GDPR Privacy Notice
Privacy Notice
Welcome to The Scottish Professional Football League Trust’s (SPFL Trust) privacy notice. This privacy notice provides information on how SPFL Trust, a private limited company by guarantee without share capital (with Company Number SC369633 and Charity Number SC041121), collects and processes your personal data when you participate in Football Fans in Training (FFIT).
SPFL Trust is the data controller and responsible for your personal data. We have appointed a data protection officer (DPO). If you have any questions about this privacy notice or our data protection practices, please contact the DPO.
DPO Contact Details
Thorntons Law LLP (contact: Loretta Maxfield), email address: lsplftrustdpo@thorntons-law.co.uk, postal address: Whitehall House, 33 Yeaman Shore, Dundee, DD1 4BJ, telephone number: 01382 346814.
The Data We Collect About You
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may process the following personal data about you when you fill in forms, correspond with us, and during your participation in FFIT:
- Identity Data – includes first name, maiden name, last name, marital status, title, date of birth and gender.
- Contact Data – includes residential address, email address and telephone numbers.
- Health Data – includes details of past and present medical conditions, physical activity logs, weight, height, blood pressure, mental wellbeing, diet and body mass index.
We will use your personal data for the purpose of registering you as a participant on FFIT, managing your involvement with FFIT and obtaining feedback at the end of FFIT. We will collect your Identity Data, Contact Data and Other Data on the basis that this allows us to perform our contract with you to provide the FFIT programme. We will collect your Health Data on the basis that you give your explicit consent to do so. If you fail to provide any personal data when requested, or refuse or withdraw your consent, we may not be able to allow you to participate in FFIT. We do not transfer your personal data outside the European Economic Area.
We will retain your personal data for as long as the programme operates – it is important for us to keep a record of who has participated for funding requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. We may share your personal data with the University of Glasgow and the Scottish Government where necessary for FFIT, however before doing so we will remove information that directly identifies you such as your name, or date of birth etc.
Your Legal Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data: request access to your personal data; request correction of the personal data that we hold about you; request erasure of your personal data; object to processing of your personal data; request restriction of processing your personal data; request transfer of your personal data; and right to withdraw consent. If you wish to exercise any of your rights please contact lsplftrustdpo@thorntons-law.co.uk. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
You also have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues (www.ico.org.uk