World Rugby has developed this Privacy Statement to illustrate its commitment to the protection of the privacy and personal information of data subjects who interact with World Rugby.
When we refer to “World Rugby”, “we”, “us” or “our” in this Privacy Statement, we are referring to World Rugby, the world governing body of the sport of rugby union, and its group of operating companies (including World Rugby Limited, Rugby World Cup Limited and World Rugby Tournaments Limited). World Rugby has appointed a data protection officer, Liam McKenna, to underpin its commitment to privacy. If you would like to contact us and/or our data protection officer, please see here.
This Privacy Statement is address to you if you are individual who interacts with, or whose data is managed by, World Rugby (e.g. if you are a fan, follower or subscriber of World Rugby, if you participate in the game of rugby in certain capacities and at certain levels, if you attend one of our events, enter our competitions, participate in any of our on-line or face-to-face training or education courses, etc.).
The purpose of this Privacy Statement is to you a better understanding of:
- the types of your personal information which we collect;
- how we use and share that information;
- how we protect your data protection rights;
- details on how you can found out more about how we use your information in and
- other details relevant to how we give effect to the privacy of individuals.
For information on how we process your information on our websites, apps and other digital and social channels, please see here.
In some situations where we are collecting and processing your personal information, we will provide you with further information about the information we are collecting, the purposes for which we are using and sharing that information as well as any other information which is particularly relevant to such situations. When we do so, we may refer back to this Privacy Statement and the general principles set out here.
2. Scope of activities
As the world governing body of the sport of rugby union with responsibility for regulating, promoting and developing rugby union, and the organiser and owner of international sporting events such as Rugby World Cup and World Rugby Sevens Series, World Rugby carries out a range of activities which may involve the processing of personal data, such as those listed below:
- Operation of websites, apps and other digital and social channels;
- Organising tournaments and events;
- Operating a training and education service for rugby participants and those interested in rugby;
- Managing, recording and archiving information, results, imagery, footage and statistics from rugby matches;
- A range of regulatory activities relating to the sport of rugby union, including:
- Anti-doping activities;
- Anti-corruption activities;
- Disciplinary processes for breaches of the Laws of the Game;
- Reviewing and assessing player eligibility queries and disputes in accordance with World Rugby Regulation;
- Activities to support the high performance programmes of a range of Member Unions;
- Research activities to inform player welfare improvements and updates to World Rugby Regulations and the Laws of the Game;
- Player insurance;
- Specific systems;
- Assessing the development of rugby union at local, national and regional level within World Rugby’s Regions and member unions.
The personal information that we process about you may vary depending on which of our activities we are carrying out.
Further details on the personal information we collect in connection with each of the above activities, the purposes for which personal information is processed in connection with those activities, the third parties to whom your data may be disclosed, and the lawful basis of the relevant processing is set out below.
In general, you can visit our websites without providing personal information but we may still collect aggregated and anonymised statistical data (as described below). However, many of your interactions with us via us via our websites, apps and other digital and social channels will involve you providing us with personal information, or us collecting your personal information. In those circumstances, we may use your personal information for the following purposes:
- To enable you to create an account or profile with us or to subscribe to our newsletter(s) or mailing list(s);
- To respond to your enquiries or otherwise correspond with you;
- To provide you with content on our websites, apps and other digital and social channels and to continuously improve the performance of such platforms and channels;
- To enable you participate in certain activities, facilities or services available on our websites, apps and channels (such as competitions, score/match predictors, fantasy rugby games, etc.;
- To give effect to any preferences you share with us or that we observe from your use of our sites, apps and channels, so that we can make information which most interests you available to you (e.g. in order to personalise and improve your experience on our digital platforms, to personalise and/or tailor any communications that we may send you or for profiling purposes to enable us to personalise and/or tailor any marketing communications that you may consent to receive from us);
- to track your activity on our digital platforms
- to send information to you about World Rugby and its activities which you have requested;
- to fulfil any contract that we may enter into with you;
- send marketing information to you in ways set out in this Privacy Notice;
The table below describes the main purposes for which we process your personal information, the categories of your information involved and our lawful basis for being able to do this. For the purposes of this policy, please note that the purposes and lawful basis set out below apply equally if you are a child or an adult.
