We, Ipswich Skating Club, are a community amateur sports club referred to as ‘ISC’ / ‘we’ / ‘us’.
You are a skater or member of our club referred to as ‘the Skater’ / ‘you’.
We collect, use and are responsible for certain Personal Data about you. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR).
We are responsible as a ‘data controller’ for all personal information that we determine the means and purpose of processing. We are a ‘data processor’ where we use Personal Data according to a third party’s instructions.
The data we collect about you
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes your first name, last name, date of birth, gender, information about medical conditions and disabilities, emergency / next of kin contact details.
- Contact Data includes your address, your email address and telephone number (parental for under 18s);
- Transaction Data includes details about payments to and from you.
- Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Social Media Data includes information from accounts you link to us e.g. Facebook and Instagram;
- Usage Data includes information about your attendance at sessions and how you use our website;
- Photographic Data includes photographs or videos of you;
- Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
Sensitive Personal Data means personal information revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs, trade union membership, genetic and biometric data and data concerning health, sex life or sexual orientation.
We do not generally process Sensitive Personal Data. The only exception to this is for for artistic skaters that are also members of GB Skate Artistic [‘GBSA Members’] where we may collect Sensitive Personal Data when directed to by FARS. Sensitive Personal Data will only be stored on GB Skate Artistic systems and will not be retained by ISC.
We collect and use this Personal Data to provide skating sessions to you. If you do not provide Personal Data we ask for, it may delay or prevent us from allowing you to skate with us. We will inform you if this is the case.
How your Personal Data is collected
We use different methods to collect data from and about you including through:
Third parties. We will receive personal data about you from various third parties as set out below:
- Technical Data from analytics providers such as Google based outside the UK;
- Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as Stripe based outside the UK.
- Identity and Contact Data from Spond based outside the UK
How and why we use your Personal Data
Under data protection law, we can only use your Personal Data if we have a proper reason for doing so, eg:
- where you have given consent;
- to comply with our legal and regulatory obligations;
- for the performance of our contract with you; or
- for our legitimate interests or those of a third party.
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.
Purposes for which we will use your personal data
We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.
|Purpose/Activity||Type of data||Lawful basis for processing including basis of legitimate interest|
|To register you as a member||(a) Identity (b) Contact||Performance of a contract with you|
|To process and deliver you booking into a session including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us||(a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications||(a) Performance of a contract with you (b) Necessary for our legitimate interests (to recover debts due to us)|
|To create statistical data in order to:(a) submit applications for grants / funding(b) to review sessions||(a) Identity (b) Contact (c) Usage||(a) Necessary for our legitimate interests (to allow us to apply for grants/funding) (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)|
|To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)||(a) Identity (b) Contact (c) Technical||(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with a legal obligation|
|To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you||(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical||Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)|
|To use data analytics to improve our website, products/services, marketing, customer relationships and experiences||(a) Technical (b) Usage||Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)|
|To make suggestions and recommendations to you about goods or services that may be of interest to you||(a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communications||Necessary for our legitimate interests (to develop our products/services and grow our business)|
|To publicise ISC via our website and social media platforms||(a) Identity(b) Photographic||Necessary for our legitimate interests (to develop our products/services and grow our business) Note – Photographic Data will only be taken and used with explicit consent.|
The above does not apply to Sensitive Personal Data. This is only processed with your explicit consent.
Promotional offers from us
We may use your Identity, Contact, Technical and Usage Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which skating sessions and offers may be relevant for you (we call this marketing).
You will only receive direct marketing communications from us if you are a member and this will be via Spond only.
Who we share your Personal Data with
We will not share your Personal Data with any other third party.
The exception’s to this are:
- for GB Skate Artistic Members where a club administrator has been appointed to help ensure that the personal data GB Skate Artistic is holding on you are accurate and up-to-date. ISC acts as a processor in this capacity.
We may also need to disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.
If you would like more information about who we share our data with and why, please contact us by emailing firstname.lastname@example.org.
Where your Personal Data is held
All Personal Data is held on servers within the UK.
How long your Personal Data will be kept
We will keep your Personal Data while you are actively participating in the club’s activities and have membership with ISC. We review our membership database in January and July, any skater who has not participated in ISC activities bookable through Spond within the last 6 months is deleted from the system.
We will not keep your Personal Data for longer than necessary.
When it is no longer necessary to keep your Personal Data, we will delete it.
Transferring your Personal Data outside of the UK
We do not envisage a situation where we would share your Personal Data outside of the UK. However, if we are ever required to, we will inform you of this and ensure that we only transfer your personal data to a country or international organisation outside the UK where:
- the UK government has decided the particular country or international organisation ensures an adequate level of protection of personal data (known as an ‘adequacy decision’);
- there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for data subjects; or
- a specific exception applies under data protection law.
You have the following rights, which you can exercise free of charge:
|Access||The right to be provided with a copy of your personal data|
|Rectification||The right to require us to correct any mistakes in your personal data|
|Erasure (also known as the right to be forgotten)||The right to require us to delete your personal data—in certain situations|
|Restriction of processing||The right to require us to restrict processing of your personal data in certain circumstances, e.g. if you contest the accuracy of the data|
|Data portability||The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations|
|To object||The right to object in certain other situations to our continued processing of your personal data, eg processing carried out for the purpose of our legitimate interests.|
|Not to be subject to automated individual decision making||The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you|
For further information on each of those rights, including the circumstances in which they apply, please contact us via email at or see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights.
If you would like to exercise any of those rights, please:
- alter information directly yourself through Spond; or
- email us at email@example.com .
Keeping your Personal Data secure
We have appropriate security measures to prevent Personal Data from being accidentally lost, or used or accessed unlawfully. We limit access to your Personal Data to those who have a genuine need to access it. Those processing your information will do so only in an authorised manner and will ensure confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government.
How to complain
Please contact us if you have any query or concern about our use of your information by emailing firstname.lastname@example.org. We hope we will be able to resolve any issues you may have.
You also have the right to lodge a complaint with the Information Commissioner. The Information Commissioner may be contacted at https://ico.org.uk/make-a-complaint or telephone: 0303 123 1113.