Privacy Policy
The Forty Plus Cycling Club (the ‘club’) is committed to protecting and respecting your personal data.
Data Protection
The club does not have to register under the General Data Protection Regulation (GDPR), as we are an organisation that does not make a profit to enrich others. Nevertheless, we conform to the requirements of the Act
Lawful basis for processing data
The lawful basis for processing data is ‘legitimate interest’. All the personal data is provided by members. Processing of data is for maintaining membership such as subscriptions, disseminating club news/information, distribution of the club magazine Signpost, providing services such as club badges/clothing and insurance when requested via Cycling UK. The club does not participate in any marketing activities involving member’s data. Data processing is limited to that necessary for the day to day management of the club.
MEMBERSHIP RECORDS
The Forty Plus Cycling Club (the ‘club’) is the data controller and Membermojo is the data processor.
Personal Data held
Processed personal data includes:
- Identity Data including Membership Type (single/joint), First Name, Last Name, Date of Birth, Contact No’s, Club Section(s) associated with (and in some cases level of interest).
- Contact Data including; home address, email address and telephone numbers, preferred Signpost delivery method
- Processed Data includes: Section you ride with. Membership type. Start of membership date, calculated date when honorary status due, date of last renewal, next subscription due date, last donation paid.
- Financial Data such as credit/debit card details are not held by the club or Membermojo. Payment will be using Paypal, STRIPE or cheque.
We may disclose your information to any Officers of the club, Section Secretaries, club ride group organisers, and club event organisers and to our suppliers for the purpose of club administration and activities. We may disclose your information to the extent that we are required to by law, legal proceedings or for the purpose of fraud prevention. We do not participate in sharing membership data involving marketing activities.
Security of Membership Data
Club Membership Data is held within the Membermojo system. This data is encrypted for transmission over the internet. See Membermojo for their Privacy Policy.
Retention of Membership Data
(unless a member requests the right to erasure):
Club membership last known details of current and past members will be kept indefinitely.
Records for membership subscriptions will be retained for 10 years within the Membermojo system.
Exercise of Member Rights in respect of Membership Data
Right of access and rectification:
Members with internet access and an email address can access their Membership Data through the secure Membermojo link. This link also enables them to update their personal details if they wish to change or correct any errors. Members changing their contact phone number or email address should also notify their Section Secretary to ensure that they continue to receive notice of club activities.
Members without internet access or an email address or their email address has changed, will have to contact the membership secretary direct, establish their identity and advise any changes or corrections to their details. Personal details and any revisions will be posted to their address. See contact details at the end of this document.
Right to data portability: This can be arranged, if required in a csv format.
Right for erasure of data also known as right to be forgotten: If requested, this will immediately stop reminders for membership renewal, notification of club activities, receipt of club news and receipt of the club magazine Signpost.
PERSONAL DATA OUTSIDE MEMBERMOJO
With the exception of posts made by individual members, the club is the data controller and the service provider is the data processor.
Contact Data, Communications and General Administrative Records Basic member contact data (name, email, and phone) and communications are held on a variety of club and personal systems (email, phone, and social media) so that members can be contacted about club activities. The club holds administrative records for the activities that it organises, e.g., attendance and participation in club activities.