Protecting Your Personal Information (Data Protection)
This privacy notice explains how we use any personal information we collect about you. We are owned and operated as a professional sports club, so the information we hold is used almost solely to allow us to: meet our regulatory or legal obligations; communicate more effectively with our own supporters; and process orders for products or services on behalf of our supporters and commercial contacts.
What information do we collect about you?
We collect information about you when you engage with our programmes and services or when you enter into employment or partnership with us. This information will normally only relate to your personal details, such as your name, postal address, email address, phone number and your date of birth. It may also include special categories of personal data such as data about food allergies if this is necessary for the provision of our services or about ethnicity, health etc if this is required to be eligible for targeted programmes. We may also collect information when you voluntarily complete surveys or provide feedback to us.
Why do we need to collect and use your personal data?
The primary legal basis that governs our processing of your data are for compliance with regulatory obligations to which we are subject, in terms of the charities regulator and for the effective delivery of our programmes and services. However, we will also obtain your consent to the processing of your data for one or more specific purposes, such as marketing. Data may also be used on the legal basis that is fair to use the personal data either in our interests or someone else’s interests, where there is no disadvantage to you – this can include where it is in our interests to contact you about products or services, ask you to complete a survey or collaborate with others to improve our services. The information that we collect about you may be essential for us to be able to carry out effectively the services that you require from us, for example in the performance of a contract where you have ordered a product or service from us. Where special category data is required we will obtain your explicit consent in order to collect and process this information.
How will we use the information about you?
As a participant in our programmes we collect information about you in order to provide you with the services for which you engage us, provide appropriate follow up after you have been provided with the product or service and to keep you informed about developments at our club.
Who might we share your information with?
In order to deliver our services to you effectively we may send your details to third parties such as technology providers that we use to arrange services for you. We may need to store your personal information with other organisations to provide you with the product or service you have chosen. If you have a debit, credit or charge card with us, we will share transaction details with companies which help us to provide this service (such as Visa and Mastercard). If you use direct debits, we will share your data with the Direct Debit scheme. Where third parties are involved in processing your data we will have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidentiality in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be transferred to a third party we will use appropriate security measures to protect your personal data in transit.
How long do we keep hold of your information?
We will keep your personal information for as long as you are engaged with GMCT programmes and services. After you cease participation, we may keep your data for up to 5 years to: respond to any questions or complaints; or maintain records according to regulatory rules that apply to us. We may keep your data for longer than 5 years if we cannot delete it for legal, regulatory or technical reasons. If we do, we will make sure that your privacy is protected and only use it for those purposes. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above.
How can I access the information you hold about me?
You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal data, please email or write to us using the contact details noted below. When your personal data is processed by automated means you have the right to ask us to transfer your personal data to another organisation for their use. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect.
We have in place physical, electronic and procedural safeguards appropriate to the sensitivity of the information we maintain to keep personal information protected from unauthorised access. Among such safeguards are the encryption of communications via SSL, encryption of information while it is in storage, firewalls, access controls, separation of duties and similar security protocols. However, due to the nature of the Internet and related technology, we cannot guarantee the security of personal information and GMCT expressly disclaims any such obligation.
In terms of contacting you for marketing purposes, there may be occasions where we would like to send you information about our programmes and services that we think may genuinely be of interest to you. If you have agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please email or write to us using the contact details noted below
GMCT sites may include links to other websites whose privacy policies we do not control. Once you leave our servers (you can tell where you are by checking the URL in the location bar on your web browser), use of any personal information you provide is governed by the privacy note of the operator of the website you are visiting.
What can you do if you are unhappy with how your personal data is processed?
You also have a right to lodge a complaint with the supervisory authority for data protection. In the UK this is: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113 (local rate).
How to contact us