WLV Sport Centre Privacy Notice

 

Who we are

The University of Wolverhampton (‘The University’, ‘we’ or ‘us’) are a ‘Data Controller’, as defined by the Data Protection Act 2018 and are responsible for, and control the processing of your Personal Data. You can contact us at email dataprotection@wlv.ac.uk, University of Wolverhampton, Wulfruna Street, Wolverhampton WV1 1LY. Tel. 01902 32 1000. Our Data Protection Officer can be contacted at dataprotection@wlv.ac.uk.

 

How We Use Your Data

The University of Wolverhampton (WLV Sport) will collect and processes your Personal Data for the following to sign you up to use or sports services in a legal and safe way. We will in addition process data in relation to to age, ethnic background, religion, and disability so that we can process information in relation to usage and exercise trends to inform future products and sessions that will in turn provide a better service to our whole customer base. 

 

Purpose

Lawful Basis (Reason)

Obtaining personal information relating to signing up to and using our sports services including payment details

Article 6,1(b) Necessary for a contract

 

processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

 

Where the information is not necessary for a contract, the University will rely on UK GDPR Article 6,1(a) Consent and Article 9,2,(a) Explicit consent

 

 

Analysis and interpretation of Individual characteristic data

Article 6,1(a) Consent

the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

 

and Article 9,2,(a) Explicit consent for Special category data

 

the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, 

 

 

All of your personal data is processed in the UK or EEA/ Some of your personal data is processed in the UK or EEA

 

Information We Collect

Most of the information that we process about you will be provided by you. This will typically be via our website, mobile app or collected from the application process. We will process the minimum amount of data that is necessary for the above stated purposes. The data items are detailed below:

The following data items are necessary for you to use our services:

  • Your name
  • Your contact details
  • Emergency contact details.
  • Financial information incl. direct debit details,
  • Health declaration relevant to exercising safely

The following data will help the university to plan services and target hard to reach groups. You have a choice to share this with us:

  • Age band
  • Gender
  • Ethnicity
  • Religion
  • Disability

Most of the information that we process about you will be provided by you. This will typically be via our website, mobile app or collected from the application process.

 

Who We Share Your Personal Data With

Information is shared with relevant departments within the University for the purposes outlined above. In addition, specific data may be obtained from and shared with the following external parties for the purposes specified:

Recipient or Source

Purpose and type of data

Lawful Basis

Is sharing carried outside the UK (y/n)

Gladstone Leisure Services

To act as a repository for the data and carry out general processing of all the data

Necessary for a contract or entering into a contract.

The data is shared with the 3rd Party pursuant to Article 6(1)f Legitimate interest of a 3rd party

No

We may also share personal details with organisations with enforcement powers such as HMRC or the Police. However, we will only do so if this is required to comply with our legal obligation to disclose information to these bodies.

We will only share the minimum amount of personal data with any of the above and will always do so in accordance with the law.

 

Retention

The University will retain your Personal Data for a period of 4 years in line with the University’s Document Retention Schedule.  Following cancellation of membership, a request can be made for the deletion of all personal data. Furthermore, upon membership cancellation, your personal data will be removed up to 4 years from the date that you submitted your written cancellation.

Where we have relied on consent to capture parts of your data, such as religion, you will have the right to withdraw consent at any time and the University will delete that section of your data.

 

Your Rights

As an individual, you have a number of rights available to you. In this instance, the following rights are available to you:

Right to Access

Right to Rectification

Right to Erasure (or to withdraw consent)

Right to Restriction

Right to Rectification

 

To find out more about how you may exercise those rights, for example, The Right of Subject Access: obtaining a copy of your information which we may hold,  or the Right to Rectification: correcting any mistakes or completing the information we hold about you, please see our Data Protection web pages available here or the ICO website for more information.

 

How to Complain

If you have any queries, concerns or believe that your Personal Data is being handled in a manner which is contrary to statutory requirements, you may wish to contact the University of Wolverhampton’s Data Protection Officer via dataprotection@wlv.ac.uk or complain to the ICO via www.ico.org.uk

 

Changes to Privacy Notice

We regularly review our privacy notice and will review it at least annually. This privacy notice was last updated on 1st March 2024.