1. Controller and contact
Club Rossie, a sub-committee of Roscommon GAA County Board (the “Promoter”), is the controller of personal data used to administer the draw and to operate winahomeinathlone.com. Privacy enquiries and rights requests may be sent to hello@clubrossie.com or Roscommon GAA Offices, Astor Buildings, St. Ciaran’s Road, Roscommon, F42 R263, County Roscommon.
2. Data collected
The Promoter may collect an entrant’s name, age or age confirmation, postal address, email address, telephone number, entry and payment-reference details, communications, and information required to confirm eligibility, prevent fraud and administer a prize. The Promoter also collects data from your device when you use the website, including your IP address and cookie data, as described in clause 13. Payment-card details are processed by the payment provider and are not retained by the Promoter unless strictly necessary and lawful.
3. Purposes and lawful bases
Personal data will be used to accept and administer entries, conduct the draw, contact and verify a provisional winner, deliver or transfer a prize, handle queries and complaints, maintain financial and licence records, prevent misuse, operate and secure the website, and comply with legal obligations. The principal lawful bases are performance of the entry contract, compliance with legal obligations and legitimate interests in securely and fairly administering the draw. Consent will be used only where it is genuinely optional, including analytics cookies and certain publicity or direct-marketing activities.
4. Recipients
Data may be shared only where necessary with contracted technology, ticketing, payment, communications and professional-service providers; the independent observer; auditors; insurers; legal advisers; the property vendor, solicitor, valuer, management company and Land Registry or other bodies involved in transfer; and regulators, courts, An Garda Síochána or public authorities where required by law.
These recipients include:
– **Stripe**, our payment provider, which processes payments and, for some of its own fraud-prevention purposes, may act as an independent controller. See Stripe’s privacy policy at https://stripe.com/ie/privacy.
– **Google**, which provides website analytics through Google Analytics, only where you consent to analytics cookies.
– **Our website hosting provider**, Hosting Ireland, which hosts the website and its database in Ireland.
Service providers must be bound by appropriate data-processing and confidentiality terms. The Promoter will not sell entrant data.
5. Winner publicity
The winner’s name, county and prize may be published where reasonably necessary for draw transparency and the Promoter’s legitimate interests, subject to a balancing assessment and any licence requirement. Any broader use of the winner’s image, interview, story or promotional content must be based on separate, specific and freely given consent that may be refused or withdrawn without affecting entitlement to the prize.
6. Direct marketing
Entry in the draw does not constitute consent to receive future marketing. Every marketing message will provide an easy way to opt out.
7. Retention
Unsuccessful entrant data will be kept for 60 months after the draw to administer and audit the draw and address legal or regulatory claims. Winner, financial, licence, fraud-prevention and property-transfer records may be kept for longer where required by law.
8. International transfers
Personal data collected through this website is stored on servers in Ireland. Some of our service providers, including Stripe and Google, may process data outside the European Economic Area. Where they do, the Promoter relies on appropriate safeguards.
9. Security
The Promoter will use appropriate technical and organisational measures proportionate to risk, including access controls, least privilege administration, secure transmission and storage, supplier due diligence, backups, incident-management procedures and staff confidentiality. No method is completely secure, but suspected personal-data breaches will be assessed and notified to the Data Protection Commission and affected persons where legally required.
10. Rights
Subject to applicable law, individuals may request access to, correction or deletion of their data; restriction of processing; data portability; or object to processing based on legitimate interests or to direct marketing. Where processing relies on consent, consent may be withdrawn at any time without affecting earlier lawful processing. Entrants do not hold accounts on the website, so all requests should be sent to the contact in clause 1. Some data cannot be deleted where the Promoter must keep it for administrative, legal, financial or security reasons, such as transaction records. The Promoter may request proportionate proof of identity before responding.
11. Complaints
Individuals may first contact the Promoter using the privacy contact above and may lodge a complaint with the Irish Data Protection Commission.
12. Our website and payments
This notice also applies to winahomeinathlone.com. Entrants enter their details on the website’s checkout page. Payments are processed by Stripe through the website’s checkout. The Promoter does not store payment card details and keeps only the payment status and a unique transaction ID. Entry and order details are stored in the website’s database, hosted in Ireland, and may be exported by authorised administrators to administer and audit the draw.
13. Cookies and analytics
This website uses cookies that are strictly necessary for it to work, including cookies that support the basket and checkout. Stripe may also set cookies or similar identifiers on the checkout page to process payments and prevent fraud.
With your consent, the website also uses Google Analytics to understand how visitors use the site. This involves cookies and the collection of information such as your IP address, device and pages visited, which is shared with Google. You can accept or refuse analytics cookies using the cookie banner, and you can change your choice at any time via the cookie icon in the bottom corner of your screen
14. Embedded content
Pages may include embedded content such as videos, maps or images from other websites. Those third parties may set cookies, collect data and track your interaction with that content as if you had visited their website directly.
15. Automated checks
Payments are screened for fraud by Stripe’s automated tools, including Stripe Radar. This may result in a payment being declined. If you think a payment was declined in error, contact us using the details in clause 1, and we will review it.