DGChess is committed to respecting your privacy. This notice is to explain how we may use personal information we collect about you. This notice explains how we comply with the law on data protection, what your rights are and for the purposes of data protection we will be the controller of any of your personal information.
The Legal Basis for Processing Personal Data
The main reason we process personal data is to enable us to properly administer and perform any contract for the provision of any services (coaching, training days and tournaments) you have purchased from us.
We also have a legitimate interest to promote chess in Sussex in a way that is inclusive, fair and accessible.
We may also process personal data, largely images, with consent.
The personal data that we collect, hold and share include:
• Personal information (such as name, gender, date of birth, school, carers’ contact details)
• Attendance information
• Performance and progress information
• Special needs and relevant medical information
• Photographs taken during our events
How we use information
We use this personal data to:
• Provide a safe environment at our events
• Analyse trends in attendance and monitor financial viability of our events (data is always anonymised)
• Promotion and marketing in newspapers, our website, and on social media
• Contact you about events we believe you may be interested in. You can opt out of these at any time.
Who we share data with
We may pass data to:
• The Government where we are required to do so by law or to assist with their investigations or initiatives
• Police, law enforcement and security services: to assist with the investigation and prevention of crime and the protection of national security
The personal information we collect is not transferred to and stored in countries outside of the UK and the European Union.
We never sell or share your contact information with third parties for direct marketing.
Personal data will not be retained for longer than necessary in relation to the purposes for which it was collected.
Generally, where there is no legal requirement we retain all physical and electronic records for a period of 1 year after your last contact with us or until attainment of the age of 18, whichever is the soonest.
Information that may be relevant to personal injury or discrimination claims may be retained until the limitation period for those types of claims has expired
As a data subject you may have the right at any time to request access to, rectification or erasure of your personal data; to restrict or object to certain kinds of processing of your personal data, including direct marketing; to the portability of your personal data and to complain to the UK’s data protection supervisory authority, the Information Commissioner’s Office about the processing of your personal data.
As a data subject you are not obliged to share your personal data with us. However, if you choose not to share your personal data with us your child will not be able to participate safely in our activities.
Where we process personal date solely on the basis that you have consented to the processing, you will have the right to withdraw that consent.
To exercise any of these rights please contact David Graham – firstname.lastname@example.org
If you are unhappy with the way your request has been handled, you may apply directly to the Information Commissioner for a decision. Generally, the ICO cannot make a decision unless you have exhausted our internal review procedure. The Information Commissioner can be contacted at:
The Information Commissioner’s Office,