Founded in 2020, Street Soccer London is a Social Enterprise and Charity which uses the power of football to create positive change in the lives of socially disadvantaged adults and young people across London. We deliver a range of programmes and services across the Capital aimed at engaging players in a series of football themed personal development opportunities. We provide a pathway and support package for players, allowing for personal growth at the pace of the individual.

Street Soccer London is a company limited by guarantee registered in England (??????) with its registered office at ?????.

Street Soccer London is the data controller of personal data processes in connection with this Policy.

The personal information (general identification) we collect, and how we use it, will depend on how you interact with us and what programme you access, but it may include details about your name, date of birth and contact details (e.g. telephone, email, computer IP address and post code).

We use your personal information to provide you with the best possible service; to our players, volunteers, sessional workers, supporters, partners or employees. The personal information we hold includes:

We collect information about you direct whenever you interact with us. For example, when you:

• Visit our website
• Enquire about our activities
• Receive a service from Street Soccer London
• Register with us or subscribe to our on-line newsletters or other online
• content Donate to; or fundraise for Street Soccer London
• Engage with us via social media
• Make a complaint

We may also receive information about you when you interact with third parties that we work with. For example:

• Via independent event organisers or fundraising sites (for example JustGiving, Virgin Money Giving or Eventbrite). This will be highlighted at the time of interaction that you will have indicated that you wish to support Street Soccer London and you have given your consent for information to be shared.
• When you have given permission to other organisations to share your information.
• Via one of our agreed partnerships
• When we deliver services as part of a contract
• Information publicly available
• We use cookies to collect information about how our visitors use our website and to make it better/easier to use. You can choose not to accept cookies, but this could make our website difficult to navigate

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you;
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; and
• Where we need to comply with a legal or regulatory obligation.

Please note that we may process your personal information without your knowledge or consent, where this is required or permitted by law. Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data.

Occasionally we will undertake profiling activity to learn more about our current supporters and to identify prospective supporters. When we do this, we identify the interests of people and organisations and the potential for them to give a financial donation to Street Soccer London or to increase the level of their donation.

We do this because the information helps us to better understand our supporters and to engage with people who may be interested in helping us to further the aims and objectives of Street Soccer London. When we undertake this type of profiling we will use: information you have already given us; or that is publicly available.

Unless you are notified otherwise, we will not use profiling, or automated decision making in any form, to make important decisions that will affect you.

We ensure that there are appropriate technical, physical and organisational measures in place to protect your personal information both online and offline. This includes mobile device management technology (Mobile Iron), advanced threat protection (Microsoft ATP) for email and cloud monitoring and staff TouchID (Apple) enabled sign in credentials for key organisational software.

Street Soccer London’s Security measures include:

• Encryption of our services and data
• Review of information collection, storage and processing procedures
• Restricted and specified access to personal information to select Street Soccer London employees, sessional workers and contractors who need to know that information to process for us and who are subject to contractual confidentiality and processing obligations.
• Internal policies setting out our data security approach
• Training for all employees including coaches on GDPR and correct operating procedures

Information that we hold on you will be stored securely and only be kept as long as is necessary for the purposes for which it was obtained, and in compliance with any statutory obligations placed on Street Soccer London. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Some of our external third parties are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission (Please click here for further information);
• Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe (Please click here for further information); and/or
• Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US (Please click here for further information).

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the  right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

As an organisation we will endeavour to ensure there is transparency over how we use your personal data.

We will keep our Privacy Policy under regular review to ensure that it accurately reflects how we process your information. Any changes will be incorporated into this document and if the changes are significant we will notify you.

Please take a look at the last updated date at the top of this privacy Policy to see when the last revision date was made.

If you would like further information or if you would like to discuss the privacy notice in detail, please contact us on the details below. If you have any concerns about our use of your personal information, you can make a complaint at:

Post

Cameron Black
Data Protection Manager
Street Soccer
Ocean Terminal Shopping Centre
98 Ocean Drive
Edinburgh
EH6 6JJ

Telephone

Head Office: 0131 554 9157

Email

data.protection@streetsoccerscotland.org

You can find more information on how to get access to your information and the documents we need you to submit on our website. If you feel that Street Soccer Scotland have not met your expectations and breached any of your GDPR rights, you can contact our Data Protection Manager who will investigate the matter. We aim to address any concerns you may have.

You are also entitled to make complaints to the Information Commissioner’s Office (ICO). For more information, visit https://ico.org.uk/concerns/