Privacy Policy

1. Introduction

At Hess Field Wiffleball (accessible via hessfieldwiffleball.com), we are strongly committed to safeguarding the privacy and personal data of our users. We value transparency and adhere to the highest standards of data protection as required under the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy laws. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you interact with our website and services.

2. Scope of This Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through your interaction with hessfieldwiffleball.com, including through registrations, communications, transactions, and other service-related activities. Hess Field Wiffleball acts as the data controller for the purposes of EU data protection law and is responsible for determining the purposes and methods of processing your personal data.

3. Categories of Personal Data We Process

We may collect and process the following categories of personal data:

a. Usage Data: This includes information about how you use our website, such as IP addresses, browser types, device identifiers, referring pages, session duration, page views, and time spent.

b. Account Data: When you create an account or register for an event, we may collect your name, physical address, email address, and telephone number.

c. Profile Data: Includes preferences, purchase history, event attendance, behavioral patterns, and other profile-related information created through interaction with our services.

d. Communication Data: Any correspondence or communications you send to us, including emails, contact form submissions, and support requests.

e. Technical Data: Information about your device such as operating system, device type, hardware specifications, browser version, and network type.

f. Transaction Data: Includes billing information, payment methods (handled via secure third-party processors), shipping details, and transaction history.

g. Preference Data: Information related to your marketing preferences, notification settings, language preferences, and expressed interests in our products or events.

4. Legal Bases for Processing Personal Data

We rely on the following legal bases for processing personal information:

– Consent: Where required, we will obtain your explicit consent prior to processing your data (e.g., for marketing communications).
– Contractual Necessity: When processing is required to fulfill our contractual obligations to you, such as processing purchases or delivering services.
– Legitimate Interests: Where processing is necessary for our legitimate interests and those interests do not override your data protection rights (e.g., website security, service improvement).
– Legal Obligation: Where the processing is necessary to comply with applicable legal requirements.

5. Your Rights Under Data Protection Laws

Depending on your jurisdiction, you may be entitled to specific rights regarding your personal data, including:

– Right of Access: You have the right to request access to the personal data we hold about you.
– Right to Rectification: You may request that we update or correct inaccuracies in your personal data.
– Right to Erasure: You may request deletion of your personal data under certain conditions.
– Right to Restriction: You may request the restriction of processing when circumstances apply (e.g., contesting the accuracy of data).
– Right to Data Portability: Where applicable, you may obtain your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement adequate technical and organizational measures to ensure the security of your personal data. These safeguards include encrypted data transmission (SSL), role-based access controls, routine system audits, secure backups, and staff training on data security protocols. While no method is completely immune from intrusion, we take appropriate steps to mitigate risk.

7. International Transfers

We may transfer your personal data outside of your home jurisdiction, including to countries that may not provide the same level of data protection. In such cases, we implement measures to ensure an adequate level of protection, such as standard contractual clauses approved by the European Commission and adherence to applicable international data transfer frameworks.

8. Data Retention

We will retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Our standard retention periods are as follows:

– Usage and Technical Data: up to 26 months
– Account and Profile Data: for the duration of the account and for a period of 3 years following account closure
– Communication Data: 2 years from the date of the last contact
– Transaction Data: 7 years to comply with tax and accounting requirements
– Preference Data: Until consent is withdrawn or you unsubscribe from marketing communications

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance user experience and analyze site usage. Types of cookies used include:

– Essential Cookies: These are necessary for website functionality and cannot be disabled in our systems.
– Functional Cookies: Allow the website to remember choices and provide enhanced features.
– Performance and Analytical Cookies: Help us understand website behavior through tools like Google Analytics, allowing us to optimize content and performance.

For more detailed information, refer to our separate Cookie Notice available on hessfieldwiffleball.com.

10. Cookie Management and Compliance

You can manage or disable cookies through your browser’s settings. On first visit, our site presents a cookie banner that complies with GDPR and CCPA regulations, allowing you to consent to or reject non-essential cookies. Users from California may also exercise Do Not Sell My Personal Information rights via a dedicated opt-out mechanism on our website, in accordance with the CCPA.

11. Protection of Children’s Privacy

Our website and programs are not directed to children under the age of 13. We do not knowingly collect or process personal data from children under 13 without verified parental consent. If we learn that we have unintentionally collected such data, we will promptly delete it. Parents or guardians who believe their child has submitted personal data may contact us at [email protected].

12. Policy Updates and Notifications

We may update this Privacy Policy periodically to reflect changes in legal requirements or our data practices. Where material changes occur, we will notify users via prominent notice on hessfieldwiffleball.com or through other reasonable means. We encourage you to review this policy regularly to remain informed.

13. Contact Us

If you have any questions, concerns, requests regarding this Privacy Policy or wish to exercise your data rights, please contact:

Hess Field Wiffleball
Email: [email protected]
Website: https://hessfieldwiffleball.com

We take privacy seriously and strive to be fully compliant with GDPR, CCPA, and other applicable privacy laws. Please reach out to us directly for any privacy-related inquiries or support.