This policy records what happens to any personal data that members give to the Stragglers of Asia Cricket Club (‘the club’).
The club takes data privacy very seriously. Members are asked to read this policy carefully as it contains important information about what to expect when the club collects personal information, how it is used, and the steps taken to ensure that it is kept safe. The club shall process all personal information in accordance with data protection legislation and regulations relating to the processing of personal data and privacy, including but not limited to the General Data Protection Regulation (EU) 2016/679)
It may be necessary to change this policy from time to time to reflect changes in the law and/or club practice; such changes will be made in accordance with the requirements of the club constitution. Members are encouraged to check this policy occasionally – perhaps on publication of each edition of the handbook.
The club has no dedicated data protection officer, instead relying on the committee to consider data protection issues.
2. Personal information the club holds on members includes:
- Personal and contact details, such as title, full name, contact details and contact details history (including correspondence addresses and email addresses)
- Date of birth and/or age, tenure of membership
- Banking details sufficient to facilitate collection of club subscriptions
- Personal cricket profiles, which may include other club memberships, playing history, playing preferences, etc.
3. Generally, personal data is collected from members on initial membership application forms. Some of this information is published in the handbook. It may be updated from time to time by club officers or members themselves.
4. The club uses personal data to support the good governance of and the efficient functioning of the club, such as the gathering of subscriptions and funds, the raising of sides for club matches and tours, for miscellaneous correspondence including email, and, occasionally, for insight and analysis. The club also keeps a record of club match and player statistics, and season and match reports that may include personal data (and indeed multiple partial copies of this record exist in the form of past published club handbooks).
5. The club is committed to providing an informative, effective website and is committed to safeguarding the privacy of all club website visitors. The website is owned by the club and operated by Sarumbear Limited, a registered company in England & Wales at 4 Tilden Court, Yarmouth Gardens, Southampton SO15 5SH. Registration Number: 11130724.
Limited personal data may be collected from users of the website for the purposes of improving it and for communications. In addition to names and email addresses, potentially personally identifying information like Internet Protocol (IP) addresses may be collected, but these are not used to identify individuals and would never be disclosed unless legally required to.
Limited members of Sarumbear staff may access and otherwise process personal data in connection with their job responsibilities or contractual obligations. Some of these recipients are located outside of the EEA. Sarumbear take appropriate steps to ensure that their staff are bound to duties of confidentiality, with measures implemented such as standard data protection contractual clauses to ensure that any transferred personal data remains protected and secure.
As with most websites, non-personally identifying information may be collected, of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. The purpose of any collection is to understand how visitors use the website, and to improve it.
Cookies – small files which many websites transfer to the hard disks of visitors – are used to understand pages visited, preferences, etc, and to enable the website to provide better service. Cookies must be enabled on visitors’ browsers for the best website experience.
6. In addition to the club website the club enjoys social media coverage (e.g. Twitter). Users of social media share basic personal data about themselves including in their online profiles, such as account names, gender, general interests, location, age. Users of social media may also communicate such information directly, and through the sharing of any content such as images. The club will only process such data where there is legitimate interest, i.e. in providing content of interest to social media followers of the club. Personal data will be used within the terms and functionality of the social media sites. The club is not responsible for the user terms or activities of third party sites. However, the club will not share information with others, nor permit or encourage others to do so.
7. The club officers who hold and use personal data include the Club Secretary (membership information), Club Treasurer (financial / banking detail), Club Information & Data Management Officer (website), the Club Fixture Secretary (in his capacity as handbook editor), the Club Keeper of the Records & Archivist, and Match Managers.
8. It is not the intention ever to share members’ personal data outside the club, except where necessary in relation to club activities, such as sharing of Match Managers’ details with opposing clubs.
9. The club relies on consent as the legal basis to hold and use members’ personal data. Members may withdraw consent at any time, by contacting a member of the committee.
10. The club retains personal data only for as long as necessary; typically this will be for tenure of membership (noting, at paragraph 4 above, the existence of multiple copies of past published handbooks).
11. Individuals have rights under data protection laws, although not all will apply in all circumstances. These rights include:
- The right to be informed about the processing of personal information
- The right to have personal information corrected if it is inaccurate and to have incomplete personal information completed
- The right to object to processing of personal information
- The right to restrict processing of personal information
- The right to have personal information erased (the “right to be forgotten”)
- The right to request access to personal information and to obtain information about how it is processed
- The right to move, copy or transfer personal information (“data portability”)
- The right to complain to the Information Commissioner’s Office which enforces data protection laws: https://ico.org.uk/
12. Any proposed amendments to this policy should be brought to the attention of the committee in accordance with the club constitution (paragraph 9 of the constitution refers).