GDPR - holding third party information?

[Lucan Unlordly]

We run a sports database that club officials use to keep in contact with each other and are updating the necessary disclaimers etc.,

However, part of the database holds personal information, names, dates of birth etc., of individuals within those clubs which are used for creating League Tables etc., (Limited access - Password protected etc.,) On this basis I believe we are considered to be Data Processors and have no obligation to additionally vet the information provided by 'our' customers.

Trying to get through to the ICO for a definitive answer but without success so any guidance would be helpful.....

 

[Matt Tomkin]

From what I understand you would be the data processor in this. We're looking at bringing in contracts to tie this side of GDPR up but not sure how this would work for you.

 

[Corjr]

Feeling a bit overwhelmed by the 11 chapters and 99 articles of the GDPR text? You can now search them in 24 languages with Algolia!
gdpr.algolia.com/

and ecomply.io which I found helpful.

 

[Corjr]

Feeling a bit overwhelmed by the 11 chapters and 99 articles of the GDPR text? You can now search them in 24 languages with Algolia!
gdpr.algolia.com/

ecomply.io/ and gdpremailcopy.com/ which I found helpful.

 

[mattk]

If you are the Data Processor, who is the Data Controller?