Privacy Policy

This privacy notice tells you what to expect when we use personal information about you. We want you to be fully informed about how we use your data and your rights. We have used examples throughout, which are not intended to be exhaustive.

For simplicity throughout this notice, ‘use’ means collecting and processing personal data.

This Privacy Policy is for Gloucester City Cycling Cub (the Club). For simplicity throughout this policy, “We”, “Us”, and “Our” means the Club. The Club is the Data Controller.However, the role of data controller is fulfilled by the Membership and Racing Secretaries, who are mainly responsible for the club’s use of personal data.

Most of the personal information we process is provided to us directly by you for one or more of the following reasons:

• You joined the club
• You took part in a club ride or other event
• You entered an event or competition we organised
• You made an enquiry to us
• You are representing your organisation

Under some of the above reasons we will add to the information you have provided, recording and creating new personal data about you, such as your attendance at a meeting, or your competition result.

We also receive personal information indirectly in these scenarios:

• When you enter our events or competitions through one of our service providers, such as British Cycling’s online entry system
• When a club member or race entrant gives your contact details as an emergency contact

Purpose and legal basis for processing

The law on data protection sets out a number of bases under which an organisation can use your personal data. Our purposes in using your personal information and the legal bases we rely on are as follows:

• To manage the club, including membership and subscriptions, and where necessary, disciplinary matters. This is in accordance with the legal basis of ‘legitimate interests’, which allows us to process personal information when it is in our interests. Our interests are the proper management of the club and your relationship with us.
• To inform club members about our activities and events they may wish to participate in, in accordance with the legal basis of ‘legitimate interests’, which allows us to process personal information when it is in our interests. Our interests are for you to get the most from your membership.
• To administer competition entries and results, in accordance with the legal bases of ‘contract’ and ‘legitimate interests’. These bases allow us to process personal information when it is necessary for the preparation of, or performance of, a contract with you, or when it is in our interests. Our interests are to publicise the results of our competitions.
• To promote the club, in accordance with the legal basis of ‘consent’, which allows us to process personal information where you have given clear consent for this purpose. Where you have given your consent, you may withdraw it at any time by contacting us at memsecgccc@gmail.com
• To keep children and other vulnerable individuals safe, in accordance with the legal basis of ‘legal obligation’, which allows us to process personal information when it is necessary to comply with the law. For example, our obligations to operate Safeguarding under the Working Together to Safeguard Children statutory guidance by the Department for Education.

Should you withdraw consent previously given to us to process your data, this applies to future processing. Past processing is not affected.

Occasionally, we would like to use your personal data to promote the club, for example on our web site, via social media, or in Spokespiece magazine. This could include your name, photographs or videos, and information about your involvement with the club.

We will only use your personal data for this purpose if you give your consent. However, you may appear in the background of photographs where others are the focus, or in large groups, such as at events.

We will use your information responsibly and carefully. We will not include your full name unless there is a good reason to do so, for example when it is in connection with an event or achievement specific to you, such as winning a race. We will never include your address.

We will not provide your information to third parties. However, if your personal data is used on the internet, we cannot control who might independently share it or use it anywhere in the world.

Consent is a completely free choice for you to make and has no effect on your membership or relationship with us.

If you give your consent, you can withdraw it at any time by contacting memsecgccc@gmail.com. After doing so, your personal data will not be used in future. Withdrawing consent is not retrospective and uses of your personal data prior to the withdrawal cannot be changed. For example, publications in circulation and materials printed but not yet circulated.

Please note that where we use your personal data in connection with an event, for example by publishing a list of results and photos from a race, this is not based on your consent. See bullet #3 in section 4.

We need to know basic personal information, including your date of birth and contact information. We may also ask for contacts in the event of an emergency, if you are involved in an incident connected with a club activity, but we do not store that data.

We also hold information about your involvement in club events and competitions. Where club trophies and records are concerned, this includes competitions not organised by us.

We will not share your information with any third parties for the purposes of direct marketing.

We may share your data with the following types of organisations when it is necessary to do so under an appropriate lawful basis.

• Service providers that help us provide services to you, such as processing online competition entries.
• Cycling bodies to maintain their records of competition results, or where you wish to take advantage of benefits they offer that are available to our members.
• Local authorities and other relevant parties with regard to Safeguarding.
• The police, legal professionals and our insurers, where criminal or civil law considerations arise, including where we need to seek advice.

In some circumstances we are legally obliged to share information. For example, under a court order.

Whenever we use your personal data, we’ll keep it only for as long as is necessary for the purpose for which it was collected, which will continue after the end of your membership or inquiry, or after the competition. At the end of that period, your data will be securely deleted. Where we are able to be more specific, we have done so below.

Club membership records are kept by us for the length of your membership and then for three years after membership ceases.

Where you enter a competitive event, your data will be kept by us for as long as is required by the event’s governing body. For example, Cycling Time Trials (CTT) requires us to keep your data for four years, or until your 22^nd birthday, whichever is later.

Under data protection law, you have a range of rights over the use of your personal information. The rights available to you depend on the legal bases under which we process your information.

This is an overview of the range of rights that may be available to you:

Right to rectification

You have the right to ask us to change incorrect or incomplete personal data about you. This right is always available.

Right to erasure

You have the right to require us to delete your personal data in certain circumstances.

Right to restriction of processing

You have the right to ask us to restrict the processing of your information in certain circumstances.

Right to object to processing

You have the right to object to processing where our purpose for processing your personal information relies upon it being in our legitimate interests.

Right of access

You have the right to obtain a copy of your personal data on request. This right always applies, but some information may be exempt.

To protect the confidentiality of your information, we will verify your identity before actioning any request you make to exercise your rights.

If we are unable to action your request, we will explain to you the reasons for our refusal

We hope this privacy notice helps explain how we use your personal data and your rights. If you have any questions or concerns, please contact our Membership Secretary who will be pleased to help you. You can contact them at memsecgccc@gmail.com.

If you are unhappy with how your personal data has been used, or you are unhappy with our response to any requests or concerns regarding the use of your personal data, you have the right to make a complaint to the Information Commissioner’s Office (ICO). The ICO is the UK independent supervisory authority for data privacy. We would appreciate the opportunity to try and address your complaint and would request that you please contact us using the details in section 10, before contacting the ICO, however this is your decision.

You can contact the ICO online at https://ico.org.uk/concerns/ or by calling them on 0303 123 1113, or on 029 2067 8400 if you are a Welsh speaker.

Any updates we make to this privacy notice will be published on this page www.gloscitycc.co.uk/privacy-policy/ and where appropriate, we will notify you by email. This notice was last updated on 26/04/2019.