Admission to Sporting Events, Puskás Arena
Data Processing Guide Regarding Admission to Sporting Events Held in the Puskás Arena and organised by HFF
1. Where to Find Information Related to Data Processing?
HFF has prepared this guide in accordance with the provisions of the EU General Data Protection Regulation 2016/679 (hereinafter referred to as “GDPR” or “Regulation”) with the specific purpose to make the data management processing operations transparent in a comprehensible manner.
This guide contains key information relating to the specific data processing (legal basis and purpose of processing, scope of processed data, duration and your rights), supplemented by the document titled General Information on Data Processing, which explains your rights and how to exercise them, the obligations related to data security and the rules in the amendment of the notice. The document titled General Information on Data Processing is available here: here.
2. Presentation of the Cases of Processing and Scope of Processed Data
The organiser is entitled to verify the identity of the participants during admission. The verification is carried out on the basis on the basis of the registered tickets and identification data processed for the purpose of ticket purchase, which can be accomplished by presenting the ID card or Club Card/Football Card.
Pursuant to Section 72/B of the Sport Act, the data (being the same as the data recorded during the ticket purchase) can be used for the purpose of criminal or infringement proceedings instigated due to any crime or infringement on the venue of the sports event or while accessing or leaving the venue of the sports event or for exclusion from participation at the sports event.
Based on Section 72 (2) of the Sport Act, the organizer must demand any person to stop such behaviour, who jeopardizes the organisation of the event or the safety of the person or property of others, or cheers or spurs in a racist way or by inciting hatred or intimidating others, or making others indignant, or does not spur in a fair way.
Section 72 (3) of the Sport Act provides that if a person who wants to enter or participates in a sports event does not comply with the admission requirements during the sports event or fails to stop jeopardizing the holding of the sports event or the safety of the person or the property of others, or cheering or spurring in a racist way or by inciting hatred or intimidating others, or making others indignant, or spurring in a unfair way despite the organizer’s warning, shall not be admitted respectively shall be removed from the sports event.
If a person is prevented from entering or removed, the organizer shall invite him to identify himself to ensure that preventing admission applies to the entire venue of the match. In order to refuse admission, the HFF processes the serial number of the ticket to invalidate it. If the person fails to comply with the demand, the organizer shall immediately notify the police for carrying out the identity check.
The organizer may detain the person until the end of the third hour of the notification, provided, that he is detained in the field of vision of a video recording device operated on the venue. In such a case, video recordings are made of the detention. The processing of the data recorded by the video recording device shall be governed by the rules on camera surveillance (you can find the data processing notice on camera surveillance here).
The Electronic Admission System only contains the bar (or other) code of the tickets without personal data, but HFF may attach those codes to personal data being recorded in the Ticketing System.
3. Duration of Data Processing
Unless required in order to conduct other proceedings (e.g. investigation of a complaint, making a police report, etc.), the verification involves data processing only at the time of the verification and is based on data already stored on the ticketing system and/or the data in the document suitable for the proof of identity.
The admission system used by the HFF does not process personal data but may only store the bar code on the ticket or pass.
Data is erased from the ticketing system three working days after the match unless the competent authority invited the HFF to retain the data for an additional period up to 30 days, and the personal data is erased within 3 working days after the event ends.
In case of retention, the HFF shall process the data recorded by the camera surveillance system in accordance with the data processing notice concerning camera surveillance.
If admission is denied by the HFF or organizer because the participant is under the punishment of exclusion, barring from visiting sports events, prohibition as an infringement or any similar decision of a foreign sports organization, authority or court, the organizer may process the personal data recorded during the admission for up to 30 days.
If, in the course of refusing admission, the data of the spectator is recorded by the organizer under Section 71 (3) of the Sport Act, the data will be processed after the match for the purpose of conducting the exclusion or other proceeding in accordance with the laws, relevant notices and its own documents management policy.
After the lapse of 3 working days of the event, the HFF will not be able to link other personal data or a person to the serial number (or other code) of the ticket recorded when admission was denied.
4. Purpose of Data Processing
The purpose of processing is the implementation of ticketing and admission corresponding to the stadium security requirements (sale of registered tickets) under Sections 72/B and 72 (2) to (4) of the Sports Act, and compliance with the obligations in Section 71 (3) of the Sports Act.
5. Recipients of Data. Categories of Recipients
In the absence of official notice or charge, the HFF shall not transmit the personal data processed by it to third parties and allow only its data processors to access them.
The entities below are involved in the activity as a data processor:
Honeywell Szabályozástechnikai Kft.
Registered address: 1139 Budapest, Petneházy u 2-4., 3rd Floor
Postal address: 1139 Budapest, Petneházy u 2-4.
Phone number: +36 1 451 4300
Website: https://www.honeywell.com/en-us/global/hu-hu
Honeywell Szabályozástechnikai Kft. is operating the Electronic Admission System.
InterTicket Kft.
Registered address: 1139, Budapest, Váci út 99., Floor 6th
Postal address: 1139, Budapest, Váci út 99.
Phone number: +36 1 266 0000
Email address: interticket@interticket.hu
InterTicket Kft. is the contracted ticket seller entity of the HFF and can come to know personal data in the context of ticket sales, by running the customer service and managing admission incidents.
Valton Sec. Kft.
Registered address: 1111 Budapest, Fehérvári út 126-128.
Postal address: 1111 Budapest, Fehérvári út 126-128.
Phone number: +36 1 872-2942
Email address: velemeny@valton.hu
The security personnel of the Valton Sec. Kft during the admission to the Puskás Arena, and their measurements as independent data controllers may handle personal data and they may forward those data to HFF.
The personal data of excluded participants are transmitted to the entity keeping the Sports Security Records under Section 73 of the Sports Act. The relevant notice is available on the adatvedelem.mlsz.hu site applies to data processing related to exclusion.
6. Source of Personal Data
The data is provided by the fan (or the buyer of the ticket on his behalf).
7. Legal Basis of Data Processing
The legal basis of processing is paragraph c) of Article 6 (1) of the Regulation, that is, to meet the legal requirement of ensuring compliance with the legal regulations described above.
8. Rights of Data Subjects
According to the Regulation, the data subjects have a number of rights (e.g. right of access to information, right to erasure or to be forgotten, right to restriction, right to withdraw consent, right to appeal to the supervisory authorities and the court) and the way how these rights can be exercised and legal bases in respect of which they can be exercised are set out in the document titled General Information on Data Processing.
The rights may be exercised by the legal representative of minors under the age of 16, and the rights of a minor above the age of 16 may be exercised by his legal representative.
The forms necessary for the exercise of your rights are available here.
This notice takes effect on 15.11.2019. Its archived version can be found among the downloadable documents below the notice.
