Clubs and Syndicates

‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’) who can be directly or indirectly be identified by reference to an identifier such as name, identification number, location data or online identifier. GDPR can apply to automated personal data and manual filing systems.

‘Processing’ means any operation or set of operations which is performed on the personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

‘Controllers’ determine the purposes and means of processing personal data.

To find out whether you are a ‘Controller’ you can take the ICO’s self-assessment questionnaire here 

‘Processors’ are responsible for processing ‘personal data’ on behalf of a ‘Controller’.  

What to do when processing:

When processing ‘personal data’ it should be:

1. Processed lawfully, fairly and in a transparent manner.
2. Collected for specified, explicit and legitimate purposes.
3. Adequate, relevant and limited to what is necessary.
4. Accurate and where necessary kept up to date.
5. Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which those data are processed.
6. Processed in a manner that ensures appropriate security of the personal data.