Privacy Policy
What does this policy cover?
Sudbury Rowing Club is committed to protecting your personal data at all times.
This policy outlines the way in which we will address our responsibilities, in line with the requirements of the General Data Protection Regulations (May 2018).
In particular, the policy will:
- Describe the different types of personal data that we collect about you.
- Explain how, and why, we collect and use your personal data.
- Explain how long we keep your personal data for.
- Outline when, why and with who we share your personal data.
- Clarify the legal basis we have for using your personal data.
- Describe how we may contact you, and how you can contact us.
- Outline the rights you have in relation to your personal data.
What personal data do we collect about you?
We collect contact details that enable us to manage your membership of the club. This includes your name, address, telephone number and email address.
We may also collect additional personal data, such as age, gender, height, weight and performance information, so that we can properly manage your involvement in competitions, under the guidance of British Rowing, the sport’s governing body in the UK.
Where necessary, we may also collect additional sensitive data relating to your general health. This is to enable us to keep you safe, and to be able to respond appropriately in the case of an accident or emergency. This data will only be collected, and used, with your explicit consent.
We may also collect personal contact details for a nominated ‘next of kin’. This information will be used only in the case of an emergency.
Where do we collect your personal data from?
We collect your personal data from the following sources:
- From you: you will fill out a membership application form, which will ask for all of the data that we require. You will also be invited to join ‘Squadlist’, a tool for managing scheduled rowing outings, where additional information may be requested.
- From a member who nominates you as their next of kin: this information will only be used to contact you directly in the case of an emergency.
How long do we keep your personal data for?
We only retain your personal data for as long as you remain a member, in order to fulfil our requirements as outlined above, or longer, if necessary, to comply with our legal obligations.
However, with your consent, we may wish to retain a small amount of contact information, such as an email address, to enable us to contact you with news of the club’s activity in the future.
If you are a commercial contact, or supplier, then we may may retain your details for as long as required for accounting and tax purposes.
Otherwise, your personal data will be securely erased.
In all cases, we will also be guided by the rights and requirements outlined in the rest of this document.
Who do we share your personal data with?
We share your data with officers of the club, so that we can manage your participation in club events. This includes club captains and coaches, as well as social and safety officers.
If you fulfil a role within the club that requires certification, such as DBS checks, First Aid, Safeguarding, or coxing/coaching qualifications, then we may share some of your data with British Rowing, other rowing clubs, statutory authorities or other certification bodies.
If you wish to compete, then we will share some of your data with British Rowing, or directly with the organisers of the events you wish to enter.
What legal basis do we have for using your information?
We use information about members, including past, present and prospective members, to enable us to provide access to the sport of rowing, in a properly managed and safe environment.
This includes providing individual support for those new to rowing, and also support in managing the development of individuals and teams who have already gained experience.
Regardless of ability, or ambition, we aim to ensure that every member gets the most from their involvement in the sport.
Where our legitimate interests conflict with your fundamental rights of privacy, we will endeavour to obtain explicit consent for the use of the information required.
How will we contact you?
Our preferred method of communication is by email. If there is some urgency, or if email communication seems not to be working, then we will contact you by telephone.
For more formal communication, we may write to you, using the address you provide to us.
How can you contact us?
Contact details for the Club, and all of the Club Officers, are publicly displayed on the club’s website, at ‘sudburyrowingclub.org.uk’.
As well as addressing specific officers, you may also send an email relating to Data Protection to ‘dpo [at–symbol] sudburyrowingclub.org.uk’.
Note that the club does not currently have a dedicated ‘Data Protection Officer’, but this role is currently being fulfilled by the Chair of the club.
What rights do you have in relation to the data we hold about you ?
By law, you have a number of rights over your personal data. Further information can be obtained from the Information Commissioner’s Office, at ‘https://ico.org.uk’.
These rights can be summarised as follows:
The right to be informed.
You have the right to be given clear and understandable information about how we use your personal data. That is the purpose of this policy document.
The right of access.
