Privacy Notice for Horley Bridge Club
What personal data does Horley Bridge Club collect, and what is it used for?
Who is your data shared with?
Where does this data come from?
How is your data stored?
Who is responsible for ensuring compliance with the relevant laws and regulations?
Who has access to your data?
What is the legal basis for collecting this data?
How you can check what data we have about you?
Does Horley Bridge Club collect any “special” data?
How can you ask for data to be removed, limited or corrected?
How long we keep your data for, and why?
What happens if a member dies?
Can you download your data to use it elsewhere?
What personal data does Horley Bridge Club collect?
The data we routinely collect includes members’ names, addresses, and email addresses. We collect this data directly from our members when they join the club.
For some of our members we may have additional information such as committee memberships, teaching qualifications, DBS checks done with the member’s knowledge and permission, or tournament director roles.
We collect the scores from games you play, which are displayed on our results pages and used in maintaining the EBU’s National Grading Scheme (NGS) and the Master Point scheme.
What is this personal data used for?
We use members’ data for the administration of your membership; the communication of information, and the organisation of events. We provide your data to the English Bridge Union (EBU) for their use as explained in the section below.
Your membership data is passed on to the EBU, of which you become a member when you join Horley Bridge Club. The EBU shares data with its associated charity, English Bridge Education and Development (EBED), since it shares offices and data systems with them, and also with Surrey County Bridge Association or any other county that you may have nominated as your county of allegiance.
Information from your results is also passed on to the EBU for use in its master point and NGS schemes, unless you have chosen to have your NGS grade kept private, and this may also be used for stratification and handicap purposes,.
Some of your data will be available for use by Bridgewebs acting as a Data Processor on our behalf. They are not free to pass this on to other organisations that are not connected with Horley Bridge Club.
Your personal data is not passed on by us to organisations other than those indicated above, whether or not connected with bridge.
Data for most EBU members comes from them when they join Horley Bridge Club or when they update their information either directly or via their EBU record.
The information held by the EBU may be updated by your club if you have given it permission to change your record. You can change this permission on My EBU by going to Account -> My Details.
If you are a direct member of the EBU, you will instead have provided your personal data directly to us when you joined Horley Bridge Club, or when you updated your record with us.
Scoring data comes directly from the results of the club games in which you play.
This information is mainly stored in digital form on computers. We use Bridgewebs as our data processor for this purpose. Any information that is stored remotely is stored in the EU/ in compliance with the GDPR.
Under the GDPR (General Data Protection Regulation) we do not have a statutory requirement to have a Data Protection Officer. The person who is responsible for ensuring Horley Bridge Club discharges its obligations under the GDPR is the Club Secretary - contact details are on the HBC Website (under "Information"-> "Committee").
Members of the committee of Horley Bridge Club have access to members’ data in order for them to carry out their legitimate tasks for the organisations.
Horley Bridge Club collects personal data that is necessary for the purposes of its legitimate interests as a membership organisation and participant in an internationally recognised and regulated, competitive mind sport.
For some data, such as that relating to financial matters, the basis for its collection and retention is to comply with our legal obligations.
If you want to see the basic membership data we hold about you, you should contact the Club Secretary.
You can contact us with a “Subject Access Request” if you want to ask us to provide you with any other information we hold about you. If you are interested in any particular aspects, specifying them will help us to provide you with what you need quickly and efficiently. We are required to provide this to you within one month.
There is not usually a fee for this, though we can charge a reasonable fee based on the administrative cost of providing the information if a request is manifestly unfounded or excessive, or for requests for further copies of the same information.
The GDPR refers to sensitive personal data as “special categories of personal data”.
We do not record any such special data.
There are various ways in which you can limit how your data is used.
We normally keep members’ data after they resign or their membership lapses in case they later wish to re-join. However, we will delete any former member’s contact details entirely on request.
Since underlying statistical data, like scores from bridge games, continues to be necessary in relation to the purpose for which it was originally collected and processed, results from events used for the NGS are not deleted by Horley Bridge Club or the EBU although they will no longer be attributed to a player who does not want their data to be kept.
Historical ranking lists and prize lists are required for archiving purposes and names cannot be removed from them.
We normally keep members’ information after they die. If requested by their next-of-kin to delete it we will do so on the same basis as when requested to remove data by a former member.
Your session data that is held by the EBU can be downloaded as a csv spreadsheet. You can do this by logging on to My EBU and in your Sessions list, clicking on “Download as CSV”. To access data held by Horley Bridge Club contact the Club Secretary.