Rules for the processing of personal data at BESKIDZKI KLUB TENISOWY "ADVANTAGE" BIELSKO-BIAŁA
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the GDPR), and in accordance with national personal data protection regulations, Beskidzki Klub Tenisowy “Advantage” Bielsko-Biała (hereinafter: the Club) informs persons having a legal or factual relationship with the Club that they have the rights set out below in connection with the Club’s processing of their personal data.
In accordance with Article 6 of the GDPR, the Club processes personal data where at least one of the following conditions is met:
the data subject has given consent to the processing of their personal data for one or more specific purposes;
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
processing is necessary for compliance with a legal obligation to which the controller is subject;
processing is necessary in order to protect the vital interests of the data subject or another natural person;
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Data controller
The controller of personal data is Beskidzki Klub Tenisowy “Advantage” Bielsko-Biała, 20 Ceramiczna Street, 43-346 Bielsko-Biała, Poland.
Data Protection Officer
The Club has not appointed a Data Protection Officer. For matters related to the processing of personal data, contact may be made by e-mail at bkt.advantage@op.pl. Relevant correspondence may also be sent by post to the Data Controller’s address, marked “GDPR-BKT Advantage B-B”.
Purposes of data processing by the Club
The Club processes personal data for the following purposes:
taking steps, at the request of the data subject, with a view to establishing a membership relationship with the Club or entering into a contract with the Club (legal basis: Article 6(1)(b) GDPR);
performance of a contract or membership relationship with the Club (legal basis: Article 6(1)(b) GDPR);
performance of a contract concluded with the Club by the data subject acting as an attorney under a power of attorney granted by a principal who is a party to the contract with the Club (legal basis: Article 6(1)(b) GDPR);
performance of a contract concluded with the Club by the data subject acting as a representative of an organisational unit without legal personality or a legal person that is a party to the contract with the Club (legal basis: Article 6(1)(b) GDPR);
fulfilling legal obligations incumbent on the Club in connection with its activities and the performance of concluded contracts or membership relationships (legal basis: Article 6(1)(c) GDPR);
marketing and promotion of products and services offered by the Club (legal basis: Article 6(1)(a) GDPR);
the Club’s internal administrative purposes, including statistics and internal reporting (legal basis: Article 6(1)(b) GDPR).
Source of personal data
The sources of the personal data of the natural persons referred to in points 3 and 4 above are natural persons, organisational units or legal persons that are parties to contracts concluded with the Club.
Disclosure of data to other recipients
In connection with the processing described in the section “PURPOSES OF DATA PROCESSING BY THE CLUB”, personal data may be disclosed to other recipients. Recipients may include in particular:
(i) entities with which the Club has concluded an appropriate data processing agreement in connection with its activities, such as tennis associations and organisations, tennis clubs, tennis officials, tennis tournament organisers, providers of accounting, IT and operational support services, providers of external archiving or data destruction services, and audit and consulting firms,
(ii) entities and authorities to which the Club is required to disclose data under generally applicable law.
Period of personal data processing by the Club
Personal data is processed for the period necessary to achieve the purposes specified in the section “PURPOSES OF DATA PROCESSING BY THE CLUB”, namely:
for performance of a contract or membership relationship entered into by the data subject, until its completion and thereafter for the period and to the extent required by law or necessary to secure potential claims;
for fulfilling legal obligations incumbent on the Club in connection with its activities and the performance of concluded contracts and membership relationships, until those obligations have been fulfilled by the Club;
for marketing and promotion of products and services offered by the Club, until the data subject withdraws consent to such processing;
for internal administrative purposes, until the Club’s legitimate interests forming the basis for such processing have been fulfilled or until the data subject objects to such processing.
Your rights
In connection with the Club’s processing of personal data, data subjects have the following rights:
a) the right of access to their data under Article 15 GDPR;
b) the right to rectification of their data under Article 16 GDPR;
c) the right to erasure under Article 17 GDPR;
d) the right to restriction of processing under Article 18 GDPR;
e) the right to object to processing under Article 21 GDPR;
f) the right to data portability under Article 20 GDPR.
Where processing is based on Article 6(1)(a) GDPR, i.e. consent to the processing of personal data, the data subject has the right to withdraw that consent at any time.
If the data subject considers that the Club’s processing of personal data infringes the GDPR, they have the right to lodge a complaint with the supervisory authority, i.e. the General Inspector for Personal Data Protection, and from 25 May 2018 with its legal successor.
Refusal to provide personal data
Where data is processed for the purpose of entering into and performing a contract or membership relationship with the Club, provision of the data by the data subject is a condition for entering into that contract or establishing the membership relationship. Providing the data is voluntary; however, failure to provide it will make it impossible to enter into and perform the contract or membership relationship with the Club.
Automated decision-making and profiling
The Club does not process personal data by automated means, including profiling.