You have the right to gain access to the information we hold on you, so that you can check it, and also check that we are using it correctly.
The right to update.
You are entitled to have your personal data corrected if it is inaccurate or incomplete.
The right to erasure.
You have the right to be forgotten, by asking for us to delete your personal data. However, there may be some situations where we are required to maintain some personal data, as outlined in the section on ‘legal basis’.
The right to restrict processing.
You have the right to request that we stop using your personal data for specific purposes, even if we continue to hold the data itself.
The right to data portability.
Where your persona data is used by more than one group within the club, it should be moved safely and securely, without the need for you to re-submit it.
The right to complain.
You have the right to complain about the way we use your data, either directly to us, or to the Data Protection Regulator.
Web Privacy Policy
This website is operated by Sudbury Rowing Club, whose registered address is Sudbury Rowing Club, Quay Lane, Sudbury CO10 2AN. (“We”) are committed to protecting and preserving the privacy of our visitors when visiting our site or communicating electronically with us.
This policy sets out how we process any personal data we collect from you or that you provide to us through our website. We confirm that we will keep your information secure and that we will comply fully with all applicable UK Data Protection legislation and regulations. Please read the following carefully to understand what happens to personal data that you choose to provide to us, or that we collect from you when you visit this site. By visiting ‘https://sudburyrowingclub.org.uk/’ (our website) you are accepting and consenting to the practices described in this policy.
Types of information we may collect from you
We may collect, store and use the following kinds of personal information about individuals who visit and use our website:
Information you supply to us
You may supply us with information about you by filling in forms on our website. This includes information you provide when you submit a contact or application form. The information you give us may include your name, address, email address, phone number, date of birth, occupation, medical information, your emergency contact’s contact details and your rowing aspirations/history.
Information our website automatically collects about you
We may automatically collect information including the following:
- technical information, including a truncated and anonymised version of your Internet protocol (IP) address, browser type and version, operating system and platform
- information about your visit, including what pages you visit, how long you are on the site, how you got to the site (including date and time); page response times, length of visit, what you click on, documents downloaded and download errors.
The Plausible tool does not use cookies, so it cannot track visitors over extended periods of time or between websites. Visitors are identified by an anonymised hash composed of a randomly-generated daily salt, the website domain, the visitor’s IP address, and their user agent string. It is impossible to ’unbake’ the hash to identify its component parts.
Our Plausible instance is hosted on the EU-based cloud provider OVH SAS. Your data are stored on databases that we control on OVH hardware in France, and are not shared with any third parties (inluding Plausible).
Cookies
We do not use cookies.
How we may use the information we collect
We use the information in the following ways:
Information you supply to us
We will use this information:
- to provide you with information and/or services that you request from us
Information we automatically collect about you
Any information automatically collected is used to:
- to administer our site including troubleshooting and statistical purposes
- to improve our site to ensure that content is presented in the most effective manner for you and for your computer;
- security and debugging as part of our efforts to keep our site safe and secure.
This information will be collected anonymously and will not be linked to information that identifies you as an individual.
Disclosure of your information
Any information you provide to us will be emailed directly to us.
We do not rent, sell or share personal information about you with other people or non-affiliated companies.
We will use all reasonable efforts to ensure that your personal data is not disclosed to regional/national institutions and authorities, unless required by law or other regulations.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Third party links
Our site may contain links to and from the third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Your rights — access to your personal data
You have the right to ensure that your personal data is being processed lawfully (“Subject Access Right”). Your subject access right can be exercised in accordance with data protection laws and regulations. Any subject access request must be made in writing to Sudbury Rowing Club, Quay Lane, Sudbury CO10 2AN. We will provide your personal data to you within the statutory time frames. To enable us to trace any of your personal data that we may be holding, we may need to request further information from you. If you have a complaint about how we have used your information, you have the right to complain to the Information Commissioner’s Office (ICO).
Changes to our privacy policy
Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.
Contact
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to Sudbury Rowing Club, Quay Lane, Sudbury CO10 2AN.