Complying with the new EU General Data Protection Regulation (GDPR)
GDPR comes into effect on 25th May 2018 and changes UK data privacy law to give you more control over how your data is used, how you’re contacted, as well as better protection for your personal data.
We have created a Privacy Notice to reflect these changes (effective from 25 May 2018). We won’t be changing the way we use your personal information, but the new notice now provides you with additional details such as:
- Your increased rights in relation to the information we hold about you
- How we keep your personal information secure
- The types of personal information we collect about you and how we use it
- The legal grounds for how we use your information
Awareness
Mike Whittle, our Chairman, has ensured that all Officers and managers of Winsor United have been made aware of new data protection changes.
The information we hold:
- Information about your child including their full name, postal address, date of birth, nationality, and any relevant medical/mobility requirement information.
- We will take photos and add them to our website.
- Information about yourselves as parents including your full name, postal address, contact information including email address and mobile phone numbers.
- Information about our managers and coaches including their full name, postal address, contact information including email address and mobile phone numbers, their coaching qualifications, emergency aid qualifications, Safeguarding training records and CRC checks.
- Information that you provide when you visit our website or make an enquiry on our website.
- If you email or contact us, we may keep a record of the correspondence or keep your message, email address, mobile phone number or any other contact information to respond to your request.
- We have a YouTube account where viewers may comment. We sometimes reply, but hold no data about them.
- We have access to databases of followers on Twitter and Facebook . We are not the data processor of these databases – we use strong password authentication on these sites.
Disclosure of your information
We disclose personal information with youth football leagues during registration, the FA when entering personal data onto their national registration databases, when hiring local community facilities such as schools, colleges, etc and with other youth football clubs when entering their tournaments. In this regard, we are a data processor rather than a data controller.
Communicating Privacy Information
Winsor United has taken the following steps:
- We have added this document to our website with a link to our contact page.
- Before the end of May 2018, we will contact all of our registered players through their parents alerting them to any changes, and remind them that they can at any time leave the club and have their data deleted.
- We will post this link on all Winsor United social media accounts.
Individuals’ Rights
On request, Winsor United will delete an individual’s data.
If a player or parent would like to see their data, Winsor United will gladly provide a screenshot of the gathered information.
If a player leaves the club, their data will be deleted on a monthly basis.
Consent
Once a player has either expressed an interest in joining the club and has provided us with their personal information or has formally registered with a Winsor United team, we regard this as consent until a player asks to leave and to have their data to be removed.
We recognise that consent is not indefinite and will remind players and parents, that they can leave the club and have their data deleted at any time.
Data Breaches
Winsor United does everything within our power by using secure password protection and reliable, secure services and programmes provided by the FA. Should a breach of one of those programmes or services occur, we will take immediate action to follow their recommendations.