Personal Information Used
Create and administer any
account(s) you have or create with us,
manage our relationship and communications with
you, and provide you access to information you request on our platforms
All contact and account profile details (your name, involvement in Rugby, age, country of residence, country supported, nationality, gender, your geographical location and/or your confirmation that you have read and agree with the Terms and Conditions applicable to the sites), your professional details (where appropriate to elements of our digital platforms such as the Media Zone) records of your interactions with us, and marketing preferences
This is necessary to enable us to properly manage and administer your agreement with us to set-up an account profile on our platforms
To send you marketing information we think you might find useful or which you have requested from us, including our news items, information about events, volunteering and/or tickets and information about our commercial partners.
All contact and account profile details and marketing preferences.
Where you have given us your explicit consent to do so.
To allow you to participate in competitions, games and other activities, facilities or services available on the sites, apps and platforms
All contact and account profile details, together with any other personal information you submit as part of your participation in the relevant competition, game or other services or activities (such as your answers to competition questions, your predictions as to the score of a match or your team selection and points in a fantasy rugby game)
This is necessary to enable us to properly manage and administer your participation in the relevant competition, game or other service.
Activity tracking cookies which may contain information that relates to you.
Where you have consented to us using such cookies in accordance with our cookies policy.
To answer your queries, complaints or other correspondence with you. We have a legitimate interest to provide complaint handling services to you
Contact details and records of your interactions with us
We have a legitimate interest in providing you with a complaint handling services and otherwise responding to your queries.
We may collect information about your interaction with the sites and the services on the sites. This may include information about your computer and, where available, your IP address operating system and browser type. We may perform statistical analysis of user behaviour and characteristics in order to measure interest in and use of the various areas of the sites and to ascertain the number of users that have visited particular web pages. (“statistical data”). In performing statistical analysis, parts of the sites use Google Analytics (a web analytics service provided by Google, Inc.) to capture and analyze sites statistics
Information collected via statistical/analytical cookies
Where you have consented to us using such cookies in accordance with our cookies policy.
We may share your personal information with companies, organisations or individuals in one or more of the following situations:
- World Rugby may share your personal information with Rugby World Cup Limited (and with the organisers of any Rugby World Cup tournament) where you have requested that we do so and/or where it is necessary in order to provide you with information that you have requested (e.g. in relation to tickets for Rugby World Cup tournaments;
- Certain associated organisations, where you have consented to us doing so. The associated organisations to which, with your permission (in both cases), we will release your personal information are limited to:
- Member Unions of World Rugby;
- our worldwide partners, official partners/sponsors, tournament sponsors and official suppliers; and
- any third parties noted in our cookies policy (where you have consent to the use of relevant cookies).
- Certain activities which may be available on the sites, apps and platforms (such as competitions or fantasy rugby games) may involve the sharing of some of your personal data (as noted above) with other individuals participating in that activity (e.g. where you enter into a fantasy rugby game league) with other players.
Depending on the capacity in which you participate in, or attend, any of our tournaments or events (including multi-sport events that World Rugby participates in, such as the Olympic Games and Commonwealth Games), we may process your information in the following circumstances:
- Ticketholders: Where you have purchased tickets to one of our tournaments or events, or attend as a ticketholder, we may collect information about you such as your identification data, contact details, address details, requests for additional accessibility requirements (amenity seats) and any special seat location requests, purchase history, details of the payment method used (but not any financial or card data) ticket and seat allocation, and information relating to your attendance at our tournaments or events.
We use this information to process your requests for tickets and to deliver them to you, to provide you with access to the relevant tournament or event venue in accordance with applicable ticketing and admission terms and the security protocols in place at the relevant venue as well as any applicable health and safety or security regulations, to keep a record of transactions in accordance with good busines practice, and to analyse ticketing and demand data relating to our tournaments and events;
- Accredited participant/official/supplier/volunteer/media or broadcast personnel: Where you are attending, participating in or working or volunteering at a relevant tournament or event, and you require or have applied for accreditation to accreditation-controlled zones, information which we will collect and process may, depending on the capacity in which you apply for, or are granted, accreditation, include the information which you submit in the course of your Application (i.e. information regarding your name, your organisation and role, your date and place of birth, gender, contact details, address, passport details, preferred language, title/function, and designated venues for which you have received or are seeking accreditation), a passport-style photo of you, and, depending on the nature of the Accreditation you are seeking, details such as apparel sizing, your travel preferences and bookings, details of any dietary requirements or mobility restrictions which you provide to us and details of your acceptance of any terms and conditions relating to your accreditation.
