For the purpose of the Data Protection Act 1998 (Act) / EU General Data Protection Regulation 2016 (GDPR), the data controller is The Federation of Sports and Play Associations Limited, whose registered offices are at Federation House, First Floor, Unit 64, Sixth Street, Stoneleigh Park, Kenilworth, Warwickshire, England, CV8 2LG company registration no. GB 00216719, tel. +44 2476 414999.
The Federation of Sports and Play Associations Limited acts as data controller for its own activities and those of the following associations:
Please read the following information carefully to understand our views and practices regarding the processing and handling of your personal data.
Under the GDPR personal data is defined as:
Any information relating to an identified or identifiable natural person, ‘data subject’. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
Visitors and contributors on our social media pages:
In addition to the above, we process information on behalf of our customers (Controllers) about End Users, including:
Our data processing partners are accredited with ISO/IEC 27001:2013 Information Security Management System; this governs key aspects of our Data and Management Security compliance under the GDPR.
The core tenants of our ISO/IEC 27001:2013 Information Security Management System include:
Information that you provide to us is stored on secure servers and is accessible only by you or the authorised user(s) of our services, where appointed by ourselves.
The General Data Protection Regulation (GDPR) empowers individuals and gives you control over your personal data.
You have the right to access the information we hold about you, including personal data and supplementary information. This provision allows you to become aware of, and verify, the lawfulness of the data we are processing.
You can find out if we hold any personal information about you by making a data subject access request.
If we do hold information about you we will:
Upon receiving a ‘right to rectification’ request we will:
We do not make a charge for this information.
The right to erasure does not provide an absolute ‘right to be forgotten’. You have the right to have us erase your personal data and to prevent further processing under specific circumstances:
The Federation of Sports and Play Associations Limited deletes or anonymises your information upon request, subject to the exceptions described below:
We will retain enough information ‘breadcrumb data’ to allow us to demonstrate to a supervisory body (if required to do so) that we received and acted upon your request to erasure.
You have the right to ‘block’ or suppress the processing of your personal data. When you restrict the processing of personal data, we will not process it further but we will retain just enough information to ensure that your restriction is respected in future.
You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data.
When applicable a copy of your data will be supplied in either .xls or .csv format.
You have the right to object to our use of your personal data, including:
The General Data Protection Regulation (GDPR) makes provisions on:
We will only carry out this type of decision-making where the decision is:
We identify whether any of our processing falls under this principle and if so we will:
The ‘data retention’ principle requires that we retain personal data for no longer than is necessary for the purpose we obtained it for.
The data protection regulation does not set out any specific minimum or maximum periods for retaining your personal data, however the personal data that Rethink Media processes for any purpose or purposes is not kept for longer than is necessary for that purpose or those purposes. The Federation of Sports and Play Associations Limited will:
We will notify you before we make changes to this policy and give you the opportunity to review and comment on the revised policy before continuing to use our Services.
If you wish to make a formal request or complaint concerning your personal data, you can email our data protection officer at [email protected] or by writing to: The Data Protection Officer, The Federation of Sports and Play Associations Limited, Federation House, First Floor, Unit 64, Sixth Street, Stoneleigh Park, Kenilworth, Warwickshire, England, CV8 2LG.