Privacy Notice for Lowewood Bridge Club (LBC)
What personal data does LBC collect?
The data we routinely collect includes members’ names, postal addresses and email addresses. We collect this data directly from our members when they join the club.
For some of our members we may have additional information such as committee memberships or tournament director roles. We will also keep information relating to disciplinary matters and sanctions.
We collect the scores from LBC playing sessions, which are displayed on our results pages and used in maintaining the EBU’s National Grading Scheme (NGS) and the Master Point scheme.
What is this personal data used for?
We use members’ data for the administration of membership; the communication of information, and the organisation of events. We provide members’ data to the English Bridge Union (EBU) and to the Hertfordshire Bridge Association (HBA) for their use as explained in the section below.
Who is your data shared with?
Your membership data is passed on to the EBU of which you become a member when you join LBC. The EBU shares data with its associated charity, English Bridge Education and Development (EBED), since it shares offices and data systems with them, and also with HBA or any other county that you may have nominated as your county of allegiance. In addition, LBC also co-operates directly with the HBA in maintaining your personal data accurately.
Information from your results is passed on to the EBU for use in its master point and NGS schemes, and this information may also be used for stratification and handicap purposes. You can choose to keep private some items of data (including your NGS percentage) by setting options in My EBU by going to Account -> My Details.
Some of your data will be used by Bridgewebs acting as a Data Processor on behalf of LBC. Such Data Processors are not permitted to pass your data on to other organisations that are not connected with LBC.
Your personal data is not passed on by LBC to organisations other than those indicated above, whether or not connected with bridge.
Where does this data come from?
Data for our members comes from them when they join LBC.
Your personal information held by the EBU may be updated by LBC if you have given us permission to change your record. You can change this permission on My EBU by going to Account -> My Details.
If you are a direct member of the EBU, you will instead have provided your personal data directly to the EBU when you joined LBC, or when you updated your record with the EBU.
Scoring data comes directly from the results of the club games in which you play.
How is your data stored?
LBC maintains your information in digital form on computers and in the form of paper documents stored by the Membership Secretary. We use Bridgewebs / ScoreBridge / EBUScore as our data processors for this purpose. Any information stored remotely is stored in compliance with the GDPR (General Data Protection Regulation).
Who is responsible for ensuring compliance with the relevant laws and regulations?
Under the GDPR we do not have a statutory duty to have a Data Protection Officer. The LBC Chairperson is responsible for ensuring LBC discharges its obligations correctly under the GDPR.
Who has access to your data?
Members of the LBC committee have access to members’ data in order for them to carry out their legitimate tasks for the organisation.
Sub-contractors of LBC may be given access to data for specific tasks, such as sending mailings. They are not permitted to use members’ data for any other purpose.
What is the legal basis for collecting this data?
LBC collects personal data that is necessary for the purposes of its legitimate interests as a membership organisation and participant in an internationally recognised and regulated, competitive mind sport.
For some data, such as that relating to financial matters, the basis for its collection and retention is to comply with our legal obligations.
How you can check what data we have about you?
If you want to see the basic membership data we hold about you, you should contact the Secretary.
You can make a ‘Subject Access Request’ to ask us to provide you with any other information we hold about you. If you are interested in any particular aspects, specifying those aspects will help us to provide you with the appropriate information quickly and efficiently. We are required to provide this to you within one month.
There is not usually a fee for this, although we can charge a reasonable fee based on the administrative cost of providing the information if a request is manifestly unfounded or excessive, or for requests for further copies of the same information.
Does LBC collect any ‘special’ data?
The GDPR refers to sensitive personal data as ‘special categories of personal data’.
The only data we record relates to the disabilities of members who have explicitly requested it to be recorded for the purpose of giving them stationary positions in our competitions (which we aim to do wherever feasible). If you wish to change this data on your record you can do so at any time by contacting the Secretary.
We do not record any other data in these special categories.
How can you ask for data to be removed, limited or corrected by LBC or HBA or the EBU?
There are various ways in which you can limit how your data is used.
LBC normally keep members’ data after they resign or their membership lapses, in case they later wish to re-join. However, we will delete any former member’s contact details entirely on request.
Since underlying statistical data, such as scores from bridge games, continues to be necessary in relation to the purpose for which it was originally collected and processed, results from events used for the NGS are not deleted by LBC or the EBU although they will no longer be attributed to a player who does not want his or her data to be kept.
Historical ranking lists and prize lists are required for archiving purposes and names cannot be removed from them.
Other data, such as that relating to accounting or personnel matters, is kept for the legally required period.
What happens if a member dies?
We normally keep members’ information after he or she dies. If requested by his or her next-of-kin we will delete it on the same basis as when requested to remove data by a former member.
Can you download your data to use it elsewhere?
Your session data that is held by the EBU can be downloaded as a csv spreadsheet. You can do this by logging on to My EBU and in your Sessions list, clicking on ‘Download as CSV’.