We use this information (including by passing such information to organisations who have responsibilities for the organising and/or hosting of relevant tournaments or events) for identity verification and security purposes and for the purposes of the implementation of accreditation arrangements, to arrange (in certain cases) travel and other logistical details relating to the relevant tournament or event on your behalf, performance of applicable accreditation terms and conditions, to contact you and to facilitate your access to venues for which you have received accreditation.
- Guest: Where you are attending one of a relevant tournament or event as a guest, we may collect and process some or all of the following information, depending on the circumstances, your identification data, details of your organisation and your role within your organisation, your contact details, where applicable, details of your accommodation, travel and flight arrangements and bookings, your allocated seating and/or hospitality, and any dietary requirements or mobility restrictions relating to you that are communicated to us.
We use this information (including by passing such information to organisations who have responsibilities for the organising and/or hosting of relevant tournaments or events) for the purposes of conferring on you the benefits of being a guest at our event, to arrange (in certain cases) travel and other logistical details relating to the relevant tournament or event on your behalf, performance of applicable terms and conditions, to contact you and to facilitate your access to venues to which you’ve been invited.
Your voice, image and likeness may be included in any recordings of sound or images taken at the relevant event and, where applicable, such recordings may be used by us for the purposes of promoting and publicising the relevant. The processing of your personal data in this manner is on the basis of our legitimate interests in promoting and publicising the relevant.
Where we have been provided with information on any dietary requirements or mobility restrictions relating to you, we shall process such information on the basis of your explicit consent, which, by volunteering such information to us, we will deem you have given. You are free to withdraw such consent at any time by contacting us using the details below, but please note that, if you withdraw such consent, we may not be able to cater for your dietary or mobility needs. Where any requests are made to us in relation to any mobility or dietary requirements you may have, we will treat such requests as evidence of your consent for us to process information relating to your mobility or dietary needs to enable us to attempt to facilitate such requests.
We will share your personal data with the appointed hosts or organisers of the tournament or event, and suppliers who have been engaged in connection with the tournament or event, for the purposes of facilitating your attendance at the tournament or event.
Our law basis for using and disclosing your personal data for these purposes is that it is necessary for the performance of applicable ticketing, accreditation or guest programme terms and conditions and to confer benefits on you in respect of your attendance at the relevant tournament or event.
Certain of our sites have been created to provide you with access to online training courses and modules relating to participation in rugby and provide you with information on training courses and events which you can attend in person and assessments which you can sit for further accreditation.
These sites involve additional processing (and sharing) of personal data in the context of their educational purposes and are subject to their own privacy statements, which will be communicated to you when you use those sites.
Where you participate in international rugby as a player, member of team management or medical staff, or as a match official, we will process personal data relating to your participation in international rugby, including match, team and player statistics, and still and moving imagery and footage of your participation in matches.
We process and publish this data (which may include imagery and audio visual footage of you) on the basis of our legitimate interests in maintaining comprehensive records of international rugby matches and to make these records available to the public and for media, promotional and journalistic purposes, and to carry out analysis of matches to analyse trends within the game of rugby and develop other insights into the game.
In connection with such purposes, World Rugby also operates official repository of match information for all international rugby matches and events, which necessarily involves the storage of match, team and player data for historical, research, promotional and journalistic purposes. This system is also used to gather squad and selection information from teams in advance of international rugby matches.
In connection with this system, World Rugby collects data on players and other rugby participants such as their name and other identification data, date of birth, place of birth, playing height and weight, promotional head shots, match reports (e.g. squad lists, substitutions and replacements, scorers, yellow and red cards), appearance and performance statistics.
