ONTARIO SOCCER ASSOCIATION (“OSA”)
PUBLIC INFORMATION ON PRIVACY
This document was last updated June 2010
Article 1 General
1.1 Background - Privacy of personal information is governed by the Personal Information Protection and Electronics Documents Act ("PIPEDA"). This policy describes the way that the OSA collects, uses, safeguards, discloses and disposes of personal information, and states OSA’s commitment to collecting, using and disclosing personal information responsibly. This policy is based on the standards required by PIPEDA and OSA’s interpretation of these responsibilities.
1.2 Purpose –The purpose of this policy is to govern the collection, use and disclosure of personal information in the course of commercial activities in a manner that recognizes the right to privacy of individuals with respect to their personal information and the need of the OSA to collect, use or disclose personal information.
1.3 Definitions – The following terms have these meanings in this Policy:
a) Act – Personal Information Protection and Electronic Documents Act.
b) Commercial Activity – any particular transaction, act or conduct that is of a commercial character.
c) Personal Information – any information about an identifiable individual including information that relates to their personal characteristics including, but not limited to, gender, age, income, home address or phone number, ethnic background, family status, health history and health conditions, NCCP number, education, resumes, fitness results, credit card or chequing information, date of birth, athlete history, birth certificate, performance results, certifications, awards, height, weight, uniform size, shoe size, feedback from coaches and trainers, video footage, photographs, banking information, social insurance number, criminal records check, reference checks, beneficiaries, passport numbers, frequent flyer numbers, and discipline results. Personal information, however, does not include business information (e.g. an individuals’ business address and telephone, which is not protected by PIPEDA.
d) Representatives – Prospective members, members, players, coaches, referees, participants, managers, fans and volunteers within the OSA.
1.4 Application –This Policy applies to (OSA) Representatives in connection with personal information that is collected, used or disclosed during any commercial activity related to the OSA.
1.5 Statutory Obligations – The OSA is governed by the Personal Information Protection, Electronic Documents Act in matters involving the collection, use and disclosure of personal information during a commercial transaction.
1.6 Additional Obligations – In addition to fulfilling all requirements of the Act, the OSA will also fulfill the additional requirements of this Policy. The OSA will not:
a) Disclose personal information to a third party during any business or transaction unless such business, transaction or other interest is properly consented to in accordance with this Policy;
b) Knowingly place themselves in a position where they are under obligation to any organization to disclose personal information;
c) In the performance of their official duties, disclose personal information to family members, friends or colleagues, or to organizations in which their family members, friends or colleagues have an interest;
d) Derive personal benefit from personal information that they have acquired during the course of fulfilling their duties with the OSA; and
e) Accept any gift or favor that could be construed as being given in anticipation of, or in recognition for, the disclosure of personal information.
1.7 Ruling on Policy – Except as provided in the Act, the Board of Directors of the OSA will have the authority to interpret any provision of this Policy that is contradictory, ambiguous, or unclear.
Article 2 Accountability
2.1 Privacy Officer –The Privacy Officer is responsible for the implementation of this policy and monitoring information collection and data security, and ensuring that all staff receives appropriate training on privacy issues and their responsibilities. The Privacy Officer also handles personal information access requests and complaints. The Privacy Officer may be contacted at the following address:
Ontario Soccer Association
C/O Privacy Officer
7601 Martin Grove Road
Vaughan, Ontario, L4L 9E4
email: OSAPrivacyOfficer@soccer.on.ca
Tel: (905) 264-9390
Fax: (905) 264-9445
2.2 Duties – The Privacy Officer will:
a) Implement procedures to protect personal information;
b) Establish procedures to receive and respond to complaints and inquiries;
c) Record all persons having access to personal information;
d) Ensure any third party providers abide by this policy; and
e) Train and communicate to staff information about OSA privacy policies and practices.
Article 3 Identifying Purposes
3.1 Purpose – Personal information may be collected from Representatives and disclosed for purposes that include, but are not limited to, the following:
Communications
a) Receiving communications from the OSA, District Associations, Clubs and Leagues in regards to E-news, newsletters, programs, competitions, training, discipline, appeals, events, activities and other pertinent information.
b) Published articles, media relations and posting on the OSA website, displays or posters. In some cases, videos from an event will be available for purchase.
c) Award nominations, biographies, published articles and media relations.
d) Communication within and between committees, volunteers and Board members.
e) Discipline results and long term suspension list to notify Clubs, Leagues, and District Associations of suspended members.
f) Communications with applicable municipalities who wish to check residency status of individuals.
Registration, Database Entry and Monitoring
g) Disclosure to OSA Clubs, Leagues, District Associations and the Canadian Soccer Association who will use such information for registration and communication of programs, events and activities.
h) Disclosure to OSA Clubs, Leagues, and District Associations for the purpose of relaying and collecting information which is used to direct the public to such Club, League, or District Association and to provide easy access for club-to-club communication.
i) Database entry at the Coaching Association of Canada and to determine level of coaching certification, coaching qualifications and coach selection.
j) Database entry to determine level of officiating certification and qualifications.
k) Registration for programs, events and activities.
l) Determination of member club, eligibility, age group and appropriate level of play/competition.
m) Player Registration, outfitting uniforms, and various components of athlete and team selection.
n) Technical monitoring, Coach/Club review, officials training, educational purposes, sport promotion, media publications.
