Your privacy is important to us so we developed this privacy notice to explain how we manage and look after your information when you engage with us through email, raft race events or via our online social media presence.
We will always comply with applicable UK Data Protection legislation including the EU General Data Protection Regulation (GDPR) when dealing with your personal data. For the purposes of the GDPR, we will be the “controller” of all personal data we hold about you.
- Who we are
We are British Rafting, the Rafting Discipline Committee of British Canoeing, that provides services to raft racers and raft race events across the UK.
We are regionally diverse and have no set office location. However, you can contact us through either of the following methods:
By writing to us at: British Rafting, Lee Valley White Water Centre, Station Road, Waltham Cross EN9 1AB
By emailing us at: email@example.com
- What information we collect and why
|Type of Information||Purposes||Legal Basis of Processing|
|Name and email address of members||Managing the membership for the members.||Performance of British Rafting’s membership contract with the member.
Our legitimate interests in operating British Rafting.
|Name and email address||Communications about events and rafting related items||Consent from the individual|
|Name, Date of Birth, Gender, Email address, British Canoeing membership details, nationality||Managing British Rafting Selection events||Performance of British Rafting’s legitimate interests in acting as the selection body for GB teams to compete in international raft races|
|Name, Date of Birth, Gender, Email address, nationality||Managing British Rafting Raft Race events||Performance of British Rafting’s legitimate interests in acting as the organising body for raft races in the UK|
|Emergency Contact Details||Contacting next of kin in event of emergency||Our legitimate interests in meeting our duty of care to members|
|Name, email address, phone number, address and bank account details||In order to be able to pay invoices, or reimburse expenses||Our legitimate interests in operating British Rafting|
As all raft racing is conducted in teams, where a single member of any team opts-out of personal information collection (photos/videos), then the whole team will be automatically opted out
- How we protect your personal data
We will not transfer your personal data outside the European Union (EU) without your consent.
We have implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse, or unauthorised alteration or destruction.
Please note, however, that where you are transmitting information to us over the internet, then given the internet is not a secure medium, we cannot definitely guarantee the security of this information.
For any payments which we take from you online we will use a recognised online secure payment system.
We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.
- Who we share your information with
We will never sell your personal information. We will not share your personal information with any third parties without your prior consent except where required to do so by law or as set out in the table in paragraph 3 above or in the case of:
We may pass your personal data to third parties who are our service providers, agents and subcontractors for the purposes of completing tasks and providing services to you on our behalf (e.g. to print newsletters and send you mailings). However, we disclose only the personal information that is necessary for the third party to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own purposes.
- Automated decision making including profiling
We do not make any decisions or profiling by any automated means.
- How long do we keep your data?
We will hold your personal information on our systems for as long as you are a member of British Rafting and for as long afterwards as is necessary to comply with our legal obligations and legitimate business interests. We will review your personal information every year to establish whether we are still entitled to process it. If we decide that we are not entitled to do so, we will stop processing your personal information with the exception of retaining your personal information in an archived form in order to be able to comply with future legal obligations, including but not limited to compliance with or the establishment exercise or defence of legal claims.
We will destroy all financial information once we have used it and no longer need it.
In the case of photographs and videos of teams, if any individual exercises their right to erasure, we will remove all photographs and video of all team mates.
- Your rights
Data protection regulation gives you a number of rights regarding your personal information processed by us.
The right to be informed: our obligation is to provide you with details of how we process your information
The right of access: allows you to be aware of and verify the lawfulness of the processing
The right to rectification: allows you to request the data is rectified if it is inaccurate or incomplete
The right to erasure: allows you to request the deletion or removal of personal data where there is no compelling reason for its continued processing
The right to restrict processing: allows you to ‘block’ or suppress processing of personal data
The right to data portability: allows you to obtain and reuse your personal data for your own purposes across different services
The right to object: you must have an objection on grounds relating to your particular situation
You can contact us directly by post or email to exercise your rights.
- Complaints, requests, queries
If you want to make a complaint, request or query, about the way we have processed your personal information, you can contact us directly at firstname.lastname@example.org
Alternatively you have the right to lodge a complaint with the regulator which oversees data protection law:
Information Commissioner’s Office
Tel: 0303 123 1113
- Changes to this privacy notice
We keep our privacy notices under regular review. Notifications of changes to this privacy notice will be via our website. This privacy notice was last updated in May 2018.