British Gymnastics Event Photography Privacy Notice
We take your privacy very seriously. This privacy notice contains important information about how your personal data will be collected and used if you participate in an event where British Gymnastics has contracted the services of Andrew Gourley trading as Blueski Photography to photograph participants in order to provide gymnasts, parents and family members with the opportunity to purchase professional quality photographs.
It also explains the rights under data protection law that apply to information about you.
If you have any questions or concerns about our use of your personal data for this purpose, then please contact the relevant organisation using the following contact details:
  British Gymnastics Blueski Photography
By Post Data Protection Officer
British Gymnastics
Lilleshall NSC
Nr Newport Shropshire
TF10 9AT
Andrew Gourley
Heathercliffe
Fleck Lane
West Kirby, Wirral, CH4 8LB
 
By email data.protection@british-gymnastics.org Andy@blueskiphotography.com
By phone 03451297129 07990 585 855
 
What information about you will Blueski collect and use
 
Photographic images will be taken during the event by Blueski Photography or another approved photographer on behalf of Blueski Photography. These images will be uploaded by Blueski Photography to an event-specific gallery provided by Instaproof. You can read their privacy notice here.
Representatives of British Gymnastics clubs taking part in the relevant event will be provided with a password to access the specific image gallery for the relevant event, which they can distribute to family members and friends of event participants. 
if you visit the online gallery and make a purchase, Blueski Photography will collect the following information about you:
 
Our purposes
Blueski Photography will use this information for the following purposes as described below:
A selection of the images taken at the event will also be provided to British Gymnastics for marketing and promotional purposes. Please see British Gymnastics membership privacy notice for full details about how we will use your images for these purposes.
Purpose and lawful basis
If we collect and use information about you, we are required to identify a lawful basis under UK General Data Protection Regulation (GDPR) for each purpose.
When you order photographs, your personal data will be collected and used because it is necessary for the performance of the contract between you and Blueski Photography. For example, Blueski Photography needs your billing and delivery address and payment details to process and distribute your order.
For all other identified purposes, we will collect and use your personal data where it is necessary for our legitimate interests (or those of a third party), providing that these interests are not overridden by your own rights and interests. For example: when we take photographs of event participants, we are pursuing British Gymnastics interests to provide participants with the opportunity to purchase pictures of the event and Blueski Photography’s commercial interests in providing this service.
In relying on legitimate interests, we have carried out an assessment to make sure we have balanced our interests against your own.
We will also process your personal data to comply with any legal obligations, for example …..
Direct marketing
We will not use your personal data for direct marketing purposes unless you have given your consent. You have the right to request we stop processing your personal data for direct marketing activities if you no longer wish to receive marketing communication from us. We must always comply with your request.
Disclosing your personal data
We share your personal data as follows:
-           Approved photographers working with Blueski
-           Instaproofs who provides the platform for hosting the event photography galleries. 
-           Manchester Lab and other print companies for image processing and distribution services where you have ordered physical copies of images.
-           Payment service providers (Strike & World Pay)
We only engage other organisations and individuals to handle your personal data if we are satisfied that they will take appropriate measures to protect your personal data. We also impose contractual obligations on them to ensure they can only use your personal data for the purposes we have authorised.
If you would like more information about who we share our data with and why, please contact our Data Protection Officer.
Transferring your personal data out of the UK
Some organisations who provide services on our behalf are based outside the UK. Under data protection laws, we can only transfer your personal data to a country outside the UK where:
The locations outside the UK to which your personal data is transferred and the applicable safeguards are set out below.
Location            Recipient        
 
Service provided
 
Lawful safeguard
USA Instaproofs Photography commercial platform Approved standard data protection clauses under Article 46(2) of the UK GDPR)
Other?      
 
Please contact us it you would like further information about data transferred outside the UK.
How long do we store your personal data for?
Blueski Photography will not keep your personal data for longer than we necessary to provide for the event photography purposes and to comply applicable legal obligations e.g. for tax purposes.
Images created during a British Gymnastics event will archived one year after the event and fully deleted after two years.
Images provided to British Gymnastics for ongoing promotional purposes will be used by British Gymnastics for up to five years after such time, they will be deleted or archived where British Gymnastics considered there is a public interest in preserving the images for historical purposes.
Your rights
You have a right to access the personal data we hold about you. You also have a right to ask us to correct inaccurate or incomplete data, to restrict the processing of your personal data and in certain circumstances, to have your personal data erased.
Where we are processing your personal data on the lawful basis of legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must do so unless we believe we have a legitimate overriding reason to continue.
If you would like to exercise any of your rights, please contact the relevant organisation using the contact details above. For security purposes, we may need to ask you for information to verify your identity before we can deal with a request.
For more information on each of those rights, including the circumstances in which they apply, please contact the British Gymnastics Data Protection Officer or see the Guidance from the Information Commissioner’s Office (ICO) on individuals’ rights.
How to complain
Please contact us if you have any queries or concerns about our use of your personal data. We hope we will be able to resolve any issues you may have.
You also have the right to complain to the UK data protection authority about our collection and use of your personal information. For more information, please contact the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 0303 123 1113. Email: Casework@ico.org.uk.
Changes to this privacy policy
We keep our privacy notices under regular review. This privacy notice was published on xx June 2022.