Binding Corporate Rules (BCRs) for Happy Dugout™ Fastpitch Softball Coaching School

 

  1. Purpose and Scope

These Binding Corporate Rules (BCRs) establish the framework for the protection of personal data within [Your Online Coaching Business Name] and its subsidiaries (collectively referred to as the "Group"). The BCRs apply to all intra-group transfers of personal data across borders, ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

 

  1. Definitions
  • Personal Data: Any information relating to an identified or identifiable individual.
  • Data Subject: The individual to whom the personal data relates (e.g., students, clients, employees).
  • Data Controller: The entity that determines the purposes and means of processing personal data.
  • Data Processor: The entity that processes personal data on behalf of the Data Controller.
  • Intra-Group Transfer: The transfer of personal data between entities within the Group.
  1. Principles of Data Protection

The Group is committed to the following principles:

  • Lawfulness, Fairness, and Transparency: Personal data will be processed lawfully, fairly, and transparently.
  • Purpose Limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
  • Data Minimization: Only the minimum amount of personal data necessary will be collected and processed.
  • Accuracy: Personal data will be kept accurate and up to date.
  • Storage Limitation: Personal data will be retained only for as long as necessary.
  • Integrity and Confidentiality: Personal data will be processed securely to protect against unauthorized access, loss, or damage.
  1. Roles and Responsibilities
  • Data Controller: Each Group entity acting as a Data Controller is responsible for ensuring compliance with these BCRs and applicable data protection laws.
  • Data Processor: Group entities acting as Data Processors must process personal data only on documented instructions from the Data Controller.
  • Data Protection Officer (DPO): The Group will appoint a DPO to oversee compliance with these BCRs and applicable data protection laws.
  1. Intra-Group Transfers
  • Legal Basis:Intra-group transfers of personal data will be based on these BCRs, which provide adequate safeguards as required by applicable data protection laws.
  • Transparency:Data subjects will be informed of intra-group transfers through privacy notices.
  • Accountability:Each Group entity will maintain records of intra-group transfers and ensure compliance with these BCRs.
  1. Data Subject Rights
  • The Group will ensure that data subjects can exercise their rights, including:
  • Right to Access:Data subjects can request access to their personal data.
  • Right to Rectification:Data subjects can request corrections to inaccurate or incomplete personal data.
  • Right to Erasure:Data subjects can request the deletion of their personal data under certain conditions.
  • Right to Restrict Processing:Data subjects can request restrictions on the processing of their personal data.
  • Right to Data Portability:Data subjects can request their personal data in a structured, commonly used format.
  • Right to Object:Data subjects can object to the processing of their personal data.
  1. Security Measures

The Group will implement appropriate technical and organizational measures to protect personal data, including:

  • Encryption of personal data during transmission and storage.
  • Regular security assessments and audits.
  • Employee training on data protection and security.
  1. Breach Notification

In the event of a personal data breach, the Group will:

  • Notify the relevant supervisory authority within 72 hours.
  • Inform affected data subjects without undue delay if the breach poses a high risk to their rights and freedoms.
  1. Audits and Compliance
  • The Group will conduct regular audits to ensure compliance with these BCRs.
  • Non-compliance will result in corrective actions and, if necessary, disciplinary measures.
  1. Amendments

These BCRs may be amended from time to time to reflect changes in applicable laws or the Group's operations. Amendments will be communicated to all Group entities and, where required, to supervisory authorities.

  1. Governing Law and Dispute Resolution
  • These BCRs are governed by the laws of Florida, United States.
  • Any disputes arising from these BCRs will be resolved through Legal Counsel  in United States.
  1. Contact Information

For questions or concerns about these BCRs, please contact: