Privacy Policy

1. Introduction

Shropshire Revolution ("we", "us" or "our") is committed to protecting the privacy and security of the personal data we collect from our players, staff, volunteers, supporters, and other individuals associated with our American football team. This GDPR Compliance Policy outlines our approach to managing personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Shropshire Revolution is the data controller responsible for the processing of personal data collected in connection with our activities. We determine the purposes and means of processing this data.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact Information: Name, address, email address, and phone number.
• Demographic Information: Date of birth, gender / gender identity
• Health Information: Medical conditions, injuries, and other relevant health data necessary for participation in club activities
• Performance Data: Information related to training, performance, and participation in games.
• Financial Information: Bank details for payment processing (e.g., membership fees, equipment hire, transportation, etc)
• Photographs and Videos: Media taken during training sessions, games, and events.

4. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where individuals have given clear consent for us to process their personal data for a specific purpose.
• Contractual Necessity: Where processing is necessary to fulfill a contract with the individual (e.g., participation in club activities arranged by or on behalf of the club).
• Legal Obligation: Where processing is necessary to comply with a legal obligation.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by the individual's rights and freedoms.

5. How We Use Personal Data

We use personal data for the following purposes:

• To manage team membership and participation in games and training.
• To communicate with team members, supporters, and other stakeholders.
• To ensure the health and safety of participants.
• To manage finances, including payment of fees and expenses.
• To promote the team and its activities through media and social media platforms.
• To comply with legal and regulatory obligations.

6. Data Sharing and Disclosure

We may share personal data with:

• Third-party service providers: To assist with our operations (e.g., payment processors, first aid providers, etc).
• Governing bodies: Where required for registration, competition, and compliance purposes.
• Legal authorities: When required by law or to protect our legal rights.

We ensure that any third parties with whom we share personal data are compliant with GDPR and other applicable data protection laws.

7. Data Retention

We will retain personal data only for as long as necessary to fulfill the purposes for which it was collected, as required by law. Once personal data is no longer needed, we will securely delete or anonymize it.

8. Data Subject Rights

Individuals have the following rights under GDPR:

• Right to Access: The right to request access to personal data we hold about them.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request the deletion of personal data, under certain conditions.
• Right to Restrict Processing: The right to request the restriction of processing in certain circumstances.
• Right to Data Portability: The right to receive personal data in a structured, commonly used, and machine-readable format.