British Gymnastics GotPhoto Privacy Notice
We take your privacy very seriously. This privacy notice contains important information about how your personal data will be collected and used when accessing/using our website https://british-gymnastics.gotphoto.co.uk/ (“Site”).
It also explains the rights under data protection law that apply to information about you.
If you have any questions or concerns about our use of your personal data for this purpose, then please contact the relevant organisation using the following contact details:
| British Gymnastics | |
| By Post |
Data Protection Officer British Gymnastics Lilleshall NSC Nr Newport Shropshire TF10 9AT |
| By email | data.protection@british-gymnastics.org |
| By phone | 03451297129 |
What information about you will we collect and use
If you visit the Site and open an account and or make a purchase, we will collect the following information about you:
- Contact details such as name, email address, phone number
- Order details, invoices and payment information
- Billing/delivery address.
- Customer communications
- Electronic identifiers and details of your interaction with the gallery
Our purposes
We and our sub-processors will use this information for the following purposes as described below:
- To process and distribute orders that customers place on the photography platform.
- To communication with you about your order and for other legitimate reasons and respond to any queries, requests and complaints.
- To prevent and detect fraud.
- To comply with any legal and regulatory obligations.
Purpose and lawful basis
If we collect and use information about you, we are required to identify a lawful basis under UK General Data Protection Regulation (GDPR) for each purpose.
When you order photographs, your personal data will be collected and used by us because it is necessary for the performance of the contract between you and us. For example, we need your billing and delivery address and payment details to process and distribute your order.
For all other identified purposes, we will collect and use your personal data where it is necessary for our legitimate interests (or those of a third party), providing that these interests are not overridden by your own rights and interests. For example: when we take photographs of event participants, we are pursuing British Gymnastics interests to provide participants with the opportunity to purchase pictures of the event.
In relying on legitimate interests, we have carried out an assessment to make sure we have balanced our interests against your own.
We will also process your personal data to comply with any legal obligations.
Direct marketing
We will not use your personal data for direct marketing purposes unless you have given your consent. You have the right to request we stop processing your personal data for direct marketing activities if you no longer wish to receive marketing communication from us. We must always comply with your request.
Disclosing your personal data
We share your personal data as follows:
- With organisations that provide services on our behalf such as:
- Fotografen Online Service GmbH trading as GotPhoto who provide the platform for hosting the event photography shop. You can read their privacy notice here https://www.gotphoto.co.uk/data-privacy-policy/
- Payment service providers (Stripe Payments Europe, Limited) You can read their privacy notice here https://stripe.com/gb/legal/privacy-center
- Approved photo processing laboratories in order to fulfil your order (Digitalab Limited) You can read their privacy notice here https://www.digitalab.co.uk/privacy-policy/
- Legal and other advisors
- Relevant authorities for regulatory or legal purposes
We only engage other organisations and individuals to handle your personal data if we are satisfied that they will take appropriate measures to protect your personal data. We also impose contractual obligations on them to ensure they can only use your personal data for the purposes we have authorised.
If you would like more information about who we share our data with and why, please contact our Data Protection Officer.
Transferring your personal data out of the UK
Some organisations who provide services on our behalf are based outside the UK. Under data protection laws, we can only transfer your personal data to a country outside the UK where:
- The UK government has decided a particular country ensures an adequate level of protection of personal data (Adequacy)
- There are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you; (Appropriate Safeguards) or
- A specific exception applies under data protection law.
The locations outside the UK to which your personal data is transferred and the applicable safeguards are set out below.
| Location | Recipient | Service provided | Lawful safeguard |
| Germany |
Fotografen Online Service GmbH trading as GotPhoto Hausvogteiplatz 12 D – 10117 Berlin, Germany |
Photography commercial platform | Adequacy (EEA) |
| Republic of Ireland | Stripe Payments Europe, Limited | Payment provider | Adequacy (EEA) |
Please contact us it you would like further information about data transferred outside the UK.
How long do we store your personal data for?
We will not keep your personal data for longer than we necessary to provide for the event photography purposes and to comply applicable legal obligations e.g. for tax purposes.
Your rights
You have a right to access the personal data we hold about you. You also have a right to ask us to correct inaccurate or incomplete data, to restrict the processing of your personal data and in certain circumstances, to have your personal data erased.
Where we are processing your personal data on the lawful basis of legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must do so unless we believe we have a legitimate overriding reason to continue.
If you would like to exercise any of your rights, please contact the relevant organisation using the contact details above. For security purposes, we may need to ask you for information to verify your identity before we can deal with a request.
For more information on each of those rights, including the circumstances in which they apply, please contact the British Gymnastics Data Protection Officer or see the Guidance from the Information Commissioner’s Office (ICO) on individuals’ rights.
How to complain
Please contact us if you have any queries or concerns about our use of your personal data. We hope we will be able to resolve any issues you may have.
You also have the right to complain to the UK data protection authority about our collection and use of your personal information. For more information, please contact the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 0303 123 1113. Email: Casework@ico.org.uk.
Changes to this privacy policy
We keep our privacy notices under regular review. This privacy notice was published on 10 May 2024.
