Website & Client Privacy Notice

CAA Base Limited (referred to as “we”, “us” or “our” in this Privacy Notice) is committed to the protection and promotion of individuals’ privacy. In connection with your use of our website, www.caabase.com and our services, it is necessary for us to collect, store and use personal data about you which makes us a controller of your data. As we form part of a global agency, your data may from time to time be controlled by other companies within our group of companies, where this is necessary to provide our services, which you will be notified of. This Privacy Notice tells you about how and why we, and our group of companies, collect and use the personal data which you provide to us or which we collect about you. We want you to be fully informed about how we use your data, how we keep it secure and your rights. We trust this Privacy Notice will answer any questions you have, but if not, please get in touch with us using the contact details provided at the end of this Privacy Notice. We may need to update this Privacy Notice from time to time by updating this page. We will notify you of any significant changes, but would encourage you to come back and review it from time to time.

We are an agency for professional footballers, engaged in providing a range of services relating to the management of a player’s career, which include representation (contract negotiations, transfers and mentoring), brokering (acting as an intermediary on behalf of players to complete deals), identification and negotiation of sponsorship opportunities, brand development and PR. We process personal data in order to provide our services and to provide and operate our website. Further details about how and why we process personal data are set out in the next section below. We will only use your personal data where we have a lawful basis to use it. We will usually only use your data where it is necessary for us enter into or to perform our contract with you (for example, to provide you with services you have requested), or in a way which might reasonably be expected as part of running our business and which does not materially impact your interests, rights or freedoms. For example, we might use your personal data to allow us to improve our website, or our services or to respond to your enquiry. Please contact us using the details below if you would like further information about this. We may sometimes need to use data to comply with our legal obligations (for example, to pass on details of people who are involved in fraud). In some cases we will ask for your consent to use your data, for example, where we need to use special category data, such as health data (as set out in the next section below). Further details of how we will use your personal information are provided below.

The information we collect about you and how we will use it, depends on how you interact with us. The columns below provide some examples:

The personal data we collect

We will collect the personal data needed to identify you such as your name and your contact details, such as your email address, telephone number and mailing address. Where relevant, we may also collect your company details, such as your job title and place of work.

How we use it

Whether you are a client or a website user, to provide you with the information or services requested and if you are a client, to enter into a business relationship with you to provide services and to contact you about them where necessary.

To respond to any communications from you, such as an enquiry or complaint and to administer any promotions/competitions. To notify you of any changes to the website or our services.

Fraud prevention and detection and security.

Lawful Basis

To enter into and fulfil our contract with you/legitimate business purposes

For legitimate business purposes.

Legal obligation/legitimate business purposes.

For Our Clients:

The personal data we collect

Travel information relating to a client and/or their family, including passport details.

How we use it

To arrange travel for our client and, where applicable their family members. We may also be required to provide a copy of your passport to social media companies in order to verify your identity for your social media accounts, where required as part of the provision of our PR services.

Lawful Basis

To fulfil our contract with you/legitimate business purposes.

The personal data we collect

Right to work documentation.

How we use it

To check that you have the right to work as part of our career management services.

Lawful Basis

To fulfil our contract with you/legitimate business purposes.

The personal data we collect

Discipline information (ie. sports position), CVs, work history, performance and training data, skills, language proficiency, date of birth, height, weight/other measurements photographs, video and audio recordings.

How we use it

To assist us to identify and negotiate suitable career opportunities

Lawful Basis

To fulfil our contract with you/legitimate business purposes.

The personal data we collect

Details of an appointment (ie. to play at a particular club), including details of the club, dates, position, remuneration etc), your employment contract and details of any sponsorship deals and other commercial transactions (ie. related to brand management or PR).

How we use it

For career management purposes

Lawful Basis

To fulfil our contract with you/legitimate business purposes.

The personal data we collect

Bank details (including name of financial institution, account and/or routing numbers for deposits or electronic transfers), details of payments and transactions, tax information and related documents, tax with-holding information, retirement plan data.

