Deal & Walmer Angling Association (the "Club")
1. Protection of personal data
Regulation (EU) 2016/679 and the Data Protection Act 2018 protect individuals with regard to the processing of personal data, in particular by (a) requiring personal data to be processed lawfully and fairly on the basis of the data subject's consent or another specified basis, (b) conferring rights on the data subject to obtain information about the processing of personal data and to require inaccurate personal data to be rectified, and (c) conferring functions on the Commissioner, giving the holder of that office responsibility for monitoring and enforcing their provisions.
2. Who to contact at the Club about concerns regarding any of your personal data rights
Douglas Pettit, the Club's Secretary, is the data controller of the personal data collected, held and processed by the Club about its members.
3. The Club Secretary's contact details are as follows:
- mailing address: 108 Blenheim Road, Deal Kent CT14 7EY
- telephone: 01304 365617
- email: email@example.com
4. Why does the Club collect your personal data ?
The Club collects and processes its members' personal data comprising the following basic identification information for the purposes of administering the Club's membership records and arranging authorised angling activities:
- telephone number
- age (but only where senior citizen or juvenile membership concession is sought).
5. Whose personal data does the Club collect and process ?
The Club collects and processes the personal data of (a) its members, (b) individuals who make enquiries of the Club and (c) individuals from organisations with whom the Club works, or needs to interact with, in pursuit of the Club's constitution and core objectives. These organisations may include the police, regulatory and government agencies.
6. How is personal data collected, held and processed by the Club ?
Club members' personal data is collected, held and processed in accordance with the following six data protection processing principles:
- processing be lawful, fair and transparent
- the purposes of processing be specified, explicit and legitimate and will not be processed in a manner that is incompatible with the purpose for which it is collected
- personal data be adequate, relevant and not excessive in relation to the purpose for which it is processed
- personal data be accurate and kept up to date
- personal data be kept for no longer than is necessary for the purpose for which it is processed
- personal data be processed in a secure manner
7. In what form does the Club collect, hold and process personal data ?
Club members' personal data is held in electronic form and occasionally in hard copy. Personal data held electronically is subject to best practice standards of IT security on whatever device it is held. The Club's hard copy personal data is stored subject to physical and procedural security measures.
8. For how long does the Club keep your personal data ?
The Club collects and processes personal data for the above-specified purposes and retains it for as long as it is required by the the Club to pursue those purposes. The Club retains personal data for archiving, historic, statistical and audit purposes subject to (a) applicable statutory limitation periods and (b) appropriate safeguards for the rights and freedoms of data subjects.
The Club will contact you and seek your prior consent to use personal data collected for a purpose other than that for which it was first collected by the Club.
9. With whom do we share personal data ?
The Club will never sell, share or otherwise dispose of your personal data to any third party. The Club does not send your personal data outside the EU or to any third country.
10. What are your rights in respect of personal data held by the Club ?
You have the following statutory rights in respect of your personal data:
- the right to know what the Club does with your personal data. Contact the Club's Secretary if you have any concerns regarding this Privacy Statement;
- the right to a copy of the personal data the Club holds about you, the data subject, free of charge. The Club will respond to a Club member's subject access request for a copy of the data subject's personal data within one calendar month;
- the right to have incomplete personal data about you completed and the right to correct any errors in your personal data;
- where there is no longer a need to keep your personal data you have a right to require its erasure.
11. Children's personal data
Decisions regarding the personal data of anyone under 13 years of age must be taken by the child's parent, guardian or anyone appointed in law to fulfil that role. If you are over 13, but under 18 and are unclear about anything contained in this Privacy Statement you should seek clarification from the Club's Secretary whose contact details can be found at paragraph 3 above.
12. Do you have further concerns ?
If you have concerns about any aspect of the Club's personal data protection practices as set out in this Privacy Statement, you should first raise the matter with the Club's Secretary. In the unlikely event you remain dissatisfied, the UK regulator of data protection is the Information Commissioner who can be contacted at Wycliff House, Water Lane, Wilmslow, Cheshire SK9 5AF (or vist www.ico.org.uk) (tel: 0303 123 1113).
25th May 2018
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).
Law Enforcement Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data.
Data Protection Act 2018 makes provision for (a) the regulation of the processing of information relating to individuals, (b) the Information Commissioner's functions under certain regulations relating to information, (c) a direct marketing code of practice, and (d) connected purposes.
Since the processing of personal data by the Club does not include (1) the use of CCTV or any other form of surveillance equipment, (2) the use of direct marketing to promote the fundraising activities of the Club or (3) processing for purposes other than (a) establishing or maintaining membership or support of the organisation or (b) providing or administering activities for members or those with regular contact, registration is not required but the Club must still comply with the remaining provisions of the law.
Data Protection (Charges and Information) Regulations 2018 set out the circumstances in which data controllers are required to pay a charge, and provide information, to the Information Commissioner from 25th May 2018.
Exempt processing of personal data
Processing of personal data by the Club, being a body or association which (1) is not established or conducted for profit and (2) carries out personal data processing for the purposes of (a) establishing or maintaining membership or support for the body or association, or (b) providing or administering activities for individuals who are either a member of the body or association or who have regular contact with it, is exempt processing by reason of the provisions of section 2(2)(g) of the Schedule (Exempt Processing) to the Data Protection (Charges and Information) Regulations 2018.