Sport and recreation privacy notice
The Sport and Recreation service works under the legal obligations and conditions of both the Principles of the Data Protection Act (DPA) and the Articles of the new European General Data Protection Regulation (GDPR).
Whilst the majority of the GDPR is similar to the DPA, and will be reflected in a new Data Protection Act, there are some critical changes which effect both ourselves as an organisation and you as an individual.
The legal basis for processing your information
Previously we have relied on obtaining consent in order to provide you with member and participation data information relating to both our services and your individual membership accounts and member promotions, although we understand that in many cases there was an expectation on your behalf that the organisations involved would automatically do this.
Our obligations
We make every effort to keep all the personal data we hold secure, whether held electronically or as paper copies. We also ensure that only members of staff with a legitimate reason to access your information have permission to do so.
Your information will only be kept for a specific amount of time after which it will be securely destroyed.
- Please see What we do with your data for the council's full retention schedule.
Even though we are required to share your information with authorised partner organisations, for statistical analysis the vast majority of this is anonymised data with no reference to individual participants we will ensure this is done in a secure manner, and the information is proportionate in order for them to analyse our provision, and as the data controller we will make sure that they comply with our required information sharing standards and protocols.
It is very important that Sport and Recreation is able to plan and realign its delivery of services to meet the needs of members and other centre users.
To do this, we carefully use the information we collect about how services are delivered and who is using these services. This also includes the statutory functions of Public Health which is now part of the council’s responsibility.
In certain cases, such as safeguarding inquiries and criminal investigations we are legally obliged to provide information to the police. However, we have procedures in place that allows this to be carried out in a secure and confidential manner.
Will this information be used to take automated decisions about me?
No
Will my data be transferred abroad?
No
What rights do I have when it comes to my data?
You have a number of rights that are set out on the How to access your data page of this section.
Where can I get advice?
View our Help and advice page for more information.