Sales, Promotions and Merchandising
o) Purchasing equipment, coaching manuals, resources and other products.
p) Promotion and sale of merchandise.
General
q) Travel arrangement and administration.
r) Implementation of the OSA screening program.
s) Medical emergency, emergency contacts or reports relating to medical or emergency issues.
t) Determination of membership demographics and program wants and needs.
u) Managing insurance claims and insurance investigations.
v) Video recording and photography for personal use, and not commercial gain, by spectators, parents and friends.
w) Video recording and photography for promotional use, marketing and advertising by the OSA, District Association, Clubs and Leagues.
x) Payroll, honorariums, company insurance and health plan.
3.2 Purposes not Identified – The OSA will seek consent from individuals when personal information is used for commercial purpose not identified herein. This consent will be documented as to when and how it was received.
Article 4 Consent
4.1 Consent – The OSA will obtain consent by lawful means from individuals at the time of collection and prior to the use or disclosure of this information. The OSA may collect personal information without consent where reasonable to do so and where permitted by law.
4.2 Implied Consent – By providing personal information to the OSA, individuals are consenting to the use of the information for the purposes identified in this policy.
4.3 Requirement – The OSA will not, as a condition of a product or service, require an individual to consent to the collection, use or disclosure of personal information beyond that required to fulfill the specified purpose of registration or the product or service.
4.4 Form – Consent may be written or implied. In determining the form of consent to use, the OSA will take into account the sensitivity of the information, as well as the individual’s reasonable expectations. Individuals may consent to the collection and specified used of personal information in the following ways:
a) Completing and/or signing a registration form or an application form;
b) Checking a check off box;
c) Providing written consent either physically or electronically;
d) Consenting orally in person; or
e) Consenting orally over the phone.
4.5 Withdrawal – An individual may withdraw consent in writing, to the collection, use or disclosure of personal information at any time, subject to legal or contractual restrictions provided the individual gives one week’s notice of such withdrawal to the OSA. The OSA will inform the individual of the implications of such withdrawal.
4.6 Legal Guardians – Consent will not be obtained from individuals who are minors, seriously ill, or mentally incapacitated and therefore will be obtained from a parent, legal guardian or person having power of attorney.
4.7 Exceptions for Collection – The OSA is not required to obtain consent for the collection of personal information if:
a) It is clearly in the individual's interests and consent is not available in a timely way;
b) Knowledge and consent would compromise the availability or accuracy of the information and collection is required to investigate a breach of an agreement or contravention of a federal or provincial law;
c) The information is for journalistic, artistic or literary purposes; or
d) The information is publicly available as specified in the Act.
4.8 Exceptions for Use – The OSA may use personal information without the individual's knowledge or consent only:
a) If the OSA has reasonable grounds to believe the information could be useful when investigating a contravention of a federal, provincial or foreign law and the information is used for that investigation;
b) For an emergency that threatens an individual's life, health or security;
c) For statistical or scholarly study or research;
d) If it is publicly available as specified in the Act;
e) If the use is clearly in the individual's interest and consent is not available in a timely way; or
f) If knowledge and consent would compromise the availability or accuracy of the information and collection was required to investigate a breach of an agreement or contravention of a federal or provincial law.
4.9 Exceptions for Disclosure – The OSA may disclose personal information without the individual's knowledge or consent only:
a) To a lawyer representing the OSA;
b) To collect a debt the individual owes to the OSA;
c) To comply with a subpoena, a warrant or an order made by a court or other body with appropriate jurisdiction;
d) To a government institution that has requested the information, identified its lawful authority, and indicated that disclosure is for the purpose of enforcing, carrying out an investigation, or gathering intelligence relating to any federal, provincial or foreign law; or that suspects that the information relates to national security or the conduct of international affairs; or is for the purpose of administering any federal or provincial law;
e) To an investigative body named in the Act or government institution when the OSA believes the information concerns a breach of an agreement, or a contravention of a federal, provincial, or foreign law, or suspects the information relates to national security or the conduct of international affairs;
f) To an investigative body for the purposes related to the investigation of a breach of an agreement or a contravention of a federal or provincial law;
g) In an emergency threatening an individual's life, health, or security (the OSA will inform the individual of the disclosure);
h) For statistical, scholarly study or research;
i) To an archival institution;
j) 20 years after the individual's death or 100 years after the record was created;
k) If it is publicly available as specified in the regulations; or
l) If otherwise required by law.
Article 5 Limiting Collection, Use, Disclosure and Retention
5.1 Limiting Collection, Use and Disclosure – The OSA will not collect, use or disclose personal information indiscriminately and will be collected fairly, by lawful means. Information collected will be for the purposes specified in Article 3.1, except with the consent of the individual or as required by law.
5.2 Retention Periods – Personal information will be retained indefinitely unless requested otherwise by the individual.
5.3 Exception – Personal information that is used to make a decision about an individual will be maintained for a minimum of one year of time to allow the individual access to the information after the decision has been made.
Article 6 Accuracy
6.1 Accuracy – Personal information will be accurate, complete and as up to date as is necessary for the purposes for which it is to be used to minimize the possibility that inappropriate information may be used to make a decision about the individual.
Article 7 Safeguards
7.1 Safeguards – Personal information will be protected by security safeguards appropriate to the sensitivity of the information against loss or theft, unauthorized access, disclosure, copying, use or modification.
7.2 Employees – Employees will be made aware of the importance of maintaining personal information confidential and will be required to sign confidentiality agreements.
7.3 Confidentiality – Every individual at all levels, who has access to personal information collected by the OSA, will sign a confidentiality Agreement which requires the individual to comply with this Privacy Policy.
Article 8 Openness
8.1 Information – Information made available to individuals will include:
a) The name or title, and the address, of the person who is accountable for OSA’s privacy policy and practices and to whom complaints or inquiries can be forwarded;
b) The means of gaining access to personal information held by the OSA; and
c) A description of the type of personal information held by the OSA.
Article 9 Individual Access
9.1 Access - Upon written request, and with assistance from the OSA, an individual may be informed of the existence, use and disclosure of his or her personal information and will be given access to that information. As well, an individual is entitled to be informed of the source of the personal information along with an account of third parties to whom the information has been disclosed.
9.2 Response - Requested information will be disclosed to the individual within 30 days of receipt of the written request at no cost to the individual, or at nominal costs relating to photocopying expenses, unless there are reasonable grounds to extend the time limit.
9.3 Denial - An individual may be denied access to his or her personal information if:
a) This information is prohibitively costly to provide;
b) The information contains references to other individuals;
c) The information cannot be disclosed for legal, security or commercial proprietary purposes;
d) The information is subject to solicitor-client or litigation privilege.
9.4 Reasons - Upon refusal, the OSA will inform the individual the reasons for the refusal and the associated provisions of PIPEDA.
9.5 Identity – Individuals will be required to complete and submit an “Information Access – Correction Form”, with two forms of identification (1 Photo ID), in order to determined the existence, use and disclosure of their personal information. Individuals wishing to opt-out of the collection, use or disclosure of their personal information will be required to complete and submit an “Opt Out Request Form” with two forms of identification (1 Photo ID).
Article 10 Challenging Compliance
10.1 Challenges – An individual will be able to challenge compliance with this Policy and the Act to the designated individual accountable for compliance.
10.2 Procedures – Upon receipt of a complaint the OSA will:
a) Record the date the complaint is received;
b) Notify the Privacy Officer who will serve in a neutral, unbiased capacity to resolve the complaint;
c) Acknowledge receipt of the complaint by way of e-mail or telephone conversation and if necessary clarify the nature of the complaint;
d) Determine whether the complaint is frivolous or vexatious and within the jurisdiction of this Policy. If it is determined the complaint is frivolous or vexatious or outside the jurisdiction of this Policy, the complaint will be dismissed immediately. The Privacy Officer’s decision to the acceptance or dismissal of the complaint may not be appealed.
e) If it is determined that the complaint is not frivolous and vexatious and within the jurisdiction of this Policy, the Privacy Officer will investigate the complaint and take corrective action to resolve the matter.
f) Notify the complainant the outcome of the investigation and any relevant steps taken to rectify the complaint.
10.3 Whistle-blowing – The OSA will not dismiss, suspend, demote, discipline, harass or otherwise disadvantage any OSA Representative, and other decision-makers within the OSA or deny that person a benefit because the individual, acting in good faith and on the basis of reasonable belief:
a) Disclosed to the commissioner that the OSA has contravened or is about to contravene the Act;
b) Has done or stated an intention of doing anything that is required to be done in order to avoid having any person contravene the Act; or
c) Has refused to do or stated an intention of refusing to do anything that is in contravention of the Act.
Article 11 IP Address
11.1 The OSA does not collect, use or disclose IP Addresses.
Article 12 Cookies
12.1 The OSA does not use cookies to identify specific individuals.
Article 13 Copyright and Legal Disclaimer
13.1 This web site is a product of the OSA. The information on this web site is provided as a resource to those interested in the OSA. The OSA disclaims any representation or warranty, express or implied, concerning the accuracy, completeness or fitness for a particular purpose of the information. Persons accessing this information assume full responsibility for the use of the information and understand and agree that the OSA is not responsible or liable for any claim, loss or damage arising from the use of this information. Reference to specific products, processes or services does not constitute or imply recommendation or endorsement by the OSA. The OSA also reserves the right to make changes at any time without notice.
13.2 Links made available through this website may allow you to leave the OSA site. Please be aware that the internet sites available through these links are not under the control of the OSA. Therefore, the OSA does not make any representation to you about these sites or the materials available there. The OSA is providing these links only as a convenience to you, and in no way guarantees these links and the material available there. The OSA is not responsible for privacy practices employed by other companies or websites.
Article 14 Applicable Law
14.1 This site is created and controlled by the OSA in the province of Ontario. As such, the laws of the province of Ontario will govern these disclaimers, terms and conditions.