Summary of how we use your data
- The DWF Participation Programme is provided to you by your County FA. Both your County FA and The Football Association (The FA) handle your personal data in order to provide the DWF Participation Programme. Your County FA will use your personal data in order to provide the Programme and to ensure you or your child can safely participate in that programme, whilst The FA makes use of your data to assess the information you provide to help monitor the inclusiveness and effectiveness of the programmes it funds and participation levels of certain groups within football (particularly disability groups).
- Data will typically be collected directly by you, or your parent. As well as sharing information between the County FA running the Programme and The FA, information may also be shared with local partners who help provide the programme and relevant media partners, if this is necessary to fulfil our purpose of promoting and celebrating grassroots football initiatives and disability football.
- Where we rely on your consent, such as for direct marketing purposes, or to place cookies, you can withdraw this consent at any time.
- Our privacy policy sets out more details of your data protection rights, including your right to object to certain processing.
What does this policy cover?
This policy describes how County FAs and The FA, (also referred to as "we" or "us") will make use of your data during and as a result of your (or your child's) participation in the DWF Participation Programme.
It also describes your data protection rights, including a right to object to some of the processing which County FAs and The FA carry out. More information about your rights, and how to exercise them, is set out in the “What rights do I have?” section.
What information do we collect?
We collect and process personal data about you when you or your child decides to register to participate in the DWF Participation Programme. This will typically be provided directly by you on registration, as well as any other information collected during and as a result of attending sessions. This will often involve you providing sensitive data, where you/your child has a disability or medical condition. The details being provided by you will be made clear in forms you complete.
What information do we generate or receive from third parties?
We may generate or collect information about you ourselves. In particular, County FAs and their partners may hold records about your participation in their sessions, such as completing health and safety records or by keeping attendance registers – these are not typically passed to The FA, although we may ask to see attendance records to evidence participation.
Sometimes, we receive information about you from third parties. This is particularly true where you a child, and a parent has registered on your behalf. How do we use this information, and what is the legal basis for this use?
Your County FA will use this information for the following purposes
- As required by your County FA to administer the DWF Participation Programme and pursue the County FA's legitimate interests, in particular:
- it will use your information to provide access to the DWF Participation Programme and administer recreational football sessions;
- it will monitor participation in the DWF Participation Programme including monitoring diversity information. This includes processing of sensitive personal data for the purposes of monitoring equality of opportunity and treatment on County FA and FA participation programmes;
- we use the information you have provided and which we have collected about you to investigate any complaints received from you or from others about our programmes or services;
- we will use your data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation); and
- we use the data of some individuals to invite them to take part in market research.
- Where you give us consent:
- we will hold information relating to your/your child's medical condition to ensure that they are safe and appropriately treated during the DWF Participation Programme sessions;
- we will take photos and footage of our sessions, and use this to promote and celebrate grassroots football initiatives and disability football; and
- on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
- For purposes which are required by law:
- where we are required to hold or collect personal data to meet legal requirements on us, such as keeping health and safety records or ensuring equality of access;
- in response to requests by government or law enforcement authorities conducting an investigation.
The FA will use this information for the following purposes:
- As required to administer the national DWF Participation Programme and pursue The FA's legitimate interests, in particular:
- it will monitor participation in the DWF Participation Programme including monitoring diversity information. This includes processing of sensitive personal data for the purposes of monitoring equality of opportunity and treatment on FA participation programmes;
- we will use your data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation); and
- we use the data of some individuals to invite them to take part in market research.
- Where you give us consent:
- we will receive photos and footage of Programme sessions, and use this to promote and celebrate grassroots football initiatives and disability football; and
- on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
- For purposes which are required by law:
- where we are required to hold or collect personal data to meet legal requirements on us;
- in response to requests by government or law enforcement authorities conducting an investigation.
Withdrawing consent
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above.
Who will we share this data with, where and when?
We will share your/your child's data with relevant third parties for the purposes set out above, in particular your County FA and The FA will share information with each other so that they can monitor participation in the DWF Participation Programme and in disability grassroots football. Your County FA may also provide access to your data for local partners involved in the DWF Participation Programme.
We may share footage or videos obtained with relevant media partners, if this is necessary to fulfil our purpose of promoting and celebrating grassroots football initiatives and disability football.
Personal data may be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws.
Personal data will also be shared with third party service providers, who will process it on behalf of The FA for the purposes identified above. Such third parties include providers of website and database hosting, security services, maintenance, call centre operations and identity checking.
What rights do I have?
You have the right to ask The FA or your County FA for a copy of your/your child's personal data; to correct, delete or restrict (stop any active) processing of your/your child's personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format.
In addition, you can object to the processing of your/your child's personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where it would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in both the GDPR and in the Data Protection Act 2018. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, you can get in touch with your County FA or The FA– or our data protection officer – using the details set out below. If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred. This is likely to be the Information Commissioner’s Office in the UK.
Data that is mandatory is indicated on relevant forms that you complete. Where provision of data is mandatory, if relevant data is not provided, then we will not be able to fulfil your requests to register as part of the DWF Participation Programme. All other provision of your information is optional.
How do I get in touch with you, or your data protection officer?
If you wish to make a data privacy request, you can do so via our online form, which can be found here. We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, you can get in touch at dataprotection@thefa.com or by writing to: Data Protection Officer, Wembley Stadium, PO Box 1966, London, SW1P 9EQ. You can also get in touch directly with your County FA through the contact details found at the following website: //www.thefa.com/about-football-association/who-we-are/county-fas.
Which County FA is my data controller?
The data controller for your/your child's information is the County FA operating [Programme Name].
How long will you retain my data?
Subject to the below, the DWF Participation Programme will retain all information obtained through registration for the length of a season plus an additional 9 months after the season has finished within our central database. If you do not attend a training session within the 9 month period after the end of a season, we will not retain your player record. If you attend a training session within 9 months after the season has ended, your personal data, and any additional personal data you provide at each registration, will be retained for a further length of the season plus an additional 9 months.
County FAs may retain additional records in accordance with law, for example health and safety records, and may also retain details of your participation to protect their legal interests and a record of your/your child's involvement.
The FA and your County FA may also retain information in order to meet safeguarding requirements; where held by The FA, your data will be retained in accordance with The FA’s Safeguarding Privacy Policy.
Where you consent to us holding images of you/your child, we may retain these indefinitely (unless you withdraw your consent) for the purposes set out in this policy.