How we use it

To arrange for payments to be made to clients, for example payment of invoices for commercial work, to comply with our obligations under tax & accounting laws and regulations, for example, when required to provide information to HMRC or other government authorities, or to provide clients with any assistance requested in relation to their pension plans.

Lawful Basis

To fulfil our contract with you/legitimate business purposes. To fulfil our legal obligations.

The personal data we collect

Health data (such as data relating to allergies, medical information and dietary requirements)

How we use it

Data relating to allergies and dietary requirements may be used to book flights and/or restaurants. In limited circumstances, we may collect and use other medical information about you, for example, where it is relevant to contract negotiations or if you suffer an injury during the course of your contract with a club. We will only process this information strictly to the extent necessary to provide our services or for legal purposes.

Lawful Basis

To fulfil our contract with you/legitimate business purposes. We will usually only use this information where we have your explicit consent, unless exceptional circumstances apply, such as where we need to use the data in order to protect your or another person’s vital interests or where it is relevant to a legal claim.

The personal data we collect

Information you provide to us when you contact us ie. by telephone, email, post or social media.

How we use it

To provide you with the information, support and/or service you have requested and to fulfil any other purposes for which you have provided the data.

Lawful Basis

For legitimate business purposes.

The personal data we collect

Technical data collected by automatic means ie. browsing actions and patterns, such as details of website visits, including traffic data, location data, logs, communication data,the resources accessed and website. Information about your computer and internet connection, including IP address, operating system and browser type and equipment used to access the website. We also use “cookies” and similar applications for the purposes of enabling us to evaluate the use of our website and improve the experience of visitors to it. For information on the way in which we use cookies to monitor and manage our website performance, please see our Cookie Policy.

How we use it

To administer and to improve our website, to ensure it is presented in the most effective manner for you and to give you the best website experience and to allow you to participate in interactive features of our website if you choose to do so.

For data analysis, testing, research and statistical statistics to help us to improve our website and services.

To keep our website safe and secure.

To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you.

Lawful Basis

For legitimate business purposes.

For legitimate business purposes.

For legitimate business purposes.

For legitimate business purposes.

We may also use your personal data to perform our legal obligations or to enforce our legal rights, either under applicable laws or any contract we have entered into with you. You do not have to give us any of the personal data set out above but, if you do not provide us with certain information, we may not be able to provide you with the services you have requested from us or deal with your query or other communication.

We are part of a global agency, with offices in a number of countries in addition to the UK, including our parent company, CAA, which is based in the US. Your data may be shared with one or more of our group entities, for one or more of the purposes described above in this Privacy Notice. We share your personal data with trusted third parties to allow us to achieve the purposes set out above. When we do share your data with these third parties we have written contracts in place with them which require them to only use your data for the purpose we specify to them and that your privacy is secure and respected. These trusted third parties may include the following:
  • Our customers, such as merchandise suppliers, event providers and football clubs;
  • Private health providers, such as physiotherapists;
  • Coaches;
  • Lifestyle management companies;
  • Other agents, for example, where required as part of contract negotiations;
  • Marketing agencies, PR and commercial agencies, as part of our marketing & PR services;
  • Social media networks, such as in order to verify your social media account on your behalf;
  • Governing bodies for example football associations;
  • Football database resources solely where necessary to verify the information they hold, ie. that we are your agent;
  • Travel companies and airlines;
  • Debt collection agencies for the purpose of tracing debtors and collecting debt; and
  We may also share your personal data:
  • With our (or your) legal or professional advisers, such as accountants;
  • In connection with a business transition (such as a merger, acquisition by another company, or a sale of all of or portion of our assets). In these circumstances, we may need to share your personal data with a prospective buyer and external professional advisors such as accountants, insurers, lawyers or financial institutions.
  • Where we have a duty or a legal obligation to do so, such as with the police, administrative authorities, other enforcement, regulatory or Government bodies, or in order to enforce or apply any agreements which we enter into with you.

