GDPR Compliance Statement

At Braywood Cricket Club, we are committed to protecting the privacy and data rights of our members and website visitors in compliance with the General Data Protection Regulation (GDPR). This statement outlines our approach to GDPR compliance and how we handle personal data.

Data Collection and Processing

We collect and process personal data from our members and website visitors only for specified and legitimate purposes, as outlined in our Privacy Policy. This may include contact information, membership details, and other relevant data necessary for club administration and communication.

Lawful Basis for Processing

We process personal data based on one or more lawful bases as defined by the GDPR, including consent, contractual necessity, legal obligation, and legitimate interests. We ensure that personal data is processed lawfully, fairly, and transparently, and only for specified purposes.

Data Security Measures

We implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data, including encryption, access controls, and regular security assessments. We strive to protect personal data against unauthorized or unlawful processing and accidental loss, destruction, or damage.

Data Subject Rights

We respect the rights of data subjects under the GDPR, including the right to access, rectify, restrict processing, and erase personal data. Data subjects may also withdraw consent or object to processing where applicable. We provide mechanisms for data subjects to exercise their rights and respond promptly to requests.

Data Transfers

We may transfer personal data to trusted third parties or service providers in compliance with GDPR requirements. We ensure that adequate safeguards are in place to protect personal data during transfer, including the use of standard contractual clauses or other approved mechanisms.

Data Breach Notification

In the event of a personal data breach, we have procedures in place to assess the risk to individuals and notify the relevant supervisory authority and affected data subjects as required by the GDPR.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for overseeing GDPR compliance and data protection practices within our organization. The DPO serves as a point of contact for data subjects and supervisory authorities.

Contact Us

If you have any questions or concerns about our GDPR compliance or the handling of your personal data, please contact our Data Protection Officer at dpo@email.com.

Updates to this Statement

We may update this GDPR Compliance Statement as necessary to reflect changes in our data processing activities, legal requirements, or best practices. We encourage you to review this statement periodically for any updates.

Last Updated: 24th March 2024