GDPR Update
Posted by Alan Mawdsley on 26 August 2018
The General Data Protection Regulation is a regulation in EU law on data protection and privacy for all individuals in the EU and therefore in the UK that was implemented on 25th May 2018. It aims primarily to give control to citizens and residents over their personal data. Included in the requirements are that organisations who hold personal data (including The Stragglers):-
- Must have a legitimate purpose for holding and processing personal data
- Must make clear to our members what data we hold, how long we hold it, and why
- Must take adequate care to protect any data that we hold
We updated The Stragglers Data Privacy Policy to comply with the requirements of GDPR. You can access this via a link at the bottom of the pages on our website or via the menu Our Club/Data Privacy Policy.
We also created a Data Privacy Statement which explains how we comply with the requirements of GDPR and what are your rights as a data subject. All new members have to accept this when they join the club and register on the website. To ensure that the personal data we hold is correct, all members have to re-register before the start of each new membership year and you will have to accept the Data Privacy Statement (again) then.
ClubBuzz have also made some changes to allow clubs using it to comply with GDPR. Most of these don't affect how you use the website but you may have noticed that ClubBuzz now requires stronger passwords. This isn't to everybody's liking but, as some of the roles in the system have access to personal data, the stronger passwords provide more protection to personal data held in the system.
If you have any questions or comments on GDPR in The Stragglers, please raise them with The Stragglers data controller.