top of page

Data Protection Statement and Policy

GRANTON GIANTS

Effective Date:  5/9/24

1. Introduction

GRANTON GIANTS is committed to protecting and respecting your privacy. This policy outlines how we collect, use, and protect personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The Club is the data controller for the personal data we process. Our contact details are:​

3. Personal Data We Collect

We may collect and process the following personal data:

  • Members: Name, address, date of birth, contact details, emergency contact information, medical information (if necessary for participation), and payment details.

  • Volunteers and Staff: Name, address, contact details, employment history, and relevant qualifications/disclosure information.

  • Event Participants: Name, contact details, and any other information necessary for event participation.
     

4. Purpose of Data Processing

We process personal data for the following purposes:

  • Managing club membership and activities.

  • Organizing events and competitions.

  • Communicating with members, volunteers, and staff.

  • Ensuring the safety and well-being of participants.

  • Complying with legal obligations.
     

5. Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: When you have given clear consent for us to process your personal data for a specific purpose.

  • Contract: When processing is necessary for the performance of a contract with you.

  • Legal Obligation: When processing is necessary to comply with a legal obligation.

  • Legitimate Interests: When processing is necessary for our legitimate interests, provided your rights and interests do not override those interests.
     

6. Data Sharing

We may share personal data with third parties, including:

  • Governing bodies and regulatory authorities.

  • Service providers (e.g., IT services, payment processors).

  • Medical professionals (in case of emergencies).

We ensure that any third parties with whom we share data comply with data protection laws and use the data only for the specified purposes
.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Secure storage systems.

  • Access controls.

  • Regular data protection training for staff and volunteers.
     

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations..

9. Your Rights

You have the following rights regarding your personal data:

  • Access: The right to request access to your personal data.

  • Rectification: The right to request correction of inaccurate or incomplete data.

  • Erasure: The right to request deletion of your personal data.

  • Restriction: The right to request restriction of processing.

  • Objection: The right to object to processing based on legitimate interests.

  • Data Portability: The right to request transfer of your data to another organization.

To exercise these rights, please contact us using the contact details provided above.

10. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on our website and, where appropriate, notified to you by email.

11. Contact Us

If you have any questions or concerns about this policy or our data protection practices, please contact us at:

bottom of page