providing exclusive offers from our team sponsors, and for marketing purposes.
(ii) For the protection and security of our members.

The processing of personal data by us is based on one or more of the following legal grounds:

(i) To perform our contractual relationship and fulfill our obligations towards the member and to provide the services to which they are entitled,
(ii) To comply with a legal obligation that may arise,
(iii) For the protection of APOEL’s legitimate interests,
(iv) With the member’s consent.

4. Transfer of Personal Data

APOEL will not transfer your personal data to any third party. However, we inform you that access to your personal data may be provided to a natural or legal person that provides services to APOEL or acts on our instructions or on behalf of us, including its employees, officers, or officials (whether in Cyprus or abroad), for any reasonable purpose in the context of performing our operations or promoting our services or activities. In any case, all necessary security measures will be taken to protect your data.

We will maintain, in electronic or any other form, one or more files of personal data in which your personal data, declared to us by you or that will be declared, will be recorded.

5. Retention Period of Information

The personal data we process is maintained and all necessary security measures are taken to ensure the protection of this information.

The retention and processing of your personal data are carried out for as long as you remain a member.

If you cease to be a member, the retention and processing of your personal data may continue for up to three (3) years.

6. Automated Decision-Making, Including Profiling

In the course of our operations, we do not make decisions based solely on automated processing.

7. Rights Regarding Personal Data

The following are the rights you have under the provisions of the GDPR and applicable local law regarding your personal data:

(i) Right of Access – You have the right to receive confirmation from us as to whether or not your personal data is being processed, and if so, access to such data. This includes the right to be given a copy of the data maintained and processed.

(ii) Right to Rectification – You have the right to request the correction of any incomplete and/or inaccurate personal data we hold about you.

(iii) Right to Erasure / Right to be Forgotten – You have the right to request the deletion of your personal information if one of the following applies:

(a) the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
(b) if processing is based on your consent and you have withdrawn that consent, and there is no other legal basis for processing;
(c) your personal data has been processed unlawfully.
(iv) Right to Object – You have the right to object to the processing of personal data unless there are compelling legal reasons for the processing that override your interests, rights, and freedoms.
(v) Right to Restrict Processing – You have the right to request the restriction of the processing of your personal data.
(vi) Right to Data Portability – You have the right to request the transfer of your personal data. This right applies only when the transfer is technically feasible.
(vii) Right to Object to Automated Individual Decision-Making – If any automated processing of personal data is carried out and decisions are made solely on this basis, you have the right to request not to be subject to a decision made solely on the basis of automated processing.
(viii) Right to Withdraw Consent – If any processing is based solely on consent obtained from you, you have the right to withdraw that consent at any time. Note that such withdrawal does not affect the lawfulness of processing based on consent before its withdrawal or processing carried out on any other legal basis.

8. Contact Details

To exercise any of your rights, you may contact us via email at info@apoelfc.com.cy.

We inform you that you also have the right to lodge a complaint with the competent supervisory authority in case we do not respond to your request.

We also inform you that you retain the right not to provide us with your personal data. However, please note that in such a case, we may not be able to offer you all of our services. In such cases, we will inform you accordingly about which information is optional.

9. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time by publishing the modified policy on our Website. In such a case, each member will be notified without undue delay.

10. Security

We have taken all necessary measures to ensure an appropriate level of security in accordance with Article 32 of the GDPR.

11. Strictly Necessary Cookies

These are cookies related to security purposes. IP Address, Browser Type, User Device Type, and other related information are used for identifying attempts of breach or attacks and ensuring the smooth operation of the website. User experience cookies are also included, related to browser settings to ensure the website operates properly on your device without issues. These cookies do not relate to personal data.