If you visit the website of the Dutch Touch Rugby Association ("Touch NL"), request information via our website, contact us by telephone and/or register with us, or request another service, we will register your personal data. We are careful with the processing and security of your personal data. In doing so, we comply with the laws and regulations in the field of the protection of personal data, such as the General Data Protection Regulation (GDPR). In this privacy statement you can read how we handle your personal data. This statement only applies to the platforms owned by Touch NL. Touch NL is not responsible for the privacy policy of other sites and (online) sources that are mentioned on our platforms. If you have questions about these privacy regulations or have a complaint about the way in which we handle your personal data, you can contact dpo @touchnederland.nl.What is personal data and what is meant by the processing of personal data?Personal data is all information about an identified or identifiable natural person. Any data with which a person can be directly or indirectly identified is personal data. This may concern, for example, your name, contact details and any other data that is or can be linked to you, including, for example, e-mail address, location data, login code, health data, bank details, etc. Under the processing of personal data, every act or set of acts with regarding personal data. Who is the controller for the processing of your personal data? Touch NL is responsible for the processing of your personal data. This means that Touch NL determines the purposes and means of the processing itself and that Touch NL is responsible for compliance with the regulations, which can be reached via dpo@touchnederland.nl. Why do we use your personal data? Touch NL processes your personal data for various purposes. We only process the personal data necessary for this. The following purposes apply to the processing of personal data by Touch NL: • to be able to contact you; • to send you information; • to enter into and implement (member and other) agreements;• for informing and advising;• for making offers;• for conducting investigations;• for participating in panels;• for handling complaints and compliments;• for conducting disciplinary matters;• to be able to represent interests. We also use your personal data for relationship management and activities to increase our database of members, volunteers and other stakeholders at Touch NL and to inform you about our activities. We try to take your preferences into account. If you no longer wish to receive information from Touch NL, Touch NL always offers you the opportunity to unsubscribe from this.Why are we allowed to process your personal data?According to the legislation, in particular the AVG, Touch NL may only process personal data if one of the legal bases applies. Touch NL uses the following legal grounds for the processing of personal data:A. after obtaining permission from the person whose personal data we process; B. in the context of the conclusion and/or execution of an agreement; C. to comply with the law (including accounting, tax obligations and obligations under court orders or other mandatory laws and regulations);D. in connection with the legitimate interests of Touch NL, whereby Touch NL ensures that the impact on your privacy is as limited as possible. For example, personal data is processed in the event of: • making studies and statistics; • exercising and defending of the rights of Touch NL, for example in case of disputes; • the management of member data or support thereof, including the creation of segments and profiles for the management of members or for detecting the needs of the members; • maintaining and improving the website , whereby Touch NL can determine your (click) behavior by visiting our website in order to be able to provide you with targeted information on that basis. The logic that Touch NL uses is that your IP address is linked to your actions and your preferences are determined on that basis. We always ask for your explicit permission in advance (see our Cookie Statement).Game Rules Photography and AVGMain RuleWhat is the main rule? Photos and videos of people who are recognizable in the image may only be published if these people have actively given permission for this. In concrete terms, this means: a person must have indicated 'yes' (in writing or digitally) and the parent(s)/guardian(s) have given permission for minor children. This applies to online photos as well as photos in a club magazine or folder. Exception: journalistic purposes. No permission is required for the use of visual material in the context of reporting an event (so-called journalistic purposes). This also applies when it comes to minors. When promoting a specific event or the association, this is also allowed without explicit permission. In all cases, however, it must always be checked whether the use of visual material does not infringe too much on someone's privacy and contributes to the journalistic purpose.Photos by the publicSpectators or attendees are allowed to take photos from the spectator accommodation during an event or match before using it in private sphere. Publishing photos on the internet is only allowed if permission has been given by all persons in the photo. Touch NL is not responsible if photos are published without permission.Photos for reportingIn the context of reporting, photographers from, for example, newspapers and magazines are allowed to take photos of competitions. Provided they report to the competition affairs secretariat of the various committees at the latest one week prior to the competitions to obtain permission. Touch NL applies these additional competition rules around AVG specifically for gymnastics.Photos for commercial useIn the context of commercial photography, where photographers take photos of athletes and then publish and sell them, we currently adhere to these guidelines. This means that commercial photography is currently not allowed at Touch NL events. Why is that? As Touch NL we are responsible for the correct implementation of the GDPR legislation. We therefore find it important to follow the GDPR legislation. This means that we need active permission from an athlete/member (and from a parent/guardian in the case of a minor athlete) to be photographed if photographs are used for commercial purposes. Photography in the context of reporting (journalistic purposes) is allowed. The image material may only be used for that purpose.2. The public/attendants are allowed to take pictures from the spectator accommodation, but not to publish them (unless they have permission from the persons in the footage).3. Photography for commercial purposes is not (yet) allowed in national, district and regional competitions in the near future. The active approval per athlete/member is required for this and this is therefore arranged for the next competition season. How long do we keep your personal data? Touch NL does not store personal data longer than necessary for the realization of the purposes for which the data is processed, and in any case as long as specific regulations require. How do we obtain your personal data? If you are a member of a touch club, Touch NL has certain personal data via your club, such as your name, address, age and e-mail address. The club passes this data on to Touch NL after you register and it is only used for administrative and organizational purposes of Touch NL. In other cases we obtain your personal data directly from you and process it, for example when you register for a course, workshop or further training. If you are a member of a touch club (or are registered with a position at a club), some of this data (name, date of birth, gender and e-mail address) is already known at Touch NL. To whom do we provide your personal data? We use third parties to manage our Platforms. It is possible that these third parties have access to your personal data. If that is the case, we will take appropriate measures to ensure that your data is adequately secured and used only for its intended purposes. Your personal data will under no circumstances be sold or shared with third parties by Touch NL. Passing on and receiving personal data within Touch NLTouch NL can exchange your (personal) data between the various employees and volunteers within the organization, insofar as this is necessary considering the purpose of the data processing. Passing on and receiving data outside Touch NLThe purpose of processing your personal data may entail that we share personal data with other organizations. Insofar as there is no explicit consent or legal obligation, this exchange of data takes place solely on the basis of the execution of the agreement between you and Touch NL or when Touch NL has a legitimate interest in this. No commercial use Touch NL will use your personal data do not sell or otherwise make commercially available to third parties without your permission. SecurityTouch NL has taken appropriate technical and organizational measures to protect personal data against loss or against any form of unlawful processing. Touch NL has established an information security policy and has taken physical, organizational and electronic measures with due observance of this. Your data is sent over the internet via secure connections. We contractually impose on third parties engaged in the management and development of the platforms the obligation to respect the confidentiality of your data. Access, deletion and change: what are your privacy rights? You have the right to access your personal data, the right to request correction, limitation or deletion of your personal data and you can also request the transfer of your data. Finally, you can object to the use of your data. If the processing of your data is based on consent, you can withdraw it at any time. You can send your written requests or questions regarding privacy-related matters to: dpo@touchnederland.nl. You will then receive an answer as soon as possible. You are also entitled to submit a complaint about the use of your data to the Dutch Data Protection Authority. Do you want to know more about the legislation in the field of the protection of personal data? Look at laws.overheid.nl. Changes We reserve the right to make changes to this privacy statement. You should therefore regularly check the Privacy Statement for the latest version of our privacy policy. Questions? If you have any questions about our privacy policy, please contact us at dpo@touchnederland.nl. This privacy statement was last modified on December 1, 2018.