This data is processed for the purposes of enabling team selection information to be confirmed by team management international rugby matches and events, to act as a centralised official source of team selection information, match results and match statistics, as well as providing an efficient process for match statistics to be directly logged into the central system, to act as the archive of international rugby, logging the results and other details (e.g team lists) of matches for posterity and to foster interest in the game by keeping all-time records and enabling media and World Rugby’s to track, analyse and profile, the development of the game over time, to make data available to support the ongoing promotion of international rugby, to allow direct access to certain information, statistics and records to sports media and rugby fans, and for operational and logistical matters relating to Tournament organisation, logistics and procedures (including disciplinary procedures) and logging the capturing of players for the purposes of World Rugby Regulation 8.
In the interests of ensuring the accuracy of the data collected for each player and other participant, World Rugby collects passport information in relation to new entrants onto the system. This allows World Rugby verify the accuracy of name and identification details relating to each player and other participant, and ensures that similarly named players can be correctly distinguished, in the interests of ensuring overall accuracy of their data.
As this system is intended to operate as the official archive / almanac of international rugby matches, results and statistics, certain personal data (e.g. details of a player’s selection in a particular match, and statistics relating to that match) will be kept indefinitely as a matter of historical record.
In addition to publishing this data via our sites, apps and channels, this data (excluding passport information which is used for identity verification purposes only) may be disclosed and shared in the following way:
- Via publication and distribution of match statistics, images and footage, and team and player stats directly to the public on World Rugby platforms and via distribution to accredited media;
- to companies involved in broadcast and online coverage and promotion of relevant matches and rugby more generally, and who need match, team and player information for these purposes. This may include commercial partners of World Rugby;
- To tournament organisers and team management who need to access relevant data for administrative and management purposes.
Our lawful basis for processing this data is our legitimate interests in being able to process accurate and complete player, team and match information for the purposes identified above, and for historical and statistical purposes.
Individuals whose data are processed in this context for historical and statistical purposes have the right, subject to certain exceptions, to object to processing of personal data concerning him or her on grounds relating to his or her particular situation. They may do that by contacting us using the details below.
Many of the regulatory activities carried out by World Rugby in governing, regulating and developing the sport of rugby union involve the processing of personal information.
You can read further information below on the processing of personal information by World Rugby in the context of the regulatory activities listed below. In some cases, we have created specific privacy notices or statements for these activities, which you can visit by clicking the relevant link provided below.
As a signatory of the World Anti-Doping Code, World Rugby is required to process personal data in order to detect anti-doping rule violations in order to ensure that the risk of the integrity of the sport of rugby union being damaged by doping.
You can find more information on how World Rugby processes personal information in the context of its anti-doping activities at world.rugby/privacy-policy/anti-doping.
To enable World Rugby to further its efforts to preserve the fundamental character of sporting competition as an honest test of skill and ability and to prevent corrupt gambling practices from undermining the integrity of the Game, World Rugby has developed its own Anti-Corruption Regulations, which gives World Rugby power to investigate betting and integrity breaches by those participating in the game of rugby union.
You can find more information on how World Rugby processes personal information in the context of its anti-corruption activities at world.rugby/privacy-policy/anti-corruption.
As part of World Rugby’s role as the world governing of rugby, World Rugby’s role in disciplinary processes within the sport require it to process personal data relating to players and other participants in the sport in connection with the investigation and reporting of breaches of any of the provisions contained in the Laws of the Game and the World Rugby Regulations Relating to the Game. This requires us to process categories of personal data such as names and other identification data, and details and evidence relating to the Laws of the Game and the World Rugby Regulations Relating to the Game, both in the context of World Rugby’s own tournaments and across the game of rugby more generally. This data is processed in accordance with the procedures set out in World Rugby Regulations 18, 19, 20 and 21.
Our lawful basis for processing personal data for these purpose is that the processing is necessary in our legitimate interests as the global governing body for investigating and sanctioning breaches the Laws of the Game and the World Rugby Regulations Relating to the Game.
In accordance with its role under World Rugby Regulation 8, World Rugby may collect and process data relating to a player’s eligibility to represent a national representative team of a Union to give rulings, resolve disputes, enforce the rules set out in World Rugby Regulation 8 and to make information available to Unions so that they may comply with their own obligations under World Rugby Regulation 8. The data which may be processed by World Rugby in these situations include Passport data, birth certificates, proof of residence, passport, birth certificate or other information relating to a parent or grandparent of a player, information relating to past appearances made by a player in international rugby.
