This Privacy Policy sets out the basis on which we, The Federation of Sports and Play Associations Limited (data controller) will collect, use and store your personal data.
For the purpose of the Data Protection Act 1998 (Act) / EU General Data Protection Regulation 2016 (GDPR), the data controller is The Federation of Sports and Play Associations Limited, whose registered offices are at Federation House, First Floor, Unit 64, Sixth Street, Stoneleigh Park, Kenilworth, Warwickshire, England, CV8 2LG company registration no. GB 00216719, tel. +44 2476 414999.
The Federation of Sports and Play Associations Limited acts as data controller for its own activities and those of the following associations:
The Federation of Sports and Play Associations Limited (FSPA) are committed to protecting and respecting your privacy and as such operate a strict Code of Conduct. This privacy policy, together with any other documents referred to within this notice, sets out the basis on which we will control and process the personal data that we hold on you and collect from you, or that you provide to us.
Please read the following information carefully to understand our views and practices regarding the processing and handling of your personal data.
Under the GDPR personal data is defined as:
Any information relating to an identified or identifiable natural person, ‘data subject’. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
Visitors and contributors on our social media pages:
In addition to the above, we process information on behalf of our customers (Controllers) about End Users, including:
Personal data collected within the European Economic Area (“EEA”) may, for example, be transferred to countries outside of the EEA for the purposes as described in this Privacy Policy. We utilise standard contract clauses approved by the European Commission and adopt other means set out under the GDPR in the conditions for transfer of personal data outside the European Union. We may also obtain your consent to legitimise data transfers from the EEA to the United States and other countries.
We may transfer information to vendors, service providers and other partners who globally support our business, such as providing technical infrastructure services, analysing how our services are used, measuring the effectiveness of ads and services, providing customer support, facilitating payments or conducting research and surveys. These partners must adhere to strict confidentiality obligations in a way that is consistent with our Code of Conduct and Privacy Policy and the Contracts and agreements that we enter into with them.
Our data processing partners are accredited with ISO/IEC 27001:2013 Information Security Management System; this governs key aspects of our Data and Management Security compliance under the GDPR.
The core tenants of our ISO/IEC 27001:2013 Information Security Management System include:
Information that you provide to us is stored on secure servers and is accessible only by you or the authorised user(s) of our services, where appointed by ourselves.
Our web pages may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check the relevant policies before you submit any personal data through these websites.
The General Data Protection Regulation (GDPR) empowers individuals and gives you control over your personal data.
You have the right to access the information we hold about you, including personal data and supplementary information. This provision allows you to become aware of, and verify, the lawfulness of the data we are processing.
You can find out if we hold any personal information about you by making a data subject access request.
If we do hold information about you we will:
A formal ‘data subject access request’ should be made using the contact information shown on this Privacy Policy. This information will be provided FOC. However we may charge a reasonable fee for repetitive, unfounded or excessive requests or additional copies.
At any time you can request us to change your information because it is incomplete or inaccurate. A formal ‘right to rectification’, including details on the required changes to your data, should be made using the contact information shown on this Privacy Policy.
Upon receiving a ‘right to rectification’ request we will:
This Privacy Policy provides you with information about the collecting, processing and handling of your personal data. We have produced this information to be concise, transparent, intelligible and easily accessible.
We do not make a charge for this information.
The right to erasure does not provide an absolute ‘right to be forgotten’. You have the right to have us erase your personal data and to prevent further processing under specific circumstances:
The Federation of Sports and Play Associations Limited deletes or anonymises your information upon request, subject to the exceptions described below:
We will retain enough information ‘breadcrumb data’ to allow us to demonstrate to a supervisory body (if required to do so) that we received and acted upon your request to erasure.
A formal ‘request to be forgotten’ should be made using the contact information shown on this Privacy Policy.
You have the right to ‘block’ or suppress the processing of your personal data. When you restrict the processing of personal data, we will not process it further but we will retain just enough information to ensure that your restriction is respected in future.
You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data.
A formal ‘request to restrict processing’ should be made using the contact information shown on this Privacy Policy.
When applicable a copy of your data will be supplied in either .xls or .csv format.
A formal ‘request for data portability’ should be made using the contact information shown on this Privacy Policy.
You have the right to object to our use of your personal data, including:
We will always inform you of your right to object ‘at the point of first communication’ as well as here in our Privacy Policy.’
A formal ‘right to object’ should be made using the contact information shown on this Privacy Policy.
The General Data Protection Regulation (GDPR) makes provisions on:
We will only carry out this type of decision-making where the decision is:
We identify whether any of our processing falls under this principle and if so we will:
The ‘data retention’ principle requires that we retain personal data for no longer than is necessary for the purpose we obtained it for.
The data protection regulation does not set out any specific minimum or maximum periods for retaining your personal data, however the personal data that Rethink Media processes for any purpose or purposes is not kept for longer than is necessary for that purpose or those purposes. The Federation of Sports and Play Associations Limited will:
We will notify you before we make changes to this policy and give you the opportunity to review and comment on the revised policy before continuing to use our Services.
Privacy Policy was last updated on 24th May 2018.
General questions, comments and requests regarding this Privacy Policy are welcomed and should be emailed to [email protected] or by writing to: Privacy Policy, The Federation of Sports and Play Associations Limited, Federation House, First Floor, Unit 64, Sixth Street, Stoneleigh Park, Kenilworth, Warwickshire, England, CV8 2LG.
If you wish to make a formal request or complaint concerning your personal data, you can email our data protection officer at [email protected] or by writing to: The Data Protection Officer, The Federation of Sports and Play Associations Limited, Federation House, First Floor, Unit 64, Sixth Street, Stoneleigh Park, Kenilworth, Warwickshire, England, CV8 2LG.