As of May 25 2018 new legislation has come into force relating to Data Protection. This is governed and policed by the Information Commissioner’s Office. More information can be found on the Information Commissioner’s website at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/.
As part of responding to this process Sandown Park has prepared the following Privacy Notice, which covers the following areas:
1. Data held and justification
2. Treating data with respect
3. Responding to Concerns
Sandown Park holds data on its members in two principal areas.
For existing members, ex-members and for individuals who have started but not completed a process of joining, the club is likely to hold a range of basic data to allow us to operate successfully as a club. We believe this range of data is covered by the legitimate interest provision and does not require separate consent.
For members who train and compete with the club on camps away from the Sandown Park base we are likely to hold a range of extra data, including but not limited to medical data. Holding this data is a necessary part of running these camps and as such is also covered by legitimate interest, and it is shared with the staff managing these camps, either as coaches or as house parents. But there are also other reasons for holding this data including insurance and legal angles. Again we do not believe that holding this data requires separate consent.
Additionally the organization may share data with third parties, particularly Snowsport England, in the normal course of its business. Where it does so the organization will consider the nature of the third party and the purposes for which that data is likely to be used, and whether it is appropriate to obtain specific consent from individuals.
In general Sandown Park is likely to hold data for a period of time after it has been of specific use. Where there are potential legal potential insurance angles this is likely to be six years or more.
The Management Committee of Sandown Park Ski Racing club accepts that by holding data it incurs an obligation to respect the integrity and privacy of that data. In particular this involves:
Individuals have a number of rights relating to data that is held by them and we would refer any readers to the Information Commissioner’s website above. Any concerns regarding these rights should be addressed to either the Chair or the Membership Secretary of the club.
The Management Committee has also adopted in full the Subject Access Request and Data Breach Management flowcharts as published by Snowsport England in May 2018.