Our lawful basis for processing personal data for these purposes is that the processing is necessary in our legitimate interests as the global governing body in protecting the integrity of international competition in the Game of Rugby by (a) ensuring genuine, close, credible and established national links between players and the countries they are representing; and (b) ensuring that the genuineness of the link between a player and the country they are representing by preventing (save in limited circumstances) players from representing more than one country, ensuring that evidence is available to demonstrate such links between players and the country of the Union they are representing and ensuring that breaches of World Rugby’s eligibility rules can be detected and sanctioned appropriately in order to protect the integrity of international competition.
Pursuant to World Rugby’s mandate to increase participation and competitiveness in global rugby, World Rugby makes a financial investment in high performance programmes of selected Member Union. As part of this activity, World Rugby collects performance data on teams and players (including personal data relating to players) in the interests of assessing the investment decisions it has made and to inform future investment decisions.
Further details on the personal data processed in the context of this activity is available at world.rugby/privacy-policy/high-performance.
World Rugby carries out a range of research activities to inform player welfare improvements and updates to World Rugby Regulations and the Laws of the Game. These research activities are alternatively carried out by World Rugby’s own internal research unit, often in collaboration with independent research partners, or by third party research bodies who are receive funding from World Rugby.
A summary of data protection considerations connected to the main research projects carried on by World Rugby’s Research Unit is available at world.rugby/privacy-policy/project-summary.
World Rugby maintains player insurance policy cover that its Member Union may purchase or avail of to cover their players when on international duty if those Member Unions wish.
In order to arrange such cover, World Rugby collects date of birth and a salary range information relating to players who will be subject to such cover. In the event that a claim needs to be made on such insurance, World Rugby may be required to collect medical and injury information relating to a player from the relevant Member Union and to share data relating to such claim and the specific injury or illness suffered with the relevant insurers and Member Union.
Our lawful basis for this processing is that it is necessary for the performance of a contract to which the relevant players are a beneficiary (i.e. the insurance policy) and that it is necessary for the processing and exercise of claims under the insurance policy.
In the context of its regulatory activities, World Rugby operates a number of systems connected with specific regulatory functions that may process personal data (e.g. in relation to referee performance management, High Performance training, artificial turf assessment and regulation, “World Rugby approved” label ordering, investment and funding applications, and rugby information management).
Where you are a user of one of these systems, we will need to process your personal information for the purposes of registering you as a user of the relevant system(s) and providing you with the access that you need. In such context, we will process data such as your name, email address, user ID, the systems that you are entitled to access and the scope of such access, and will safely store your password information. Your data may be processed within a single-sign-on or identity and authentication management service that creates, maintains and manages user identity information and provides you authentication services across different World Rugby systems.
Our lawful basis for processing this information is that it is necessary to perform a contract with you for the provision of safe, secure and appropriate access to our system(s) which you are accessing in accordance with good identity and authentication management practices.
To the extent that additional information is processed about you in connection with the operation of any of these systems which you are accessing, you will be provided with further details on this when you access such system.
ix. Assessing the development of rugby union at local, national and regional level within World Rugby’s Regions and member unions.
In connection with World Rugby’s mandate to drive participation in rugby at all levels of the game, World Rugby receives regular reports from its member unions and regional associations regarding participation and development in rugby throughout the world. In general, data processed by World Rugby in the context of these activities is aggregated and anonymised. However, depending on the uniqueness or noteworthiness of a particular development activity that is reported on, individuals may be identifiable in connection with such activity. In those circumstances, the personal data collected is limited to the identity of relevant data subjects and their participation in a particular rugby development project.
Such personal data is processed by World Rugby in connection with its role in monitoring the driving the development of the game of rugby and, where appropriate in the context of a particular rugby development project, for the purposes of highlighting and promoting such project and rugby development activities more generally.
Our lawful basis for processing personal data in the context of these activities is our legitimate interests in monitoring, driving and promoting the development of rugby throughout the world, taking into account that the nature of any personal data processed is limited and proportionate.
