Under UK data protection law, a data subject is considered to be ‘an individual who is the subject of personal data’. Data subjects have certain rights and by exercising these rights, you can make requests regarding your personal data to the Club. A summary of these rights is explained below.
The Supervisory Authority that regulates and enforces data protection law in the UK is the Information Commissioner’s Office (ICO) and additional information and guidance about these data subject rights can be found on their website as follows https://ico.org.uk/.
1) Right to be informed
At the point of collecting personal data from you, the Club must provide you with information such as the purpose and rationale for the processing of that data.
2) Right of access
This right provides you with the ability to access your personal data that is being processed by the Club. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your requested personal data. The information will be provided free of charge unless the request is manifestly unfounded or excessive; in those cases, the request may be refused or a reasonable fee charged.
3) Right to rectification
This right provides you with the ability to ask for modifications and rectification to your personal data in the event you believe that your personal data is not up to date or accurate.
4) Right to erasure
Also known as ‘the right to be forgotten’ this right, under certain circumstances, provides you with the ability to ask for the deletion of your personal data. We may refuse to fulfil the right to erasure if there is legal reason why the personal data must be retained, the grounds are not valid or if the data is required for use in the defence of a legal claim.
5) Right to restriction of processing
You have the right to restrict the processing of your personal data where you have a particular reason for wanting the restriction. This may be because you have concerns with the personal data the Club holds about you or how we have processed your data. In most cases we will not be required to restrict your personal data indefinitely, but will need to have the restriction in place for a certain period of time.
6) Right to data portability
This right provides you with the ability to ask for a copy of or a transfer of your personal data, in a certain format. You may ask for your personal data to be provided back to you or transferred to another data controller. When doing so, the personal data must be provided or transferred in a structured, commonly used and machine-readable format.
7) Right to object
You have the right to object to the Club processing your personal data, including marketing activities and profiling, on grounds relating to your particular situation. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
8) Right to object to automated processing
This right provides you with the ability to object to a decision based solely on automated processing, including profiling. Under this right, you may ask for your processing to be reviewed manually and with human intervention.