Privacy Policy

The Data Protection Act 1998

The Data Protection Act 1998 establishes a framework of rights and duties which are designed to safeguard personal data. The Data Protection Act gives individuals the right to know what information is held about them. It provides a framework to ensure that personal information is handled properly.

The Act works in two ways. Firstly, it states that anyone who processes personal information must comply with eight principles, which make sure that personal information is:

  • Fairly and lawfully processed
  • Processed for limited purposes
  • Adequate, relevant and not excessive
  • Accurate and up to date
  • Not kept for longer than is necessary
  • Processed in line with your rights
  • Secure
  • Not transferred to other countries without adequate protection

The second area covered by the Act provides individuals with important rights, including the right to find out what personal information is held on computer and most paper records (called Making a Subject Access Request).

Sport Wales' Use and Storage of Data

We collect personal data in a variety of ways including:

  • application forms for employment with Sport Wales;
  • applications for funding;
  • information requested for mailing lists and databases;
  • surveys and research studies.

We have a legal liability to ensure that personal data is processed in accordance with data protection legislation and all personally identifiable information provided to Sport Wales is processed in accordance with the principles of the Data Protection Act 1998.

We have registered details about our processing of personal data with the Information Commissioner; our Data Protection Registration Number is Z5769715.