We may receive information about you from third parties, such as your legal or professional advisers and we may collect information made available in the public domain (ie. on websites, social media, news articles, public statements, interviews etc) and from other organisations we work with. We may combine the information you have given us, with information obtained from other sources, but we will only do this when we have a lawful basis to do so.

We will only keep your personal data for as long as we need to for the reason we collected it, as set out in this Privacy Notice. For example, for as long as needed to allow us to provide our services or to provide any support you have requested. We may also keep hold of some of your personal data if we are required to do so for legal purposes, for example, to meet our legal or regulatory requirements or to prevent fraud and abuse. For further information about our retention of your data, please contact us using the details provided at the end of this Privacy Notice.

Your personal data may be processed by our affiliates or service providers (or other third parties, such as football clubs) located outside the European Economic Area (“EEA”). Where your data is transferred outside the EEA, we will ensure that adequate safeguards are in place, such as: (a) the transfer is to a country which is the subject of an adequacy-decision by the European Commission;(b) the transfer is covered by a contractual agreement which has been approved by the European Commission as providing adequate safeguards for personal data transferred outside the EEA, such as the EU Standard Contractual Clauses;c) the transfer is to an organisation in the US that is EU-US Privacy-Shield certified; ord) an exemption applies, such as where the transfer is necessary to perform a contract with you (or concluded in your interests) or to take pre-contractual measures at your request. International data transfers to our affiliates, subsidiaries and parent companies are governed by EU Standard Contractual Clauses.

We are committed to ensuring that your personal data is secure and we have put in place suitable administrative, technical, physical and managerial measures, to protect your personal data from loss, theft, unauthorised use, disclosure or modification. In addition, we have appropriate measures in place to make sure that the personal data we retain is accurate and up-to-date.  Unfortunately no transfer data over the internet can be 100% secure.

Our website may contain links to other websites of interest. However, we do not have any control over third party websites and they will be governed by their own privacy policies, not this Privacy Notice.

You have the following rights in relation to the personal information we hold about you, to request: 
  • Access to the personal data we hold about you (commonly known as a "data subject access request") including a copy of it;
  • The correction of the personal information that we hold about you if it is incomplete or inaccurate;
  • The deletion or removal of personal data we hold about you where there is no good reason for us continuing to process it or where you have exercised your right to object to processing (see below);
  • For our processing of your personal information to be restricted in certain circumstances, for example if you want to establish its accuracy or the reason for processing it;
  • To obtain a copy of the personal information you’ve provided us with and to reuse it elsewhere or to ask us to transfer it to a third party of your choice; and
  • To withdraw any consent you have provided to our use of your personal data where we rely on it. Where you withdraw consent we will stop using your data for the specific purpose, unless we have an alternative legal basis to use it.
 We may ask you for proof of your identity before dealing with your request, as a security measure to protect your data.

Where we are processing your personal data on the basis of our (or a third party’s) legitimate interests, you can ask us to stop processing it and we must do so unless we believe we have an overriding legitimate reason to continue processing your personal data or we need to process it for the establishment, exercise or defence of legal claims. If you are dissatisfied with how we have handled your personal data, you have the right to make a complaint to your data protection regulator and we will work with them to resolve it. In the UK, this is the Information Commissioner's Office (ICO). You can make a complaint to the ICO by calling their helpline on 0303 123 1113 or on their website at www.ico.org.uk/concerns. We would, however, appreciate the chance to deal with your concerns before you approach your data protection regulator), so please do contact us in the first instance.

Contacting us

If you have any queries, comments or requests regarding this Privacy Policy, you have a complaint or you would like to exercise any of your rights set out above, you can contact us in the following ways: 
  • by email at Privacy@caa.com;
  • by post at 12 Hammersmith Grove, London, W6 7AP c/o Katerina Krumwiede; or
  • by phone at 0800 048 9009
  This Privacy Notice was last updated on 11 October 2019.