跳转到主要内容
 

Special Category Data Policy for Athletes 和 Professional Sports People

1. vip威尼斯登录入口这个政策

1.1 这是“适当的政策文件”("美国”) is issued on behalf of the 数据执行 group of companies (including Stats LLC, 位于北拉萨尔街203号, 2200套房, 芝加哥, IL 60601, 和执行内容服务有限公司, 公司编号11584111,注册办事处在三楼, 11条, 伦敦, WC2N 5HR,数据保护注册号ZA497913, together with their respective subsidiaries) (together “数据执行”, “us”, “vip威尼斯登录入口”或“vip威尼斯登录入口”). We are the data controller of any personal information we collect about you 和 we are responsible for: www.cherryck.com; www.soccerway.com; www.scoresway.com; automatedinsights.com; www.optasports.comwww.thuuz.com as well as any other websites owned 和 operated by 数据执行 from time to time (together the “网站”). This 美国 sets out how we will protect 个人资料的特殊类别.

1.2 This 美国 meets the requirement of the Data Protection Act 2018 that an appropriate policy document be in place w在这里 Processing 个人资料的特殊类别 和 in certain circumstances.

2. 定义

Controller: the person or organisation that determines when, why 和 how to Process 个人资料.

Data Retention Policy: explains how 数据执行 classifies 和 manages the retention 和 disposal of its information.

Data Subject: a living, identified or identifiable individual about whom we hold 个人资料. Data Subjects may be nationals or residents of any country 和 may have legal rights regarding their 个人资料.

资料私隐影响评估(DPIA): tools 和 assessments used to identify 和 reduce risks of a data processing activity. A DPIA can be carried out as part of Privacy by Design 和 should be conducted for all major system or business change programmes involving the Processing of 个人资料.

DPA 2018:《vip威尼斯登录入口》.

资料保障主任(DPO): the person required to be appointed in specific circumstances under the GDPR. 在本次美国的日期vip威尼斯登录入口DPO是莉莉安·庞.

GDPR:《首頁》((EU) 2016/679).

个人资料: any information identifying a Data Subject or information relating to a Data Subject that we can identify (directly or indirectly) from that data alone or in combination with other identifiers we possess or can reasonably possess. 个人资料包括特殊类别的个人资料.

运动员及专业运动员隐私须知: a separate notice setting out information that may be provided to Data Subjects which can be found 在这里.

处理或过程:任何涉及使用个人资料的活动. 它包括获得, 记录或保存数据, or carrying out any operation or set of operations on the data including organising, 修改, 检索, 使用, 披露, 擦除或销毁它. Processing also includes transmitting or transferring 个人资料 to third parties.

个人资料的特殊类别:揭示种族或民族起源的信息, 政治观点, 宗教或类似信仰, 工会会员, 身体或心理健康状况, 性生活, 性取向, 生物特征或遗传数据.

3. 为什么vip威尼斯登录入口要处理特殊类别的个人资料

3.1 We process 个人资料的特殊类别 for the following purposes for the verification athlete 和 professional sportsperson’s fitness for participation in sport.

4. 保障个人资料原则

4.1 The GDPR requires 个人资料 to be processed in accordance with the six principles set out in Article 5(1). Article 5(2) requires controllers to be able to demonstrate compliance with Article 5(1).

4.2 We comply with the principles relating to Processing of 个人资料 set out in the GDPR which require 个人资料 to be:

  • Processed lawfully, fairly 和 in a 透明的 manner (合法性, Fairness 和 Transparency);
  • collected only for specified, explicit 和 legitimate purposes (Purpose Limitation);
  • 足够的, relevant 和 limited to what is necessary in relation to the purposes for which it is Processed (Data Minimisation);
  • 准确并在必要时保持最新(准确性);
  • not kept in a form which permits identification of Data Subjects for longer than is necessary for the purposes for which the data is Processed (Storage Limitation); 和
  • Processed in a manner that ensures its security 使用 appropriate technical 和 organisational measures to protect against unauthorised or unlawful Processing 和 against accidental loss, 破坏或损坏)安全, 完整性和机密性).

4.3 We are responsible for 和 must be able to demonstrate compliance with the data protection principles listed above (Accountability).

5. 遵守数据保护原则

5.1 合法性, fairness 和 transparency个人资料 must be processed lawfully, fairly 和 in a 透明的 manner in relation to the Data Subject.We will only Process 个人资料 fairly 和 lawfully 和 for specified purposes. The GDPR restricts our actions regarding 个人资料 to specified lawful purposes. We can Process 个人资料的特殊类别 only if we have a legal ground for Processing 和 one of the specific Processing conditions relating to 个人资料的特殊类别 applies. We will identify 和 document the legal ground 和 specific Processing condition relied on for each Processing activity.When collecting 个人资料的特殊类别 from Data Subjects, either directly from Data Subjects or indirectly (for example from a third party or publicly available source), we will provide Data Subjects with a 运动员及专业运动员隐私须知 setting out all the information required by the GDPR in a privacy notice which is concise, 透明的, 可理解的, easily accessible 和 in clear plain language which can be easily understood.

