The Sports Council for Wales (trading as Sport Wales) are committed to protecting your privacy and personal information. We want to share how we use your information for any of the services that we provide.
This policy (together with our terms of website use, and any other documents referred to in them) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
Please read the following carefully to understand our practices regarding your personal data and how we will process it.
By using our services (including visiting this website) you are accepting and consenting to the practices described in this policy.
For the purposes of the Data Protection Act 1998 and the General Data Protection Regulation ((EU) 2016/679) (GDPR), the data controller is SPORTS COUNCIL FOR WALES, Sophia Gardens, Cardiff, CF11 9SW. Registration number: Z5769715
Sport Wales uses your personal information differently based on how we work with you. You can find out more about how we use your information in each situation by following the links below.
This privacy notice applies to:
In the sections below, when referring to the individuals listed above, we use the terms “you” or “your”.
We take your privacy extremely seriously and want you to feel confident that your personal information is safe in our hands.
We will only use your personal information in accordance with data protection law applicable to England and Wales from time to time.
Under data protection law, when we use your personal information, we will be acting as a data controller. Essentially, this means that we will be making decisions about how we want to use your personal information and why.
Below ,we summarise the main rules that apply to us under data protection law when we use your personal information:
Any social media posts or comments you send to us (on the Sport Wales Facebook page, for instance) will be shared under the terms of the relevant social media platform (e.g.Facebook, Twitter, Instagram) on which they're written and could be made public. Other people, not us, control these platforms. We are not responsible for this kind of sharing.
Before you make any remarks or observations about anything, you should review the terms and conditions and privacy policies of the social media platforms you use. That way, you'll understand how they will use your information, what information relating to you they will place in the public domain, and how you can stop them from doing so if you're unhappy about it.
When will we share your information with others?
Sometimes, we will need to share your personal information with others. This section sets out details of who we will share your personal information with and why. It also tells you about our legal basis for doing so under data protection law and steps we will take to protect your personal information.
We will never sell your personal information on to third parties.
Who are our service partners?
Our service partners include:
We haven’t included the names of our service partners in this privacy notice because their identity will change from time to time. However, if you would like further information about any of our current service providers, please contact us using the details set out on page 34 of this document.
Why we need to share your personal information with them?
We use the service partners described above to enable us to perform our contracts with you.
The legal bases we rely upon when sharing your personal information.
The sharing of your personal data with suppliers and sub-contractors is necessary for the performance of our contract with you.
What precautions do we take?
We enter into contracts with our service providers which require them to put appropriate security measures in place and which restrict their use of your personal information.
Who are our marketing partners?
Our marketing partners are marketing agencies that we use to create and/or deliver advertising and other promotional material on our behalf.
We haven’t included the names of our marketing partners in this privacy notice because their identity will change from time to time. [However, if you would like further information about any of our current marketing partners, please contact us.
Why we need to share your personal information with them?
We may need to share your personal information with our marketing partners if we ask them to create marketing materials addressed to you or to contact you with direct marketing on our behalf.
The legal bases we rely upon when sharing your personal information.
We will either be relying on your express consent or our legitimate interests in developing and expanding our business.
What precautions do we take?
We enter into contracts with our marketing partners providers which require them to put appropriate security measures in place and which restrict their use of your personal information.
Who will we be sharing your personal information with?
Suppliers of information technology products and services such as Computer Software Suppliers Cloud Storage providers (including hosted application providers, and Software as a Service providers
We haven’t included the names of our IT/Cloud Service providers in this privacy notice because their identity will change from time to time.
Why we need to share your personal information with such providers?
We use suppliers of information technology products and services in connection with the supply, maintenance and/or improvement of our IT network and the creation, development hosting and maintenance of our website;
We use cloud storage providers to provide a secure method of storing electronic data;
We use analytics and search engine providers to assist us to improve our website.
The legal bases we rely upon when sharing your personal information.
We rely upon our legitimate interests in ensuring that our business can function properly and efficiently and that our IT network is secure;
The sharing of your personal data with analytics and search engine providers is based on our legitimate interests in having an efficient and user-friendly website.
What precautions do we take?
We enter into contracts and Data Processing Agreements with our IT providers/cloud storage providers which require them to put appropriate security measures in place and which restrict their use of your personal information.
Why we need to share your personal information with such providers?
We use suppliers of information technology products and services in connection with the supply, maintenance and/or improvement of our IT network and the creation, development hosting and maintenance of our website;
We use cloud storage providers to provide a secure method of storing electronic data;
We use analytics and search engine providers to assist us to improve our website.
The legal bases we rely upon when sharing your personal information.
We rely upon our legitimate interests in ensuring that our business can function properly and efficiently and that our IT network is secure;
The sharing of your personal data with analytics and search engine providers is based on our legitimate interests in having an efficient and user-friendly website.
What precautions do we take?
We enter into contracts and Data Processing Agreements with our IT providers/cloud storage providers which require them to put appropriate security measures in place and which restrict their use of your personal information.
We may also need to share your personal information with others in the following circumstances:
Legal or regulatory requirements - On occasion, we may be required to disclose your personal information to organisations such as the courts or the police to comply with legal obligations we are subject to and/or to prevent fraud or crime.
Protecting our business - From time to time we may need to disclose your personal information in connection with steps we need to take to protect our business interests or property. For example, if you default with payment, we may disclose your personal information to credit reference agencies or debt collection or tracing agents.
Professional advice and legal action - We may need to disclose your personal information to our professional advisers (for example, our lawyers and accountants) in connection with the provision by them of professional advice and/or the establishment or defence of legal claims.
Technical information, including the internet protocol address used to connect your computer to the internet, browser type and version, [time zone setting, browser plug-in types and versions, operating system and platform,;
Information about your visit, including the full Uniform Resource Locators (“URL”), click stream to, through and from our website (including date and time), [products you viewed or searched for, page response times, download errors, length of visit to certain pages, page interaction information (such as scrolling clicks and mouse-overs), methods used to browse away from the page and any phone number used to call our customer service number.
Some of the information is obtained by us automatically whenever you use our website;
Some of the information is collected by us each time you use our website through our use of cookies. Further information about the cookies we use and the purposes for which we use them can be found in our Cookies Policy here.
The above information is used by us to:
Information collected through our use of cookies is used in the ways described in our Cookies Policy here.
Our collection and use of the above information is based on our legitimate interests in ensuring that our website is user-friendly and appeals to our customers.
12 months for the purposes of improving the website experience
If you disable our Cookies, you will be unable to use certain parts of/functions on our website. Further information about this can be found in our Cookies Policy.
What personal information we will use
Provided by you when purchasing goods from our website.
We will use your name, address and other contact details to supply the goods to you and to communicate with you about such supply. We will also use this information to deal with any returns you make;
We will use your payment details or credit card details to take payment for goods;
Other than your payment details or credit card details, we will keep a record of the information listed above for our internal administrative purposes;
We will also use the above information (other than your bank and credit card details), for legal and regulatory purposes.
Our use of your personal information in connection with the supply of goods to you, taking payment and dealing with any returns is necessary for the performance of the contract between us;
Our use of your personal information for our internal administrative purposes is based on our legitimate interests in ensuring that our business is run properly and efficiently;
Our use of your personal information for legal or regulatory purposes is necessary to enable us to comply with our legal and regulatory obligations and/or to enable us to bring, defend or deal with legal claims.
We only use your payment details or credit card details for the purposes of taking payment. We do not store such information;
We usually keep records relating to any purchase you make for [six years] in case any contractual disputes or defective product claims arise.
Consequences of not providing/permitting us to obtain personal information
Without your name, contact details and payment information we will be unable to supply goods to you.
Provided by you when applying for membership or use of fitness facilities.
We will use your name, address and other contact details to administer your membership;
We will use your bank details to take payment for your membership or use of fitness facilities;
We will use any information declared about your health/medical conditions to assess your suitability to take part in exercise and to take any precautions to ensure that your use of the fitness facilities are as safe as reasonably possible;
We will use any information provided by you as a reason for cancelling any membership to help us improve our services.
Our use of your personal information for member administration is necessary for the performance of the contract between us;
Our use of your bank account details for payment of membership is necessary for the performance of the contract between us;
Our use of your health/medical information will be on the basis that you have given us your explicit consent to use the information;
Our use of the information you provide on your cancellation form will based on our legitimate interest in using feedback to improve our services for the future.
We will only keep your bank details for the duration of your membership.
We usually keep records relating to your membership for a period of two years after your membership has ended in case any contractual disputes or claims.
Without your name, contact details and payment information we will be unable to process your membership and you will be unable to become a member at any of our centres
The information we use is provided by you when you make a reservation and/or register for a course or activity.
We will use the personal information to contact you regarding your stay or course/activity and for administration purposes;
We will use the emergency contact details to contact your emergency contact in the event of an incident, illness or injury;
We will use the payment details provided to take payment for the stay/course/activity.
Our use of your personal information for administration purposes and to take payment is necessary for the performance of the contract between us.
Our use of your emergency contact details and any health issues you’ve shared with us is based on the need to keep you safe and ensuring that we can obtain instruction from the people nominated by you in the even of an illness or injury.
We will not store your credit/debit card details, we will only use the information to obtain payment.
We usually keep records relating to your stay/course/activity for a period of six years after your visit in case any contractual disputes or claims.
Without your name, contact details and payment information you will not be able to stay at one of our centres nor take part in the activity/course you are interested in.
Provided by you or by the club, association or organisation you are connected with, or provided by photgraphers working on behalf of your club/sport or Sport Wales.
We will use your personal information to communicate with you and for general administration purposes, and to assist in the promotion of your club, sport or participation in sport.
Our use of your personal information will be necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. Where we use images, we rely on consent that you have provided to your club or sport, or direct to Sport Wales.
We usually keep your personal information for the duration of your connection with the particular club or association. Images are kept and used for a period of seven years unless specified otherwise.
-racial or ethnic origins
-political opinions
-religious or philosophical beliefs
-membership of a trade union
-physical or mental health (including details of any disability)
-sexual orientation
-details of any known disability
-commission or alleged commission of any offence, including the results of Disclosure and
-Barring Service (‘DBS’) checks
We use the special category personal information we hold about you for a number of different purposes, which we list below. Data protection law prohibits us from processing any special category personal information unless we can satisfy at least one of the conditions laid down by data protection law. We also set out below the specific conditions we rely upon when processing special category data.
We use the special category personal information we hold about you for the following reasons:
To monitor equality and diversity. In this case the condition we rely upon for processing the information is to monitor equality and diversity which is necessary for reasons of substantial public interest, namely for the purposes of identifying or keeping under review the existence or absence of equality of opportunity or treatment between groups of people specified in relation to that category with a view to enabling such equality to be promoted or maintained.
We also use the special category personal information we hold about you for the following purposes:
-to comply with and demonstrate compliance with employment law and best practice and any other applicable laws
-to assess your fitness for work
-to make any reasonable adjustments to your role
In these cases, the conditions we rely upon for processing the information are because it is necessary for the purposes of carrying out the obligations and exercising specific rights in the field of employment law.
In cases where a claim has been brought against the Organisation or there is a potential risk of a legal dispute or claim we may need to process your special category personal information where it is necessary for the establishment, exercise or defence of legal claims.
There may be circumstances where we need to process your special category personal information, particularly relating to your health, where it is necessary to protect your interests (or someone else's interests) and you are not capable of giving your consent.
We envisage that we will hold information about criminal convictions. We will only collect information about criminal convictions as part of the recruitment process if it is appropriate given the nature of the role and where we are legally able to do so.
We will only use information relating to criminal convictions where the law allows us to do so. This will usually be where such processing is necessary for reasons of substantial public interest, namely, preventing or detecting unlawful acts, protecting the public against dishonesty, preventing fraud or suspicion of terrorism or money laundering.
Less commonly, we may use information relating to criminal convictions where it is necessary in relation to legal claims, where it is necessary to protect your interests (or someone else's interests) and you are not capable of giving your consent, or where you have already made the information public.
As part of the recruitment and selection process we will obtain certain personal information from you. Some information will be provided in the job application form and further information may be provided by you and recorded by us during any interview process.
This information is collected either directly from candidates or sometimes from an employment agency. We may sometimes collect additional information from third parties including your referees, your education provider, the Home Office and the Disclosure and Barring Service.
We use the personal information we hold about you for a number of different purposes, which we list below. Under data protection law we need to have a valid legal basis for using your personal information, we also set out below the legal bases which we will be relying upon.
We use the information we hold for the purposes of recruitment and selection.
Your information may be disclosed to the referees you have provided on your application form in order to obtain references and/or with education, professional and vocational establishments to verify information you have provided on your application form or during any interview process.
Our legal basis for processing evidence of your nationality, immigration status, ability to work in the UK, your NI number is to comply with our legal obligations. Otherwise, our legal basis for processing your information we hold for recruitment and selection purposes is because the processing is in our legitimate interests.
Our specific legitimate interests are:
To make sure we meet our legal data protection and privacy obligations, we only hold on to your information for as long as we actually need it for the purposes we acquired it in the first place.
In most cases, this means that information gathered as part of the recruitment exercise will usually be retained for 6 months after the recruitment exercise has been completed. In the case of a successful applicant, information which is relevant to the on-going employment relationship will be transferred to the employee’s employment record and retained in accordance with the periods applicable for employees.
