Privacy & Cookies

Who we are

Ardnaree Sarsfields GAA is the controller responsible for personal data processed for this website. Our address is F26P6N2, Ballina, County Mayo. You can contact us about this notice or your data protection rights at secretary.ardnaree.mayo@gaa.ie.

Information we process

• Technical website data: hosting and security systems may process an IP address, request time, requested page, browser or device details, and diagnostic or security information when the website is visited.
• Enquiries: if you email us, we receive the details you provide, such as your name, email address, message and subsequent correspondence.
• Club content: news, matches and team information may include names, squad selections, match events, adult player ratings, roles, images or video where the club has decided it is appropriate and lawful to publish them.
• Staff access: authorised match editors have individual accounts. Supabase processes their email address, authentication records, essential session information and an audit record of match updates.

The website does not use personal data for profiling or automated decision-making.

Why we use information

• To provide, maintain and protect the website, based on our legitimate interests in operating a reliable and secure public club website.
• To answer enquiries and take steps requested before club membership or another arrangement, based on legitimate interests or steps before entering a contract, as applicable.
• To communicate club news and activities, based on our legitimate interests or consent where consent is the appropriate legal basis.
• To meet legal obligations or establish, exercise or defend legal claims where necessary.

Cookies and browser storage

This application does not intentionally set advertising cookies or use browser storage to remember preferences. We use Vercel Speed Insights to collect aggregated technical performance measurements, such as page-load and interaction timings, so we can improve the reliability of the website. It is not used for advertising, profiling or cross-site tracking.

Our hosting provider may use short-lived cookies or similar mechanisms where they are strictly necessary to deliver or protect the service, for example when responding to malicious traffic. If we introduce a non-essential technology in future, we will update this notice and request consent before activating it where required.

Authorised staff accounts use essential Supabase authentication cookies so a staff member can stay signed in to the private match-control area. These cookies are not used for analytics or advertising and are not created for ordinary public visitors. Essential staff authentication does not require a public consent banner.

Match streams and replays

A match page may offer a YouTube or Vimeo live stream or replay. The third-party player is not loaded when you open the page. We first show the provider and a notice so you can choose whether to load it or open the video on the provider's website.

If you load or open a video, that provider receives technical information such as your IP address, browser or device details, the referring page and playback activity. The provider may use cookies or similar technologies under its own terms and privacy notice. We use YouTube's privacy-enhanced embed domain and Vimeo's do-not-track player setting where available, but these do not prevent all provider processing. This website does not store or remember your choice to load a player.

Service providers and sharing

We use Vercel to host and protect the website and Supabase to store the club content displayed on it. Vercel also provides Speed Insights for website performance measurement. Supabase content is requested by our server; this website does not create a Supabase account or browser session for ordinary public visitors. Public live-match updates are requested from this website at intervals and may therefore appear in routine hosting logs. Authorised staff use a Supabase-backed account and session as described above. These providers process information under their contractual data protection terms.

YouTube, operated by Google, and Vimeo provide optional match players. They receive visitor information only after a person chooses to load a player or follows an external provider link, as described above.

We may also disclose information when required by law, to protect a person or the club, or to professional advisers who are subject to confidentiality obligations. We do not sell personal data.

International transfers

Our technology providers may use infrastructure or support services outside the European Economic Area. Where personal data is transferred internationally, we require an applicable safeguard, such as an adequacy decision or the European Commission's Standard Contractual Clauses. You can contact us for more information about safeguards relevant to your data.

How long we keep information

• Routine technical logs are kept for the provider-configured period needed to operate and secure the website, and longer only when required to investigate an incident or meet a legal obligation.
• Enquiry correspondence is kept while we respond and then according to the club's operational, safeguarding and legal record requirements.
• Published news, names and images are reviewed and retained only while they remain relevant to the purpose for which they were published, subject to valid objections or withdrawal where consent is the legal basis.
• Match sheets, event histories and adult ratings are kept as part of the club's sporting record while they remain relevant, with correction, objection and removal requests considered according to the circumstances.
• Staff account and match-update audit records are kept while access is active and afterwards for the period needed for security, accountability and dispute resolution.

Children and club photography

Children have their own data protection rights and their information receives particular care. Before the club publishes an identifiable child's name, image or video, we identify an appropriate legal basis, provide clear and age-appropriate information, involve the child where appropriate, and obtain parent or guardian permission where required. Requests not to publish or to remove an image will be considered promptly, taking account of the child's rights and the circumstances of publication.

A named underage team sheet is not published until an authorised administrator records that the club's safeguarding and publication requirements have been checked. Changing that lineup removes the approval. Numeric ratings are never published for underage players.

Your rights

Depending on the circumstances, you may ask for access to your personal data, correction, erasure, restriction, portability or object to its use. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

Contact us using the email above to exercise a right. You also have the right to complain to Ireland's Data Protection Commission through dataprotection.ie.

Changes to this notice

We will revise this page when the website's data use changes. The effective date at the top shows when this notice was last updated. Material changes will be highlighted where appropriate.