GDPR

ANTI-ASSASSINS RUFC
GENERAL DATA PROTECTION REGULATION (GDPR)
PRIVACY NOTICE – MEMBERS (including Players) 

Introduction and Contact

• Anti-Assassins RUFC (‘the Club’) is a data controller and processor and, as such, is committed to protecting your personal data and respecting your privacy
• For the purpose of the GDPR, the contact person is the Secretary (info@anti-assassinsrugby.co.uk)
• We may update this Privacy Notice from time to time. Please check it regularly for any changes.

Why we are providing this notice to you

The Club holds certain information (personal data) about you which is required to operate the Club as a legal entity and as an organisation belonging to its members. We are required by law to give you certain information about your personal data, how we use it and what safeguards are in place to ensure it is protected. This notice gives you that information.

Personal data held by us will be:

• Used lawfully, fairly and in a transparent manner;
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those;
• Relevant and limited only to the purposes we have;
• Accurate and kept up to date;
• Retained for only as long as is necessary for the purposes;
• Kept securely.

Why we need the information – contractual

We need to collect personal information in order to manage your membership and we shall use it:

• To set up and administer your membership;
• To provide you with core membership services including information about Club meetings and events;
• To send you communications by e-mail or post in relation to the above.

If you are a committee member, we shall use your personal information:  

• To enable us to provide you with the information required to carry out your duties on behalf of the A-As; 
• To send you communications by e-mail or post in relation to your role.

Why we need the information – legitimate interests

We may use your personal information for legitimate interests including:

• To promote the Club and its activities by sending information about Club events including bookings; 
• To promote the game of rugby by sending information on rugby generally or as requested or directed by the RFU; 
• To communicate with you regarding queries, complaints or allegations in relation to the Club and its Rules. We shall use your personal information to follow up or investigate these queries, complaints or allegations and to take appropriate action.

In connection with the above, you have the right to object to your personal information being used in this way. If we agree with your objection, this may affect our ability to provide you with the benefits or requirements of you as a member.

Why we need your personal information – other purposes

We may require to use your personal information for other purposes. In this case, we shall provide you, in advance, with an additional privacy policy on how we shall use your personal information.

What data we need and where we obtain it

The types of data about you which we hold and process includes:

• Contact details - name, address, telephone number, e-mail address;
• Relevant correspondence and documents relating to your membership of, or duties with the Club and your interest and participation.

The personal data held is all obtained directly from you, either online through the Club’s website or by means of completed forms.

Those that we may share this data with:

From time to time, we may share your personal data with those who carry out services that help us carry out our duties and rights in relation to the Club. These include:

• Legal advisers
• Independent accountants
• Supplier of IT services in relation to the website
• Bankers
• Lancashire County Rugby Football Union 
• The Rugby Football Union

Those referred to above will not share this data with other persons or organisations. They agree to implement reasonable contractual and technical protection, to keep your data confidential, not to sell your personal data to third parties and to not disclose your personal data to third parties except as may be required by law, as permitted by the Club or as stated in this Privacy Policy.

We do not carry out any automated processing for marketing purposes using your personal data and, although we will use your data to inform you of Club activities and events and those advised to us by the RFU, we will not share your personal data with anyone else for marketing purposes.

How we protect your personal information

Your personal information is stored electronically on the A-As' membership database. This information is accessed occasionally by our committee members for the purposes outlined above.  Access is password protected.

How long we keep your data

We shall only keep your personal data for as long as we need in order to fulfil the purposes for which it was collected and for so long afterwards as we consider may be required to deal with any questions or complaints that we may receive about our administration of the Club, unless the law requires us to keep it for a longer period.

Your Rights

You have a right of access and a right to obtain a copy of the personal data that the Club holds about you. You also have a right to ask for correction of personal data if there are any errors or if the data is out of date.

In some circumstances, you may also have a right to ask the Club to restrict the processing of your personal data, to object to processing or to transfer or erase your personal data.

If you require to exercise any of these rights, please e-mail the Secretary at info@anti-assassinsrugby.co.uk. 

You also have the right to lodge a complaint in relation to this privacy notice or the Club’s processing activities with the Information Commissioner’s Office (www.ico.org.uk).

Update

We may update this Notice from time to time. We shall inform you of the changes and the date on which the changes take effect.

August 2020