To be able to support you as an athlete, we need to collect the following personal information:
We also collect the following special category information:
We use your information for the following things:
For us to be able to support you, we need to share your information with different teams within Sport Wales and with outside organisations.
Some examples are:
When we share your personal information, we make sure we do it safely, and any person who receives it has a duty to protect it.
People working for Sport Wales who may see your personal information include:
We may also need to share your information with people who work outside Sports Wales, including
Every athlete is different, so we might not share your information with everyone listed here, and sometimes we may need to share your information with other people not listed here.
Sport Wales collects the information here as part of entering into a contract to support you. We ask for your consent to allow us to collect, use and share special category information.
Sport Wales will keep your information all the time you are working with us, and then for a period of time based on the type of information it is and the requirements of our Practitioner’s governing bodies. Normally, this will be five years. We won’t keep information for longer than is necessary.
You can tell us to stop using or sharing your personal information at any time, but this may prevent us from providing you a service. Please contact dpo@sport.wales if you want advice on this, or to ask us to stop using your information.
Provided by you when you register with us and apply for a grant.
We will use your name, address and other contact details to communicate with you about your grant application;
We will use the information provided on your application form to consider your grant application.
We will use the information relating to equality for the purposes of fulfilling our obligations to ensure services are inclusive to people from all backgrounds (equality obligations).
We will use your information for the purpose of keeping in contact with you to promote sport development where you have provided consent.
Our use of your personal information in connection with your grant application will be necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Our use of any equality information provided by you are for the purposes of carrying out Sport Wales’ obligations to the Public Sector Equality Duty obligations
We usually keep personal information relating to any grant applications for 5 years. If your grant relates to property or buildings, we may retain your information for 21 years.
We retain the information for the purposes of monitoring.
Without your name, contact details and details relevant to your grant application we would not be able to consider you for a grant.
Provided by you when you agree to feature in an article or newsletter.
We will use the personal information provided within the article/newsletter;
The article/newsletter will be posted on our website [and/or will be posted on our Facebook page/twitter feed] [and/or will be printed in our magazine].
Use of your personal information for the purposes of writing and disseminating the newsletter/article is based on your explicit consent.
Unless you withdraw your consent, articles and newsletters remain available on our website for 12 months
Provided by you when you contact us by making a phone call, writing to us, social media posts or emailing us.
We will use the personal information to deal with your enquiry/complaint;
We will make a record of your enquiry/complaint for internal administrative purposes and statistical analysis.
Use of your personal information for the purpose dealing with your enquiry/complaint is based on our legitimate interest in ensuring our organisation is run efficiently and effectively;
Keeping a record of your enquiry is based on our legitimate interest in ensuring we can run an efficient organisation.
Records of your enquiry/complaint and related documentation are retained until the matter is resolved to everyone’s satisfaction.
Your image captured on our CCTV security cameras
Recorded on our CCTV system when you use our facilities.
The substantial public interest in preventing and detecting unlawful acts.
Data recorded by the CCTV system will be digitally recorded and stored securely on hard drives. The digital recording system will automatically overwrite old images with newer data every 30 days.
Where footage has been requested by the police, prosecution agencies, legal representatives or people whose images have been recorded and retained the usual retention period may be overridden and the footage will be retained until the matter is resolved.
Provided by you when you subscribe to our newsletters or updates.
To provide you with the newsletters or updates you have requested;
To provide you with related information that we think may be of interest to you.
We will rely on your consent to provide you with the newsletters or updates you have requested and retain your details on our subscriptions database;
We will rely on our legitimate interest in promoting our products and services to provide you with other information that may be of interest to you.
12 months or until you tell us to remove your data
Without your contact details, we will not be able to provide you with newsletters and updates;
You can opt-out of receiving related information at the time you subscribe to our newsletters and updates and each subsequent time we contact you.
Sport Wales has a number of online services that require users to sign-up and create an account to access that service.
The information collected will depend on that area of service. We collect:
All subscribed services
Provided by you when you create an account.
To provide help us manage your account.
To update you on useful information about your account.
To provide you with related information that we think may be of interest to you.
We will rely on your consent to provide you with updates and retain your details on our account subscriptions database;
We will rely on our legitimate interest in promoting our products and services to provide you with other information that may be of interest to you.
Data collected for your Citbag Account will be held by Sport Wales for the lifetime of the programme.
Without your contact details, we will not be able to provide you with an account for the service;
You can opt-out of receiving related information from us at each subsequent time we contact you.