Bearsted & Thurnham Bowling Club Data Protection Policy
Introduction
Being transparent and providing accessible information to individuals about how we use member’s personal data is a key element of the Data Protection Act 1998 (DPA) and the EU General Data Protection Regulation (GDPR).
This policy sets out how Bearsted & Thurnham Bowling Club will collect and store personal information about the Club’s members and others, and the use to which that information will be used.
No other information shall be collected and stored by the Club nor shall any information held about members or others be used for any purpose other than that described herein.
Information to be held
The Club shall collect and store the following personal information about its members:
This information shall be collected at the time of application for membership. From time to time, the Club is required to share certain information with the sport’s governing body, Bowls England, and with the County Association, Kent County Bowls. It shall not be shared with any other person or organisation unless specifically required by law.
The Club shall not collect or store any other information about its members.
The Club may also collect and store personal information from individuals who are not members of the Club but with whom the Club is in contact regarding specific events or functions. Such information shall include information that is relevant to the event and is necessary for the proper organisation of the event. This information shall not be shared with any other person or organisation unless specifically required by law.
Storage of personal information
This information shall be held by the Club Secretary. An individual’s information shall be held in the computer file for as long as the individual remains a member of the Club. It shall continue to be held for at least 12 months after the individual has ceased to be a member in order that any outstanding issues in respect of that individual’s membership can be resolved. All information concerning a member shall be deleted from the computer file not later than 18 months after they cease to be a member.
The information held electronically may be shared from time to time with other officers on the Club Committee for club related business.
Hard copies of applications for membership shall be retained for as long as an individual remains a member of the Club. It shall be destroyed within 6 months of an individual ceasing to be a member.
Hard copies of any membership renewal forms shall be retained until after the end of the period for which they renewed their membership.
The information held in respect of non-members collected in respect of specific events shall be kept in either electronic or hard copy by the organiser of the event and made available to those individuals who have need of it. Such information may be held for as long as is necessary for the proper organisation of the event after which time it shall be destroyed. If the event is a recurring one held at regular intervals, then such information may be held until such time as invitations to that recurring event are issued, following which time it shall be destroyed.
Use of personal information
The personal information held by the Club about its members shall be used only for the following purposes:
Details of members personal bank account information will be maintained and used solely by the Club Treasurer or substitute. The information will be deleted when individuals cease to be a member.
The Playing Committee will from time to time issue e-mails to the whole membership or part membership on strictly playing related matters. Other e-mails from the club to the whole membership will be distributed through the Club Secretary. Such e-mails shall be Bcc’d. Personal information of members will not be used for any marketing or commercial purposes.
The names and telephone contact numbers for each member will be made available to all other members for the purposes of enabling members to contact each other. Members shall not pass the contact details for any other member to any person or organisation outside of the Club for any reason whatsoever without the express consent of the member whose details are passed on.
Individual’s rights
The GDPR includes the following rights, amongst others, for individuals;
Upon joining the Club, prospective new members will be asked to sign an application form that contains the following statement:
We store and use this data for the purposes of contacting you and, apart from your telephone numbers which we share with all other members, we do not share this information with any other party. Application for membership will constitute your agreement to our storing of your personal details.
At each membership renewal date, each member should be provided with a copy of the personal data that we hold for them, and they should be asked to confirm that the information is correct or provide the appropriate corrections, and that we may continue to hold it.
Access requests
All members are entitled at any time to request a copy of the personal information that the Club holds about them.
All such requests must be complied with within one month from the date of the request. Such requests should be dealt with by the Club Secretary for the time being. No charge may be made for complying with such a request nor may any request be refused unless the request is manifestly unfounded or excessive.
If such a request is refused, the individual who has made the request must be told the reason for the refusal and that the individual has the right to complain to the supervisory authority and to a judicial remedy. This must be done without undue delay and in any event within one month of the date of the request.