PORTSMOUTH & DISTRICT WOMEN`S BOWLING ASSOCIATION

Policy to comply with the General Data Protection Regulations

(GDPR)

Policy

The Portsmouth & District Womens Bowling Association`s  (P&D WBA) General Data Protection Regulations Policy sets out its commitment to protecting personal data and how we implement that commitment with regards to the collection and use of  personal data. The P&D WBA is committed to ensuring that it complies with the General Data Protection Regulations principles, as listed below:

~

Meets its legal obligations as laid down by the General Data Protection Regulations.

~

Ensure that data is collected and used fairly and lawfully.

~

Process personal data only in order to meet its operational needs or fulfill its legal                                requirements

~

Take steps to ensure that personal data is up to date and accurate.

~

Establish appropriate retention periods for personal data.

~

Provide members with access to their personal information upon request.

~

Abide by Article 15, granting members the right to have their personal information erased.

~

Provide adequate security measures to protect personal data.

~

Ensure Computer Security Software is current.

~

Ensure computers containing personal information have their passwords changed on a regular basis.

~

Ensure that a nominated member is responsible for data protection compliance and provides a point of contact for all data protection issues.

~

Ensure that all members are made aware of good practice in data protection.

~

Provide adequate training for all members responsible for personal data.

~

Ensure that queries about data protection, internal and external to the P&D WBA, are dealt with effective and promptly.

~

Regularly review data protection procedures and guidelines within the P&D WBA..

~

Ensure that everyone handling personal data knows where to find further guidance.

Data Protection

Personal Data is any data which may be used to identify, contact or locate a single person.

Data is held as follows:

*

The P&D WBA Secretary holds for all P&D WBA Officers, Club Captains and Secretaries their name,  home and, where known, mobile phone number, as well as email addresses.

*

The P&D WBA League Secretary holds for all P&D WBA Officers, Club Captains and Secretaries their name, home and, where known, mobile phone number, as well as email addresses.

*

The P&D WBA Competitions Secretary holds for all P&D WBA Officers, Club Captains and Secretaries and members who have entered competitions their name, home and, where known, mobile phone number, as well as email addresses.

*

The Treasurer holds email addresses and phone numbers of individuals to whom she makes payments. She holds no financial data on individuals.

*

Those officers involved with Junior Players hold such detailed information as is required under Safeguarding Legislation and supplied by parents.

*

Other Officers hold email addresses and phone numbers of individual club members to allow them to make contact for the running of league, competitions, selection of teams, etc.

this information is held principally on personal computers which have up to date security software although some records may be hard copy. No financial information on members (e.g. Bank details) is held by the P&D WBA although, where membrs have provided details of their Bank account, for the purposes of receiving BACS payments, that information is held within the Bank`s own system accessible only to authorised Officers.

Data Sharing

Personal information shared is that relevant information required by club members to participate in competitions, play matches etc. Information is also shared with other Bowling Associations or organisations to which the P&D WBA is affiliated where it is need by those Associations or organisations in order that they can inform players of competition arrangements, selection for Association games etc.

Data Erasure

Anyone who has their personal data held by the P&D WBA has the right to access, view and erase this data. A subject Access Request (Artifcle 15) grants every citizen the right to a copy of all their personal data held by the P&D WBA. The P&D WBA will provide this information in an electronically transportable format usable by the individual requesting the information. The Right to be Forgotten (Article 16 & 17) entitles individuals to have this data erased. The P&D WBA undrestands that failure to fulfill this entitlement will be a violation of GDPR and subject to penalties.

Data Breaches

In the event of a data breach posing any kind of threat to members personal information, the P&D WBA will inform the affected individuals within 72 hours.