DATA PROTECTION POLICY

This policy sets out how “the club” handles the personal data of its players, volunteers and other third-parties. Protecting the confidentiality and integrity of personal data is a critical responsibility that we take seriously at all times.

This policy is intended to ensure that we:

  • Comply with data protection law and follow good practices for data handling

  • Protect the rights of everyone associated with our club

Our Principles for Data Protection:

  • Purposeful - Personal Information is only collected for specific and legitimate purposes.

  • Accurate - Personal Information is held accurately, updated when necessary and is deleted when it no longer meets the specific and legitimate purposes.

  • Minimal - Personal Information is limited to what is necessary in relation to the purposes for which it is processed.

Examples of when we may process or share Personal Data:

  • Player Registrations; we are required to share Personal Data with The FA for the purpose of registering players.

  • Player Profiles; we may publish some Personal Data on official club channels such as our website for the purpose of marketing and fan engagement.

  • Player Welfare; we may share some Personal Data with individuals acting on behalf of the club in a player welfare capacity or third parties of a medical profession, for the purpose of protecting the welfare of our players.

Our Principles for the processing or sharing of Personal Data:

As a ‘Data Controller’ we must process your personal data lawfully, fairly and in a transparent manner; We will only process or share your data fairly and lawfully and for one of the specified purposes (or legal bases) set out in GDPR:

  • The ‘data subject’ has given consent to the processing of his or her personal data for one or more specific purposes.

  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

  • Processing is necessary for compliance with a legal obligation to which the controller is subject.

  • Processing is necessary in order to protect the vital interests of the data subject or of another natural person.

  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

As a ‘Data Subject’ you have the Right to know:

  • What personal information we hold about you.

  • Why we are collecting this personal information.

  • How we use this personal information.

  • When this personal information is deleted from our databases.

How you can exercise this Right:

Contact info@athleticolondon.com

This policy does not form part of any contract of engagement, and we may amend it at any time. It does not override any applicable national data privacy laws and regulations in countries where we operate. This policy applies to all personal data that we process regardless of the media on which that data is stored, or whether it relates to past or present individuals engaging with “the club”, or any other data subject. Anyone who engages with “the club” must read, understand and comply with this document when processing personal data on behalf of “the club”. Any breach of the rules contained within this policy may result in disciplinary or legal action.