合法处理基础 特殊类别个人资料的处理条件
Data concerning athlete 和 professional sportspeople’s fitness for participation in sport

This information has been manifestly made public from publicly available information sources.

Meets the requirement of having been made public by the Data Subject or a third party.

(DPA 2018,附表1第32段)

 

5.2目的限制
个人资料 must be collected only for specified, explicit 和 legitimate purposes. They must not be further Processed in any manner incompatible with those purposes.We will only collect 个人资料 for specified purposes 和 will inform Data Subjects what those purposes are in a published 运动员及专业运动员隐私须知. If we use 个人资料 for a new compatible purpose then we will inform the Data Subject via the published 运动员及专业运动员隐私须知.

5.3数据最小化
个人资料应足够, relevant 和 limited to what is necessary in relation to the purposes for which it is processed.We will only collect or disclose the minimum 个人资料 required for the purpose for which the data is collected or disclosed. We will ensure that we do not collect excessive data 和 that the 个人资料 collected is 足够的 和 relevant for the intended purposes.

5.4准确性
个人资料 must be accurate 和, w在这里 necessary, kept up to date. 如不准确,必须立即更正或删除.We will ensure that the 个人资料 we hold 和 use is accurate, 完整的, kept up to date 和 relevant to the purpose for which it is collected by us. We check the accuracy of any 个人资料 at the point of collection 和 at regular intervals afterwards. We take all reasonable steps to destroy or amend inaccurate or out-of-date 个人资料.

5.5存储限制
We only keep 个人资料 in an identifiable form for as long as is necessary for the purposes for which it was collected, 或者vip威尼斯登录入口有法律义务这么做. Once we no longer need 个人资料 it shall be deleted or rendered permanently anonymous.We maintain a Data Retention Policy 和 related procedures to ensure 个人资料 is deleted after a reasonable time has elapsed for the purposes for which it was being held, 除非vip威尼斯登录入口被法律要求更长时间地保留这些数据.We will ensure Data Subjects are informed of the period for which data is stored 和 how that period is determined in any applicable 运动员及专业运动员隐私须知.

5.6 .安全、诚信、保密
个人资料 shall be Processed in a manner that ensures appropriate security of the 个人资料, including protection against unauthorised or unlawful Processing 和 against accidental loss, 破坏或损坏, 使用适当的技术或组织措施.We will implement 和 maintain reasonable 和 appropriate security measures against unlawful or unauthorised Processing of 个人资料 和 against the accidental loss of or damage to 个人资料.

5.7问责原则
We are responsible for, 和 able to demonstrate compliance with these principles. Our DPO is responsible for ensuring that we are compliant with these principles. vip威尼斯登录入口此政策的任何问题都应提交给DPO.vip威尼斯登录入口将:

  1.  ensure that records are kept of all 个人资料 Processing activities, 和 that these are provided to the Information Commissioner on request;
  2. carry out a DPIA for any high-risk 个人资料 Processing to underst和 how Processing may affect Data Subjects 和 consult the Information Commissioner if appropriate;
  3. ensure that a DPO is appointed to provide independent advice 和 monitoring of 个人资料 h和ling, 和 that the DPO has access to report to the highest management level; 和
  4. have internal processes to ensure that 个人资料 is only collected, used or h和led in a way that is compliant with data protection law.

6. Controller’s policies on retention 和 erasure of personal data

We take the security of 个人资料的特殊类别 very seriously. vip威尼斯登录入口有行政, physical 和 technical safeguards in place to protect 个人资料 against unlawful or unauthorised Processing, 或意外损失或损坏. We will ensure, w在这里 个人资料的特殊类别 are Processed that:

  1. 处理过程被记录, 记录就出来了, 在可能的情况下, a suitable time period for the safe 和 permanent erasure of the different categories of data in accordance with our Data Retention Policy;
  2. w在这里 we no longer require 个人资料的特殊类别 for the purpose for which it was collected, we will delete it or render it permanently anonymous as soon as possible; 和
  3. w在这里 records are destroyed we will ensure that they are safely 和 permanently disposed of.

7. 审查

7.1 This policy on Processing 个人资料的特殊类别 is reviewed on a frequent basis.

7.2 The policy will be retained w在这里 we process 个人资料的特殊类别 和 for a period of at least six months after we stop carrying out such processing.

7.3 A copy of this policy will be provided to the Information Commissioner on request 和 free of charge.

日期:2021年1月25日
审查日期:2021年1月25日
下次审查:2021年6月1日
进一步的信息:

For further information about our compliance with data protection law, 请首頁的DPO庞丽莲 莉莲.pang@taceo.co.uk.