Please click to access the PDF version: KRSP Privacy Policy – Website

KRSP Privacy Policy
2.1 (g)(h) KRSP Privacy Policy V2 161224

Background to the Privacy Policy
Kilkenny Recreation & Sports Partnership (KRSP) is a data controller as defined under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. Any reference to “we” “our” or “us” within this Privacy Policy refers to Kilkenny Recreation & Sports Partnership.

KRSP is a company limited by guarantee which co-ordinates, develops, delivers, monitors & evaluates various events, programmes, workshops, and initiatives to facilitate sport and physical activity in the Kilkenny area. This policy outlines how personal data collected on the KRSP website (www.krsp.ie) and/or from one of our programmes, events, workshops or initiatives, will be protected, stored, used, and processed by us.

What personal data do we collect?
We collect your personal data when you register for one of our programmes, events, workshops, initiatives or you sign up to receive our promotion and marketing materials. Depending on the nature of your engagement with KRSP, the information we collect, may include the following types of your personal data, as detailed below:

• Your name
• Your email address
• Your date of birth (unique identifier for CRM system)
• Your contact phone number
• Your postal address
• Financial information
• Demographic information such as your gender, age, and socioeconomic status

We may also collect the following special category data where required to effectively deliver our programmes:

• Existence and nature of any disability participant may present with
• M1 Sport Ireland questionnaire data: Activity evaluation questionnaire which collects – age, gender, townland area, activity level (pre programme, post programme and at 3 month post programme intervals).
• Ethnicity
• Membership of disadvantaged community

Who do we share your personal data with?
Programme Providers
We share your personal data with third party programme providers to facilitate the delivery of programmes, events, workshops & initiatives in collaboration with or on behalf of KRSP.

Programme, Funding, and Research Partners
We share your anonymised aggregate statistics with Sport Ireland when you participate on our programmes. We may also share this anonymised data with funders and our other research partners.

Service Providers
We share your personal data to contracted service providers by providing access or utilising software systems with IT, website and communication services, cloud providers, online booking services and our database providers.

Law Enforcement Agencies
We will share your personal data with law enforcement agencies, regulatory agencies, and authorised third parties, in response to a verified request relating to a criminal investigation or alleged illegal activity.

Why do we collect your personal data?
We collect your personal data for the following purposes:

• To administer our programmes, events, workshops & sporting initiatives
• To keep you updated on events that you may be interested in
• To monitor, evaluate and track programme participants for gender participation, age groups, socioeconomic considerations, and geographical spread

Legal basis for collecting your personal data
We collect your personal data under the following Article 6 GDPR legal bases

• With your consent
• Based on our legitimate business interests in promoting our programmes and services
• For the performance of our contract with you, where applicable

We collect your special category data under the following Article 9 GDPR legal basis

• With your explicit consent
• For carrying out our obligations and exercising our rights under employment, social security, and social protection law

How long do we retain your data for?
Programme Participant Data
We only keep your data for as long as necessary to fulfil our purposes of processing. We retain your data that we collect as part of our programmes for 2 years from the date you participated in our programmes. For participants under 18 years of age, the data is held until the child is 18 years of age plus a further two years.

Marketing Consent Data
You have the following rights in respect of your personal data that we process:

• The right to withdraw consent where that is the basis for processing
• The right to access a copy of any personal information we process about you
• The right to be informed
• The right to erasure
• The right to ask us to correct any information you believe is incorrect or incomplete
• The right to request that your personal data be deleted
• The right to restrict the processing of your personal data
• The right to data portability of your information
• The right to complain to the Data Protection Commission

If you would like to exercise any of the above rights, or if you have queries on how your personal data is processed by us, please contact info@krsp.ie.

If you would like to contact the Data Protection Commission regarding our processing of your personal data, you can do so by following this link: www.dataprotection.ie/en/contact/how-contact-us

Review
This policy is required to be approved by the Board and reviewed by the Board every 3 years.