Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controllers’ possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation 2016/679 (the ‘GDPR’).

Who are we?
United Counties Football League (UCL), (Leagues) is the data controller, whose registered offices are located c/o The Secretary at Nene Valley Community Centre, Candy Street, Peterborough PE2 9RE. This means that we decide how your personal data is processed, and for what purposes.

How do we process your personal data?
UCL complies with its obligations under the GDPR by keeping personal data up to date, by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We may use your personal data for the following purposes:
- To generate and administer your membership of the League;
- To market relevant events, offers and promotions to you.
The Club officials and committee/Referees agree that the above information will be stored by the League on The Football Association Full Time System and only to be used by for running the Leagues. Also, any information given will not be passed onto any other agencies without prior consent. We also agree that our details are to be published in the League Online Handbook, Website and League APP. It is the responsibility of the Club Officer/Referee providing this data to us that they ensure all Club Officials/Referees are informed of the information being provided to the League and the process they need to follow if they do not wish their data to be published. Any Club official/Referee not wishing to have his details displayed must notify the League Secretary in writing and attach it to this form.
What is the legal basis for processing your personal data?
Under Article 6 (1b) of the GDPR, the legal basis that UCL employs for processing your personal data is that processing of your personal data is necessary for the administration of your contract of membership to the League to which you, the ‘data subject’ is party, or in order to take steps at your request prior to entering into membership.

Sharing your personal data
Your personal data will be treated as being strictly confidential and will never be shared without your consent.
All the personal data that we hold about you will be processed by our volunteers in the United Kingdom, and no third parties will have access to your personal data without your consent, or unless there is a legal obligation for us to provide them with this information. Please be aware however that your personal data may be stored on a cloud-based system whose servers are located within the European Union.

How long do we keep your personal data for?
We will keep your personal data securely for a maximum of 3 years, after which time it will be destroyed securely if it is no longer needed for the lawful purposes for which it was obtained. If you consent to receiving marketing from us, any information we use for this purpose will be held by us until such time as you notify us that you no longer wish to receive marketing information from us.

Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

- to request a copy of your personal data which UCL holds about you;
- to request that UCL corrects any of your personal data if it is found to be inaccurate or out of date;
- to request your personal data to be erased where it is no longer necessary for UCL to retain such data;
- to withdraw your consent to the processing of your personal data at any time;
- to request that UCL provides you with your personal data, and where possible, to transmit the data directly to another data controller (known as the right to data portability);
- where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- to object to the processing of your personal data with regards to Direct Marketing;
- to lodge a complaint with the Information Commissioner’s Office (ICO).

Further processing
If we wish to use your personal data for a new purpose, not defined by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to the commencement of the new processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

Contact Details
To exercise all relevant rights, or to raise queries or complaints, please in the first instance contact the Data Protection Officer, Wendy Newey: PDFLwendy@btconnect.com
You can contact the Information Commissioner’s Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or by post at The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF