Consent Statement for use of Special Category Data when registering for a Buddle account
What is Buddle?
Buddle is a Sport England Lottery funded programme that provides free resources, support, guidance and workshops to grassroots sports clubs, groups and community organisations. It also assists the professional workforce that support these organisations.
What data do we collect?
When registering an account with Buddle we collect Special Categories of Personal Data which we use to help us better understand the wider impacts of Buddle and how it supports you. Special category data is information that could be used to identify you. The special category data we collect includes:
- Ethnicity
- Health Condition (Disability)
- Religion
Lawful basis
Before we collect and use special category data, we must be able to demonstrate that there is a lawful basis for us to do so. We collect special category data in order to perform a public task when we need to collect and use personal data to carry out a task that is in the public interest.
Why we collect special category data
We collect special category data to carry out research on participation in sport and physical activity. This includes assessing the overall performance of Buddle programmes designed to increase participation in sport and physical activity and to ensure that Buddle reaches a wide variety of clubs and community organisations as well as volunteers and other workforce that support them.
How do we use this data?
We only analyse anonymised data unless specific individual consent has been agreed. We only collect, use and process special category data where you have given your explicit consent to do so. All data that we hold will be kept safe and secure on UK based servers and never sold to other organisations. Your information will be held in accordance with our File Retention Schedule. This Schedule is guided by the legislative and regulatory frameworks we are subject to and helps us to ensure that we do not keep data for longer than is necessary for the purpose(s) it was collected for. Additionally, your data will only be held until such a time that you tell us that you no longer want us to hold your information. Anonymised summary findings may be shared with Buddle suppliers and stakeholders. You may be identifiable by our partners by the details you provide.
Your rights
The work carried out is in accordance with the General Data Protection Regulation. Under data protection law, you have certain rights over your information. Under certain circumstances, by law you have the right to:
- request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- object to processing of your personal information where we are relying on a legitimate interest (or those of a third-party) and there is something about your situation which makes you want to object to processing on this ground.
- request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- request the transfer of your personal information to another party.
- withdraw your consent for us to use your personal information at any time.
If you would like to exercise any of the rights mentioned above, please contact our Data Protection Officer at [email protected]. Although we hope that you would never feel that you had to, you do have the right to lodge a complaint with the UK supervisory authority for data protection issues, the Information Commissioner’s Office – www.ico.org.uk.