If you have given us your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for marketing purposes. You may withdraw your consent to receiving marketing communications from us by contacting us using the details below, or by using the unsubscribe option available to you in each communication. If you have opted in to receive any information from our associated organisations and wish to unsubscribe from their communications, please contact those organisations directly or use the unsubscribe option available to you in their communications.
In circumstances indicated above, we may also process your personal data for the purposes of performing a contract with you (e.g. in relation to your performance or attendance at one of our tournaments or events, or to you accessing features on one of our sites or systems). Our ability to perform such contracts is depending on your providing such information. Failure on your part to provide the personal data which we have requested in these circumstances will result in the contract not being rendered impossible (with the potential consequences, for example, that you will not be able to participate in our tournament or event, attend any such tournament or event in any capacity, or access a system to which you are seeking access).
4. Disclosures of your data
In addition to the specific disclosures of your data referenced, detailed or set out in section 2 above, we will also share your personal data with third parties in the following circumstances:
- We may need to provide third party service providers with access to your information to enable us to obtain maintenance, administrative or technical support for any the sites, apps, platforms, systems or processes referenced above, or where such third parties perform functions on our behalf or provide services to us (e.g. professional advisors, technology providers and hosting companies; advertising companies and exchanges; analytics companies; payment providers; fraud and credit checking companies). These service providers are not authorised by us to use or disclose personal data except as necessary to perform services on our behalf or comply with legal requirements;
- Where we need to share your personal data to provide a product or service you have requested;
- Where relevant, we may share your personal information with a Member Union or Regional Association or tournament organiser in connection with combined regulatory activities undertaken by us and such other organisation;
- We may also share your personal information with third parties:
- when required by law or in response to legal process;
- in response to a request from law enforcement relating to a criminal investigation;
- to protect our rights, privacy, safety or property, or that of the public;
- to analyse our data, conduct mobile analytics services or to maintain and improve our services (subject to confidentiality agreements as appropriate);
- to permit us to pursue available remedies or limit damage that we may sustain;
- if the rights or safety of another individual might be violated or in threat; and
- where you otherwise consent to us doing so.
5. International transfers of your data
In some of the circumstances described above, your personal data may be transferred, accessible or visible to individuals and/or entities located outside of the European Union. Countries outside the European Union may not provide a level of legal protection for your information as strong as the level of protection provided in Ireland or your home country. Where we transfer your personal data to a recipient based outside the European Union, we will put in place a data transfer agreement with the overseas recipient of the information, protecting the information, in the appropriate standard form approved for this purpose by the European Commission (please contact us if you would like to see a copy of any of these agreements). The only exceptions are where we transfer information to member states of the European Economic Area or to countries outside the European Union which have been determined to provide an adequate level of protection by the European Commission, or where the transfer is legally justified on another basis.
6. How long do we keep your information?
The duration for which we retain your personal information will differ depending on the type of information and the reason why we collected it from you. We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we take into account the following considerations:
- the amount, nature, and sensitivity of the personal data;
- the potential risk of harm from unauthorised use or disclosure of your personal data;
- the purposes for which we process your personal data and whether we can achieve those purposes through other means;
- our contractual obligations and rights in relation to the personal data involved; and
- applicable legal requirements (including prescribed retention periods and statutes of limitations).
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
7. Your rights to access, correct, modify and/or remove your personal information
In addition to your right to withdraw consent referenced above, you have the following rights under applicable law, although your ability to exercise these rights may be subject to certain conditions:
- the right to receive a copy of and/or access, correct, and/or modify the personal data that we hold about you, together with other information about our processing of that personal data;
- the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete;
- the right, in certain circumstances, to request that we erase your personal data; and
- the right, in certain circumstances, to request that we no longer process your personal data for particular purposes, or object to our use of your personal data or the way in which we process it.
If you have any queries in relation to this privacy statement, or if you would like to contact World Rugby in relation to your rights, please write to us at email@example.com or World Rugby House, 8 – 10 Lower Pembroke Street, Dublin 2.
You can contact our Data Protection Officer by emailing firstname.lastname@example.org
If you are not happy with the way that we have used your information or address your rights, you have the right to make a complaint to the Irish Data Protection Commission by using the following link: https://forms.dataprotection.ie/contact.