In each case we will also process personal data to the extent that we need to do so to comply with any applicable legal obligation and may in exceptional circumstances need to process your personal data to protect your vital interests.
How and why we may process special categories of personal data
We may need to use information revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data or information about your health, sex life or sexual orientation. We will only use this kind of information in the following ways, where:
- we have your explicit consent;
- it is necessary for us to use this information to protect your vital interests or those of another person where it is not possible to obtain consent;
- it is necessary for us to do so in connection with the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity; or
- in exceptional circumstances, another of the grounds specified in law for processing special categories of personal data are met.
In particular, we will need to collect these special categories of personal data for most event participants and volunteers to ensure that we can deliver our events safely and to meet the needs of our participants and volunteers. This information is only ever provided to us directly by you or by the parent, other person, school or other organisation booking the event on behalf of the participant.
Who we may share your information with
We will not provide your information to third parties other than as set out below.
We may disclose your personal data where necessary to:
- our agents and third party service providers;
- to the parent, school or other person or organisation who arranged your attendance at our events;
- to any emergency contacts provided by you or on your behalf;
- to any organisation or other entity which may acquire or merge with us; and
- to law enforcement and regulatory agencies in connection with any investigation to help prevent unlawful activity or where we have a legal right or duty to use or disclose your information (including for safeguarding or crime or fraud prevention purposes).
Keeping your data secure
We will use technical and organisational measures to safeguard your personal data, for example:
- we store your personal data on secure servers; and
- access to your personal data is limited to authenticated and approved staff.
While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that is transferred from you or to you via the internet.
Transfer of data out of the EEA
Some of our external service providers are based outside the European Economic Area (“EEA”) or otherwise process some of your personal data outside the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards are implemented:
- the countries we transfer your personal data to have been deemed to provide an adequate level of protection for personal data by the European Commission;
- we use contractual clauses approved by the European Commission which give personal data similar protection to that which it has in the EEA; or
- where we use providers in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data that applies within the EEA.
Please contact us if you would like further information on the specific mechanism used by us when transferring your personal data out of the EEA.
You have rights under data protection laws, in certain circumstances, including to:
- request access to personal information that we may process about you
- require us to correct any inaccuracies in your information free of charge
- to require us to erase personal data that we may process about you where this is no longer required to be processed by us
- to object to or restrict our processing of some of your personal information in certain circumstances
If you wish to exercise any of these rights, you should put your request in writing and provide us with enough information to identify you. If we need further information we will let you know.
If you have any concerns or questions as to the way in which we process your information please do contact us. In addition you have a right to bring a complaint with the Information Commissioner’s Office or other applicable authority. More information on the Information Commissioner’s Office and your rights is available at www.ico.org.uk.
If you wish to unsubscribe from email marketing communications that we send you, you can most easily do this by clicking on the unsubscribe link at the bottom of any email newsletter we have sent to you.
Retention of data
We will retain your information for no longer than is necessary for the purposes for which we collected it, or for as long as we have your consent to do so where your consent is the legal basis on which we process such data. All retained data will be held subject to this policy.
Third party sites
Changes to this policy
We may change this policy from time to time. You should check this policy frequently to ensure you are aware of the most recent version that will apply each time you visit this website.
To contact us please use the following details:
Norwich City Community Sports Foundation
Norwich City FC,