Last updated 12th October 2021
We are a "controller" in respect of personal data. This means that we are responsible for deciding how we process the personal data we hold about you.
We use your personal data for the purposes of our business. This includes managing your account, corresponding with you and organising tournaments. When we organise tournaments, we work with third party tournament platforms and other partner organisations that will also have access to your personal data. There is more detailed information about how we use your personal data below.
What personal data do we collect?
"Personal data" means information which identifies you as well as any information relating to you.
For the most part we receive the personal data which we process about you directly from you, for example, when you set up an account with us, complete your profile, submit articles or other user generated content to our website or when you contact us.
Account set up information:
When you set up an account with us you will be asked to provide:
- your full name; and
- your student email address.
You have to provide this information as a minimum in order to set up an account. We also record the university you attend (which we derive from the email address you provide to us).
In addition to the information above, you have the option to add further information to your online profile on our website. This is entirely voluntary. This includes:
- a profile picture;
- an 'about me' biography;
- the subject you study;
- your nickname;
- links to your social media accounts (such as Discord or Facebook); and
- articles you author and post to our website.
If you choose to include this information in your profile, it will be publicly available via our website, along with your full name and the name of the university you attend.
You can also provide us with an alternative email address (which we will not make public) which we can use to contact you should there be a problem with your student email address or to use once you have left university.
If you want to enter tournaments we manage you should also add to your public profile:
- your game account ID; and
- team profiles.
We organise and manage esports tournaments for students in partnership with third party tournament platforms. If you want to take part in a tournament which we manage, you will need to ensure you've added to your public NSE profile details of your game account ID on the platform where the tournament is being managed.
If you enter into an NSE managed tournament on one of our partner's platforms, we check that your game account details displayed our partner's platform match the game account details you have posted on your NSE profile. If they do not match (or if you do not have a valid student email address) you may not be eligible to take part in the tournament.
User generated content
Our website allows our users to post user generated content such as articles and photos.
If you post any articles, photos or any other content which contains personal data relating to any other person, you are responsible for ensuring you have their permission to do so.
From time to time other users may post articles, photos or comments which feature you. If you have any concerns about content posted by other users which features your personal data, please.
Information collected about your use of our website
We also hold information about the number of times you have logged in and the date you joined our site.
Information collected from other sources
As well as information we receive directly from you, we also occasionally process information about you which we receive from other sources.
We process information about you which is publicly displayed on our esports partners' platforms such as game account IDs, points tables and records of winners displayed on those platforms.
We also collect, use and share depersonalised aggregated data about the users of our site, such as statistical or demographic data to describe and analyse our user base. This data does not directly or indirectly reveal your identity and so does not constitute your personal data.
Why we process your personal data
We will only use your personal data when permitted to do so in accordance with data protection laws, which means that we will only process your personal data where we have a lawful basis for doing so.
In respect of your personal data, these bases are as follows: (i) where the processing of your personal data is necessary to provide services to you under the performance of the contract we have with you; (ii) where the processing of your personal data is in our (or a third party's) legitimate interests and your freedoms and fundamental rights do not override those interests; or (iii) where you have given us your consent to do so for specific purposes which we have told you about.
The table below provides further details about the reasons we process your personal data and the lawful bases we rely on to do so.
To administer the NSE website
Necessary for performance of a contract
To contact you regarding events and tournaments you have entered and to respond to communications you send us
Necessary for the performance of a contract where the communication relates specifically to our services, otherwise consent
To send you newsletters and marketing emails about our future events and our partners
To enable the use of the website and its features
Necessary for performance of a contract
To verify your student status (by checking you have a valid university email address)
Legitimate interests (of our other users and our partners, as the tournaments we manage are for students only)
To organise and manage esports tournaments with tournament providers and other partners (including validating you are eligible to participate in the tournament)
Necessary for the performance of a contract
To display your profile on our website
Necessary for performance of a contract
To carry out internal statistical analysis of our user base
Legitimate interests (of us, to understand how our website is used)
To contact you if you have won a prize
Necessary for performance of a contract
To share with our third party services providers
Legitimate interests (of us, to get the benefit of their expertise and for service efficiencies)
To monitor email opening
Legitimate interests (of us, to understand how effective our marketing campaigns are)
In addition, we will also use your personal data when we are required to do so by law. Where that is the case, our lawful basis is processing necessary for us to comply with a legal obligation that we are under.
Where you have specifically signed up to receive newsletters or have selected to receive marketing emails, if at any time you no longer want to receive these communications you can withdraw your consent at any time by unsubscribing using the link at the bottom of the email.
