UK GDPR
UK GDPR Compliance
Welcome to Cardiff City Table Tennis Club. This page explains how we comply with the UK General Data Protection Regulation (UK GDPR), which governs the protection of personal data in the United Kingdom. While we do not collect personal information through user registration or databases, we may process limited data automatically through website analytics and server logs.
Scope and Applicability
The UK GDPR applies to the processing of personal data of individuals in the UK. Although our website is informational and does not require users to provide personal details, we may collect limited data such as IP addresses, browser type, and usage patterns via analytics tools to improve site performance and user experience. This processing is carried out in compliance with UK GDPR principles.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access – You may request confirmation of whether we process any of your personal data and obtain a copy of it.
- Right to rectification – You may request correction of any inaccurate or incomplete personal data we hold about you.
- Right to erasure – You may request deletion of your personal data, where applicable.
- Right to restrict processing – You may request limitation of how we use your data under certain conditions.
- Right to data portability – Where processing is based on consent or contract, you may request your data in a structured, commonly used format.
- Right to object – You may object to processing based on legitimate interests, including profiling or direct marketing.
How We Comply
Cardiff City Table Tennis Club complies with UK GDPR by:
- Minimising data collection to only what is necessary for website functionality and analytics.
- Using secure, privacy-focused analytics tools that anonymise IP addresses where possible.
- Not storing personal data in identifiable databases or user accounts.
- Ensuring all third-party service providers (e.g., analytics platforms) are GDPR-compliant.
Data We Process
Any personal data we process is limited to:
- IP addresses (anonymised where possible)
- Browser and device information
- Pages visited and session duration
- Cookie identifiers (for functional purposes only)
This data is not linked to any individual identity and is retained only as long as necessary for statistical analysis.
Legal Basis for Processing
Our processing of personal data is based on legitimate interest under Article 6(1)(f) of the UK GDPR. This includes improving website functionality, ensuring security, and understanding how visitors interact with our content. We balance this interest against your rights and freedoms, and we do not process data for profiling or automated decision-making.
How to Exercise Your Rights
To exercise any of your rights under UK GDPR, please contact us directly by email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details about your interaction with our website. We will respond without undue delay.
Response Timeframes
We are required to respond to your request within one month of receipt. In complex cases, we may extend this period by up to two additional months and will inform you within one month if this is necessary.
No Discrimination Policy
We will not deny you services, charge different prices, or provide a different level of service because you have exercised your rights under UK GDPR. Your rights are fundamental and protected.
Updates and Changes
We may update this page periodically to reflect changes in law or our practices. Any material changes will be posted here with an updated effective date.
Contact Information
If you have questions about this compliance page or wish to exercise your rights, please contact our data protection point of contact:
Cyrus Hemsworth
Email: [email protected]
Address: Phoenix Park, 78 Caves Road, Islandbridge, Dublin 8, D08 AZ55, Ireland
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection: ico.org.uk.
