Drumchapel Sports Centre
Close Menu
General Data Protection Regulation (GDPR)

General Data Protection Regulation Policy 

Nominated Data Protection Officer: Corinna Whitaker

Version: 2       Date: 29th April 2021

Drumchapel Sports Centre is fully committed to protecting the rights and privacy of individuals operating in accordance with the statutory legislation outlined within the General Data Protection Regulation (GDPR) and the forthcoming Data Protection Bill. In doing so we are committed to protecting the privacy and confidentiality of data provided to us. Any decisions for the disclosure, retention or disposal of information are made in line with relevant legislation.

Personal data will be collected, recorded and used fairly, stored safely and securely and not disclosed to any third party unlawfully.


As the lawful and correct treatment of personal data is critical to our successful operations and to maintaining confidence, Drumchapel Sports Centre is committed to operate in line with the data protection principles by:

  • Ensuring that personal data is accurate and, where necessary, kept up to date
  • Protecting staff, coaches, officials and other individuals’ personal details and any related records using this data fairly and only for specified lawful purposes
  • Handling personal data for limited, specifically stated purposes
  • Using personal data in an adequate and relevant manner, which is not excessive
  • Holding personal data only for the time period required
  • Maintaining personal data safely and securely
  • Releasing personal data only to authorised individuals/parties and not outside the UK without adequate protection and the individual’s permission
  • Adhering to regulations and related procedures to ensure that all employees who have access to and handle any personal data held by or on behalf of Drumchapel Sports Centre in line with individual’s data protection rights and are fully aware of and abide by their duties under GDPR and the Data Protection Bill.

Data Sharing 

Under GDPR and the Data Protection Bill personal data may be shared without a Data Subject’s consent where one of the processing conditions from the following list is met:

  • The sharing is necessary to comply with any non-contractual legal obligation of the Data Controller;
  • The sharing is necessary to protect the vital interests of the Data Subject;
  • The sharing is necessary for the administration of justice, to comply with a statute or for exercising functions of a public nature
  • The sharing is necessary for the legitimate interests of the Data Controller or a third party to whom the data is disclosed, except where it is unwarranted because it is prejudicial to the Data Subject

Coaching course candidates are made aware that data will be shared with 1st4sport Qualifications in order to register and certificate them and that data may be shared with relevant third parties (e.g. National governing Bodies) in line with the 1st4sport Qualifications Data Protection Position Statement.

Reporting Procedure 

Members are required to report any allegation in relation to the unlawful treatment of personal data via the Drumchapel Sports Centres’ complaints procedure.

Personnel (staff) are required to report any allegation in relation to the unlawful treatment of personal data via Drumchapel Sport Centres line management process.

A complaint should be made in the event that individuals feel that records of their personal data have been:

  • Lost or not protected.
  • Obtained through unlawful disclosure or unauthorised access.
  • Recorded inaccurately and/or in a misleading manner.
  • Provided to a third party without permission.
  • Held longer than required.
  • Used for unlawful purposes.

Where required, Drumchapel Sports Centre will take appropriate action/corrective measures against unauthorised/unlawful treatment, loss, destruction or damage to personal data.