GDPR Article 28 (3) stipulates that there must be a contract between the Controller and Processor which clearly sets out the subject matter of the processing and its duration as well as the nature and purposes of processing, the types of personal data, any particular special categories of data and the obligations and rights of both parties.

 

Failure to have in place a suitable Data Processing Agreement is a breach of the law under GDPR.

We have worked with Table Tennis England to provide a standard DPA that we are happy to adhere to and that Table Tennis England feels provides you with suitable protection. Each organisation will need to adopt this agreement either prior to 25th May or immediately upon login thereafter. Your league should ensure this is done as the responsibility for engaging a DPA lies with the data controller.

This process has been made as easy as possible and will just require your league’s main administrator to login to our admin area, review the agreement and tick a box on-screen to bring it into force.

That is the legal bit taken care of, at least in relation to your usage of TT365 under GDPR.