NFF GDPR Privacy Policy
Effective Date: January 01, 2024
This GDPR Privacy Policy explains how The Nigerian Football Federation (NFF) (“NFF”, “we”, “our”, or “us”) collects, uses, stores, processes, and protects personal data in accordance with the European Union General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Nigeria Data Protection Act (NDPA), and other applicable privacy and data protection laws.
This Privacy Policy applies to all visitors, users, supporters, players, officials, partners, and individuals who interact with the NFF website, digital platforms, services, events, and communications.
1. Organization Information
Organization Name: Nigeria Football Federation
Official Website: thenff.com
Email Address: info@thenff.com
Address: Plot 2033, Olusegun Obasanjo Way, Zone 7, Abuja, Nigeria
2. Scope of This Privacy Policy
This Privacy Policy applies to:
- Visitors to our website
- Football fans and supporters
- Registered users and subscribers
- Players, coaches, referees, and officials
- Media representatives
- Event participants
- Partners, sponsors, and vendors
- Individuals who contact or communicate with NFF
3. Definitions
Under GDPR and applicable privacy laws:
- Personal Data means any information relating to an identified or identifiable individual.
- Processing means any operation performed on personal data, whether automated or manual.
- Data Subject refers to the individual whose data is being processed.
- Controller means the organization determining how and why personal data is processed.
- Processor means a third party processing personal data on behalf of the controller.
4. Information We Collect
We may collect and process the following categories of personal data:
A. Identity Information
- Full name
- Username or account details
- Date of birth
- Gender
- Nationality
B. Contact Information
- Email address
- Phone number
- Residential or business address
C. Technical Information
- IP address
- Browser type and version
- Device identifiers
- Operating system
- Login details
- Time zone settings
D. Usage Information
- Website activity
- Pages visited
- Session duration
- Navigation paths
- User preferences
E. Communication Information
- Contact form submissions
- Emails and messages
- Customer support interactions
- Feedback and inquiries
F. Media & Accreditation Information
- Press accreditation data
- Uploaded documents
- Identification information
- Organization or media affiliation
G. Payment & Transaction Information
Where applicable:
- Billing information
- Transaction records
- Payment confirmations
5. How We Collect Data
We collect personal data through:
- Website forms
- Account registrations
- Newsletter subscriptions
- Event registrations
- Media accreditation forms
- Cookies and analytics tools
- Emails and direct communication
- Social media interactions
- Third-party integrations and partners
6. Legal Basis for Processing
We process personal data under one or more lawful bases provided by GDPR Article 6:
A. Consent
Where users provide explicit consent.
B. Contractual Necessity
Where processing is necessary to fulfill services or agreements.
C. Legal Obligations
To comply with regulatory and legal requirements.
D. Legitimate Interests
For operational improvement, security, communication, and service optimization.
E. Vital Interests
Where processing is necessary to protect an individual’s interests.
7. How We Use Personal Data
We use collected information to:
- Operate and maintain our website and services
- Manage football-related programs and activities
- Process registrations and accreditation requests
- Communicate updates, fixtures, announcements, and news
- Respond to inquiries and support requests
- Improve website functionality and user experience
- Monitor security and prevent fraud
- Analyze platform performance and engagement
- Fulfill legal and regulatory obligations
8. Cookies and Tracking Technologies
Our website may use:
- Cookies
- Analytics tools
- Session identifiers
- Tracking technologies
- Performance monitoring tools
These technologies help improve user experience, monitor traffic, and optimize website performance.
Users may disable cookies through browser settings; however, certain features may not function properly.
9. Data Sharing and Disclosure
We may share personal data with:
A. Service Providers
Third-party providers supporting:
- Hosting infrastructure
- Analytics services
- Email communications
- Security systems
- Technical support
B. Football Authorities & Partners
Where necessary for football administration, accreditation, tournaments, or official operations.
C. Legal & Regulatory Authorities
Where disclosure is required by law, court order, or governmental request.
D. Business Transfers
In connection with organizational restructuring, mergers, or operational transitions.
We do not sell personal data to third parties.
10. International Data Transfers
Where personal data is transferred outside Nigeria or the European Economic Area (EEA), we implement appropriate safeguards including:
- Standard Contractual Clauses (SCCs)
- Secure encrypted transfers
- Approved compliance mechanisms
- Contractual data protection obligations
11. Data Retention
We retain personal data only for as long as necessary to:
- Fulfill operational purposes
- Meet legal obligations
- Resolve disputes
- Maintain security records
- Support football administration activities
When no longer required, data will be securely deleted, anonymized, or destroyed.
12. Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
- SSL/TLS encryption
- Secure servers
- Access controls
- Firewall protection
- Authentication systems
- Database security
- Routine security monitoring
- Data minimization practices
Despite these safeguards, no internet transmission system is completely secure.
13. Rights of Data Subjects
Under GDPR and applicable laws, users may have the right to:
A. Right of Access
Request access to personal data held by NFF.
B. Right to Rectification
Request correction of inaccurate or incomplete data.
C. Right to Erasure
Request deletion of personal data where legally applicable.
D. Right to Restrict Processing
Request limitation of processing activities.
E. Right to Data Portability
Request transfer of personal data in a structured format.
F. Right to Object
Object to certain types of processing.
G. Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
H. Right to Lodge Complaints
Submit complaints to a supervisory authority.
Requests may be submitted via: info@thenff.com
14. Children’s Privacy
Our services are not intentionally directed toward children without appropriate parental or guardian consent where required by law.
We do not knowingly collect personal data from minors unlawfully.
15. Third-Party Websites
Our website may contain links to external websites or third-party platforms.
NFF is not responsible for:
- Third-party privacy practices
- External content
- Third-party security measures
Users are encouraged to review external privacy policies separately.
16. Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal or significant effects without appropriate safeguards.
17. Data Breach Procedures
In the event of a personal data breach, we will:
- Investigate and contain the incident promptly
- Notify relevant authorities where legally required
- Inform affected individuals where applicable
- Implement corrective security measures
18. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time.
Updated versions will be published on:
The NFF Official Website
Users are encouraged to review this page periodically.
19. Contact Information
For questions, requests, or concerns regarding this Privacy Policy or data protection matters, contact:
Nigeria Football Federation
Email: info@thenff.com
Website: thenff.com
Address: Plot 2033, Olusegun Obasanjo Way, Zone 7, Abuja, Nigeria
20. Consent
By accessing or using thenff.com, users acknowledge that they have read, understood, and agreed to this Privacy Policy and consent to the collection and processing of personal data in accordance with applicable laws.
GDPR & NDPA Compliance Commitment
Nigeria Football Federation is committed to maintaining transparency, protecting personal information, and ensuring compliance with international and Nigerian data protection standards, including GDPR and the Nigeria Data Protection Act (NDPA).