Lancashire League Handbook 2025

LCL Handbook 2025 267 For ordinary personal data • Consentof the individual • Theprocessing is necessary forperforminga contract towhich the individual is subject • The processing is necessary for compliance with a legal obligation to which the organisation is subject • The processing is necessary for the purposes of the legitimate interests of the organisation (or someone else) and those interests are not overridden by the rights and freedoms of the individual (note if you rely on this legal basis – you must specify what your legitimate interest is) Forspecialcategorydata • Explicit consent of the individual • The processing is necessary to protect the vital interests of the individual • The processing relates to personal data that are manifestly made public by the individual • The processing is necessary for the establishment, exercise or defence of legal claims • Theprocessing is necessary to complywith the lawor isnecessary for thepurposesofequality of opportunity • The processing is necessary for the purposes of preventative or occupational medicine or the provision of health care • The processing is necessary for the purposes of protecting an individual (who is under 18 or is over 18 and at risk) from harm or neglect or protecting the physical, mental or emotional wellbeing of an individual (who is under 18 or is over 18 and at risk) • The processing is necessary for measures to protect the integrity of sport or a sporting event and must be carried out without consent of the individual Therearemanyother legalbases andyoushouldconsultArticles6 and9of theUKGDPRandSchedule 1 Part 2 of the Data Protection Act 2018 to see which ones apply. If you process any personal data relating to criminal conviction or offences, you should consult Article 10 of the UK GDPR and Schedule 1 Part 2 of the Data Protection Act 2018 to see which legal bases may apply. GN8 (Who we may disclose your personal data to) You will need to specify who you will share personal data with. Where you can provide a name you should do so (for example, you may state that your share particular categories with the ECB / Cricket Regulator) but you could list categories of recipient (for example, with leagues in which the player participates). GN9 (Where we will hold your personal data) If the personal data is only processed in the UK you should state this. If the personal data may be processed elsewhere – you should specify where. Transferring data to some countries (especially those outside the European Economic Area or Switzerland) require additional measures to be put in place and you have to specify these in the privacy notice. GN10 (How long we will keep your personal data for) There are rules for how long you can keep personal data for (generally – not for longer than necessary