Colden Common Tennis Club GDPR Privacy Policy

1. Introduction Colden Common Tennis Club is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) in accordance with European Law.

2. What Data We Collect We collect and process the following types of personal data:

• Members: Name, date of birth, address, phone number, email address, emergency contact details, and payment information.

• Coaches: Name, contact details, qualifications, and employment records • Volunteer Committee Members: Name, contact details

• Visitors and Event Participants: Name, contact details, and any relevant health or accessibility information. • CCTV Footage: For security purposes, where applicable.

3. How We Use Your Data We use personal data for the following purposes:

• Membership registration and administration

• Processing payments and subscriptions

• Organising matches, coaching sessions, and events

• Communicating club news and updates

• Ensuring health and safety compliance

• Maintaining security at the club premises

4. Legal Basis for Processing Data We process personal data based on one or more of the following legal grounds:

• Contractual Necessity: To provide membership and club-related services.

• Legal Obligation: To comply with tax, employment, or safety regulations.

• Legitimate Interest: To manage and improve club operations.

• Consent: For marketing and promotional communications (you can withdraw consent at any time).

5. How We Store and Protect Your Data We implement appropriate security measures to prevent unauthorised access, disclosure, or loss of personal data. Data is stored securely and only accessed by authorised personnel.

6. Data Sharing We do not sell or rent personal data. However, we may share data with:

• Payment processors for membership fees

• Sports governing bodies for compliance purposes

• Event organisers when necessary

• Law enforcement or regulatory authorities when required by law

7. Retention of Data We retain personal data only for as long as necessary to fulfil the purpose for which it was collected and in accordance with legal requirements. 8. Your Rights Under GDPR As a data subject, you have the following rights:

• Right to Access: Request a copy of your personal data.

• Right to Rectification: Correct inaccurate or incomplete data.

• Right to Erasure: Request deletion of your data under certain conditions.

• Right to Restrict Processing: Limit how we use your data.

• Right to Data Portability: Request a transfer of your data.

• Right to Object: Object to data processing based on legitimate interests.

• Right to Withdraw Consent: Withdraw consent for marketing at any time.

9. Contact Us If you have any questions about this policy or wish to exercise your GDPR rights, please contact: cctcchairman@gmail.com

10. Changes to This Policy We may update this policy from time to time. Any changes will be communicated via our website or club notices.