Please note that even if you have not signed up for marketing (or you choose to unsubscribe from our newsletter or marketing lists at a later date) you will still receive other important information, for example responses to communications you send to us, service information about events and tournaments you have signed up for and notification of any prizes you have won.
Who do we share your personal data with?
Any user generated content you submit and any information you choose to add to your profile will be publicly available via our website.
To enable us to organise tournaments we share your personal data with tournament providers and other partners. For example, where you use your NSE account to log into one of our partner websites, the partner will have access to your email address, name, and game IDs. Please check our partners' websites for details of how they will use your personal data.
We may disclose personal data to our service providers who may need to process personal data in order to provide those services to us. Currently, we use Mailchimp to help us gather statistics concerning email opening and clicks using Mailchimp's technology. You can find out more about Mailchimp's privacy practices here.
We may occasionally be required by law, court order or governmental authority to disclose certain types of personal data. Examples of the type of situation where this would occur would be:
- in the administration of justice; or
- where we have to defend ourselves legally.
Finally, in the event of a reorganisation, sale or takeover we may need to disclose personal information to new entities within the group or potential acquirers and their advisers.
Do we make your personal data available outside the EEA?
Some of our service providers, such as Mailchimp, operate outside the EEA, currently in the USA, and so your personal data maybe processed by them outside the EEA.
If personal data is transferred outside the EEA there is a risk that it will not be protected to an equivalent standard as in this country. So, before transferring your personal data we will put in place measures to ensure your personal data is protected to an equivalent standard in line with data protection laws. We will usually do this by standard contractual clauses or by a scheme approved by our data protection regulator as providing adequate protection (such as a scheme known as Privacy Shield, for transfers to US companies).
Please note we do not restrict access to our website by territory, so people browsing our website from around the world may view any personal data you include on your publicly available profile.
Links to other sites:
Our website may contain links to other websites (such as links to social media sites and to our esports partners' sites).
To enter an esports tournament which we manage you will also be required to register with the relevant third party tournaments platform where the tournament is taking place. Any personal data you provide as part of that registration process or in using a partner's tournament platform will be the responsibility of that esports partner.
We are not responsible for the content, security or privacy practices employed by our partners or other websites nor their use of your personal data. We encourage you to carefully review these websites’ privacy policies so that you know how they will collect, use, and share your information.
For how long do we hold your personal data?
In determining how long we retain your personal data we will take into account the amount and nature of the information we hold about you and factors such as whether you are still eligible to take part in esports tournaments we manage (including alumni tournaments).
You rights in respect of your personal data
You have the following rights in relation to your personal data:
- a right to access your personal data held by us;
- a right to receive certain personal data in an accessible, machine-readable format;
- a right to have inaccurate personal data rectified;
- a right to object to processing where our lawful basis is that it is in our legitimate interests, but please note that we may still process your personal data where there are other relevant lawful bases or where we have compelling grounds to continue processing your personal data in our interests which are not overridden by your rights, interests or freedoms;
- a right to have certain personal data erased where it is no longer necessary for us to process it, where you have withdrawn your consent pursuant to the paragraph immediately below, where you have objected pursuant to paragraph immediately above, where your personal data has been unlawfully processed, or where erasing your personal data is required in accordance with a legal obligation;
- where we have specifically requested your consent to process your personal data and we have no other lawful conditions to rely on you have the right to withdraw this consent;
- a right to request the restriction of processing of your personal data which enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it;
- a right to object to direct marketing, which can be done by opting-out of direct marketing via the communication itself. You also have a right to object to any profiling to the extent that it relates to direct marketing only; and
- a right to complain to the Information Commissioner's Office, although we ask that you contact us in the first instance if you have any concerns about the way we process your personal data so we can try to resolve the issue.
Further information about your rights can be found on the Information Commissioner's Office website.
If you would like to exercise any of your rights then you can do so by emailing email@example.com. Please be aware that whilst we will try to accommodate any request you make in respect of your rights they are not absolute rights. This means that we may have to refuse your request or may only be able to comply with it in part.
Where you make a request in respect of your rights we will require proof of identification. We may also ask that you clarify your request.
Cookies are small files that websites save to your hard disk or to your browser's memory.
You have the ability to accept or decline cookies. Most Internet browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies or to notify you when a cookie is being placed on your computer. If you choose to decline cookies, you may not be able to fully experience the features of our website or other websites that you visit.
To learn more about cookies and how to disable them we recommend you visit the Information Commissioner’s website here. Furthermore, whilst we do not use third party marketing cookies, you can learn more about these and how to delete them here.
How to contact us
If you have any queries in relation to your personal data or how it is processed by us, please email us at firstname.lastname@example.org