Attenborough Cricket Club

The processing of personal data is governed by the General Data Protection Regulation ("GDPR") & it is the policy of Attenborough Cricket Club ("the Club") to take all necessary steps to ensure that personal data held by the ACC about its members is processed fairly & lawfully. The ACC Secretary is responsible for data protection. The accountability for the implementation of this policy is held by all the members of the committee.

Section 1: Data Protection Principles

The Club will implement & comply with the eight data protection principles in the Data protection Act 1998 ("the Act”) & the GDPR which promotes good conduct in relation to processing personal information. These principles are as follows:

Personal Data shall be processed fairly & lawfully.
Personal Data shall be obtained only for specified lawful purposes & shall not be further processed in any matter incompatible with those purposes.
Personal Data shall be adequate, relevant & not excessive in relation to the purpose or purposes for which they are processed.
Personal Data shall be accurate &, where necessary, kept up to date.
Personal Data processed for any other purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
Personal Data shall be processed in accordance with the rights of data subjects under the regulations.
Appropriate technical & organisational measures shall be taken against unauthorised or unlawful processing of personal data & against accidental loss or destruction, or damage to personal data.
Personal Data shall not be transferred to a country or territory outside the European Economic Area ("the EEA") unless that country or territory ensures an adequate level of protection for the rights of data subjects in relation to the processing of personal data.

Section 2: Information Collection

In collecting information, the Club will only collect that information which is relevant to Club matters.

Section 3: Information Collected & Purposes

The Club will collect the following information for the following purposes. This includes details on consent being given only to the Club (with the exceptions detailed in section 6):

Type of Information	Purposes	Legal basis of processing
Member's name, address, telephone numbers, email addresses.	Managing the Member's membership of the Club.	Communicating with the members & for the purposes of our legitimate interests in operating the Club.
Emergency contact details.	Managing membership categories which are related.	To enable emergency contact to be made when necessary.
Photos & videos of Members.	Putting on the Club's website & social media pages & using in press releases.	Consent - We will seek the member's consent (to process their personal data) on their membership application form & each membership renewal form & the Member may withdraw their consent at any time by contacting us by email or letter.

Section 4: Use of Information

The Club will use the information provided by members only for the following reasons:

The Club Membership Secretary uses the information to maintain current membership listings as required.
Club Coaches use some of the information, particularly that relating to age & medical conditions, to plan training programmes.
Club Coaches need to know of the medical information relating to any player to ensure that they do not ask the individual to undertake any athletic activity which would be harmful to their health.
The Team Captains use the information to compile team lists for matches, & keep records of matches competed in.
Communication regarding Club social & other related events.
Anonymised data may be shared with a funding partner as condition of grant funding e.g. Local Authority.
Anonymised data may be analysed to monitor Club trend.
We may pass your personal data to third parties who are service providers, agents & subcontractors to us for the purposes of completing tasks & providing services to you on our behalf (e.g. to print newsletters & send you mailings). However, we disclose only the personal data that is necessary for the third party to deliver the service & we will ensure we have a contract in place in each case that requires them to keep your information secure & not to use it for their own purposes.
At present, our website does not use Cookies to distinguish you from other users. Cookies are tiny text files that are stored on your browser if you agree. As our current site does not use these, this policy does not reference these. We commit to adding to this policy if our website were to use Cookies in the future.

Section 5: Data Retention

The Club will retain such records for 2 seasons after the last membership payment or renewal & then will securely destroy all personal data with the exceptions of match performance data.

Section 6: Data Release

The Club will keep your data secure & release information about members to people outside the Club only in the following circumstances:

Where there is legislative requirement to do so
Where there is an obvious medical reason to do so.
In order to meet the requirements of matches in which the Club is competing, if required.

Section 7: Data Requests

Responses to Data requests will be completed within 1 calendar month of the request.

Section 8: Third-Party Information Requests

Where information requests are made by a third party the Club will pass on to the third party only that information which is required in order to comply with legislative or competition requirements.

Section 9: Breaches Notification

Breaches will be notified to the Information Commissioners Office ("ICO") within 72 hours. These include data;

Lost or not protected
Obtained through unlawful disclosure or unauthorised access
Recorded inaccurately &/or in a misleading manner
Provided to a third party without permission
Held longer than required
Used for unlawful purposes

Section 10: Data Handling and Policy Review

All who have access to & handle any personal data held by or on behalf of the Club in line with individual's data protection rights & are fully aware of & abide by their duties under the regulations. This policy & the necessary training to ensure compliance with its implementation will be reviewed on an annual basis.

Contact Information

For any questions about this privacy policy or to exercise your data protection rights, please contact us:

Attenborough Cricket Club

The Strand, Attenborough, Nottinghamshire, NG9 6AU

Last reviewed: 3rd April 2023

Privacy Policy

Official Club Document