Who controls your data?
The controller is Glasgow Islay Gaelic Choir, an unincorporated association, Scottish charity SC010028, at 25 Gartconnell Road, Bearsden, Glasgow, G61 3BZ. Data-protection contact: info@glasgowislaygaelicchoir.org.
Lottery entry and payment information
The join form asks for your chosen chances, date of birth, name, address, optional phone numbers, email address, marketing preferences and optional winner-publicity consent. These details stay in the current page while you complete the form; the website does not save them or send them as you type.
Online sign-up is currently disabled. Once entry opens, submitting a valid form will send these details directly from your browser to the named entry platform. This website’s server does not receive the form submission. Bank and card details are never requested here; payment takes place on the entry platform. Lottery management: [External Lottery Manager, if any]. Providers, their roles and any international transfers: [Entry, payment and verification providers and data transfers].
Lottery administration may involve names, contact details, date of birth, address, entry numbers, payment records and age or identity-verification data. The confirmed collection process must be explained by the entry provider before registration.
Why data is used
Contract is the basis for administering entries and paying prizes. Legal obligations cover applicable gambling, accounting and age-verification duties. Legitimate interests cover proportionate security, fraud prevention and handling enquiries, subject to your rights. Consent is required for optional marketing and winner publicity.
Contact, winners and self-exclusion
Messages are used to answer the enquiry. Only agreed winner information may be publicised, and publicity is optional. Self-exclusion records must be kept for the period needed to enforce exclusion and prevent marketing during that period.
Winner publicity procedure: Names, photographs and personal stories are published only with the winner’s permission; declining publicity does not affect a prize. Exclusion procedure: Request exclusion by email or post for six months to five years; rejoining requires a fresh request after the exclusion ends and a 24-hour cooling-off period.
Website security and cookies
When the protected entry route is configured, security checks process technical browser, device and request information to help prevent abuse. The site uses no advertising or optional analytics scripts. See the cookie policy for security-cookie details.
Sharing, security and retention
Access must be limited to authorised people and providers who need the data, with appropriate safeguards. [Entry, payment and verification providers and data transfers]. Retention: [Data-retention periods].
Your rights
Under the UK GDPR and Data Protection Act 2018 you may request access, correction, deletion, restriction or portability, and object to certain processing. These rights depend on the circumstances. You may withdraw consent without affecting earlier lawful processing.
Contact info@glasgowislaygaelicchoir.org to exercise your rights. You can complain to the Information Commissioner’s Office.