K7X Ltd (“Pro-Soccer”) operates 5 and 7 a-side football pitches in Glasgow. We also provide coaching for children and function hire for social events.
Pro-Soccer processes the personal data of our employees, members and customers and those who play and coach at our venues. We will also process the personal data of children where they are receiving coaching or where a parent or guardian has made a booking on their behalf.
This policy sets out our commitment to ensuring that any personal data which we process is carried out in compliance with Data Protection Law (Data Protection Act 1998, the General Data Protection Regulation 2016/679 and all relative European Union and Member State data protection legislation in force and as amended or replaced from time to time). We are committed to ensuring that good data protection practice is embedded in the culture of our staff and our organisation. Pro-Soccer’s other policies and procedures are listed below:
This policy applies to all personal data processed by Pro-Soccer and is part of our approach to compliance with Data Protection Law. All Pro-Soccer staff are expected to comply with this policy.
Pro-Soccer confirms that it complies with the following data protection principles and undertakes to ensure that when it processes personal data:
taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’)
Pro-Soccer is committed to facilitating and complying with any request from a data subject who wishes to exercise their rights under Data Protection Law in a transparent manner and without undue delay.
We will not transfer any personal data to a country outside the EU or an international organisation without ensuring the level of protection provided by Data Protection Law is not undermined.
We will ensure that all staff who handle personal data are aware of their responsibilities under this policy and other relevant data protection and information security policies and that they are adequately trained, supervised and monitored.
Any employee who breaches this policy may be subject to disciplinary proceedings.
Pro-Soccer will ensure that it has procedures in place to allow data subjects to exercise the following data subject rights under the GDPR. For further information please see our Data Subject Rights Policy:
Subject access: the right to request information about how personal data is being processed including whether personal data is being processed and the right to be allowed access to that data and to be provided with a copy of that data along with the right to obtain the following information:
Rectification:the right to have us rectify inaccurate personal data concerning you without undue delay.
Erasure:the right to have data erased in certain circumstances, and to have confirmation of erasure, but only where:
Restriction of processing: the right toask for certain processing to be restricted in the following circumstances:
Data portability: you have the right to receive a copy of the personal data you have provided to us and certain information generated by us, if our processing is carried by automated means, which will allow you to transfer it to another data controller. This only applies if our legal basis for processing is consent or under a contract.
Object to processing:you have the right to object, on grounds relating to your particular situation, to the following:
You have an absolute right to object to any direct marketing that we are sending to you and there are no exemptions to this which would allow you to refuse to comply.
Object to automated decision making: if we are making decisions about you based on automated processing which have a legal or similar effect on you, then in some circumstances you have the right to object to this decision being made solely on the basis of automated processing. This includes any profiling of you that we carry out.
You cannot exercise this right in the following circumstances when the processing is:
This includes the following personal data:
Pro-Soccer processes special category data of employees as is necessary to comply with employment and social security law. We also process some special category data of those who play at our venues (medical information relevant to your fitness to play) where you have consented and provided us with this information. This policy sets out the safeguards we believe are appropriate to ensure that we comply with the Data Protection Principles set out above.
Pro-Soccer maintains a register of data breaches and all personal data breaches are recorded in this register which will be monitored. Action will be taken in relation to any issues identified in this register, particularly if any pattern of breaches is identified.
We will report personal data breaches which are likely to result in a risk to the rights and freedoms of the data subject to the Information Commissioner’s Office in compliance with our breach notification policy.
Pro-Soccer will also communicate any personal data breach which is highly likely to result in a risk to the rights and freedoms of the data subject to the data subject or subjects involved in compliance with our Breach Notification Policy.
If we embark on a new project which involves the processing of personal data, particularly one using new technologies, we will carry out a DPIA in line with our policy. The decision to carry out a DPIA will take into account the nature, scope, context and purposes of the processing and determine if there is likely to be high risk to the rights and freedoms of natural persons.
If you have any concerns or wish to exercise any of your rights under the GDPR then you can contact our data protection lead in the following ways:
K7X Ltd t/a Pro-Soccer
Rouken Glen Park
Rouken Glen Road
0141 621 4459
This policy was last updated on 25 May 2018 and shall be regularly monitored and reviewed regularly at least every two years.
More than a Game