Data Processing Agreement - March 2018 - Club Template

Sep 16, 2026

Template wording for a club to enter into a data processing agreement with third parties that process personal data on the club’s behalf. The agreement defines the parties as controller (the club) and processor (the supplier), sets the commencement and term, and governs how processing must follow the club’s instructions and data protection legislation. It also specifies supplier undertakings, including implementing appropriate technical and organisational security measures.

LanguageEnglish

CategoryLetters

FormatPDF

Pages9

Reading Time3 min

AccessFree to download

Definitions and Interpretation

Term

Processing and obligations of the Supplier

sportscotland Template data processing agreement Driven to deliver This template agreement wording is intended for use by clubs when engaging third parties to process personal data on behalf of the club. Please read the separate guidance note before using this template. Except where highlighted in the template wording, clubs should not amend the text without first obtaining legal advice. Data Processing Agreement [TEMPLATE] between [INSERT NAME OF CLUB] and [INSERT NAME OF SUPPLIER] This Agreement is between: 1. [INSERT REGISTERED NAME OF CLUB],[an unincorporated association of its members established in Scotland OR a company incorporated under the Companies Act 2006 (Company Number [INSERT NUMBER])], having its [address OR registered office] at [INSERT REGISTERED ADDRESS](the “ClubClub”); and 2. [INSERT REGISTERED NAME OF SUPPLIER], a company incorporated under the Companies Act 2006 (Company Number [INSERT NUMBER]), having its registered office at [INSERT ADDRESS](the “Supplier”), together referred to as the “Parties” and separately as a “Party”. Background: A. The Club is the Controller in respect of the Club Personal Data. B. The Supplier has agreed to carry out certain Processing functions in respect of the Club Personal Data and to act as a Processor in respect of the Club Personal Data. C. The Parties have therefore entered into this Agreement to regulate the Processing of the Club Personal Data by the Supplier in terms of the Data Protection Legislation. It is agreed as follows: 1. Definitions and Interpretation 1.1 The following words and phrases used in this Agreement shall have the following meanings except where the context otherwise requires: “Agreement” means this agreement, including the Schedule; “Business Day” means a day (other than a Saturday, Sunday or public holiday) when banks in Glasgow are open for business; Driven to deliver [www.harpermacleod.co.uk](www.harpermacleod.co.uk) “Commencement Date” means [INSERT DATE]; “Controller” has the meaning set out in the Data Protection Legislation and includes the definition of“Data Controller”; “Club Personal Data” means the categories Personal Data which the Club has identified for Processing by the Supplier under this Agreement, short particulars of which are set out in Part 1 of the Schedule; “Data Protection Impact Assessment”,“Data Subject”,“Information Commissioner’s Office”,“Personal Data” and “Process”(including any derivatives thereof) have the meanings set out in the Data Protection Legislation “Data Protection Legislation” means any law applicable relating to the processing, privacy and use of personal data, including, without limitation: (i) the Data Protection Act 1998 and the Privacy and Electronic Communications (EC Directive) Regulations 2003, SI 2003/2426, and any laws or regulations implementing Directive 95/46/EC (Data Protection Directive) or Directive 2002/581EC; (ii) the General Data Protection Regulation (EU) 2016/679, and/or any corresponding or equivalent national laws or regulations; and / or (iii) any judicial or administrative implementation of any of the above, any guidance, guidelines, codes of practice, codes of conduct or approved certification mechanisms issued by the Information Commissioners Office, or other regulatory or supervisory authority responsible for administering Data Protection Legislation; “Processor” has the meaning set out in the Data Protection Legislation and includes the definition of“Data Processor”; “Purpose(s)” means the purpose as determined by the Club and set out in Part 2 of the Schedule; and“Schedule” means the schedule attached as relative to this Agreement. 1.2 In this Agreement: 1.2.1 the singular includes the plural and vice versa; 1.2.2 references to statutes, any statutory instrument, regulation or order shall be construed as a reference to such statute, statutory instrument, regulation or order as amended or re-enacted from time t

FAQs

Who are the parties in this data processing agreement?

The agreement is between the club (the Controller in respect of club personal data) and the supplier (the Processor). Both are referred to as the “Parties” and individually as a “Party”.

What does the supplier have to do with the club personal data?

The supplier must process the club personal data strictly according to the club’s instructions and applicable data protection legislation, acting as a processor throughout the term.

What security measures are required from the supplier?

The supplier must put in place appropriate technical and organisational measures to ensure security of the personal data and protect against unauthorised or unlawful processing and accidental loss, destruction, or damage.

Sep 16, 2026

Upload by Mary Man