Activity	Type of data	Lawful basis for processing including basis of Legitimate Interest	Retention period
To apply for tickets to The Championships, Wimbledon or any other ticketed event We organise	(a) Identity Data (b) Contact Data (c) Financial Data (d) Transaction Data (e) Marketing and Communications Data (f) Sensitive Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (to facilitate your application).	5 years from last application
To sign up to myWimbledon	(a) Identity Data (b) Contact Data (c) Profile Data (d) Usage Data (e) Technical Data (f) Marketing and Communications Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (to facilitate your registration with MyWimbledon. (c) To contact you about news and information regarding the Championships, the Club and the Grounds and your myWimbledon benefits which we feel may be of interest to you based on your previous interaction or preferences, including ballots and ticketed events.	5 years from last interaction with Us.
To use the Guest WiFi service on the premises throughout the year (not otherwise dealt with in this table).	(a) Identity Data (b) Contact Data (c) Profile Data (d) Technical Data (e) Usage Data (f) Marketing and Communications Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (to facilitate your Wi-Fi service which includes storage of Identity Data so that individuals do not have to sign in multiple times throughout The Championships and to analyse and improve Wi-Fi for future Championships).	5 years from last interaction with Us.
To process and deliver your order (including tickets and food and drink at The Championships, Wimbledon) or any other ticketed event we organise, including: (a) Manage payments, fees and charges; and (b) Collect and recover money owed to Us.	(a) Identity Data (b) Contact Data (c) Financial Data (d) Transaction Data (e) Marketing and Communications Data (f) Sensitive Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (to keep our records updated and to recover debts due to Us).	5 years from order completion.
To manage Our relationship with you which will include: (a) Notifying you about changes to Our terms or Privacy Policy; and (b) Asking you to leave a review or take a survey.	(a) Identity Data (b) Contact Data (c) Profile Data (d) Marketing and Communications Data	(a) Performance of a Contract with you. (b) Necessary to Comply with a Legal Obligation. (c) Necessary for Our Legitimate Interests (to keep Our records updated and to study how customers use Our products/services).	5 years from last correspondence.
To enable you to partake in a prize draw, competition or complete a survey.	(a) Identity Data (b) Contact Data (c) Profile Data (d) Usage Data (e) Marketing and Communications Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (to study how customers use Our products/services, to develop them and grow Our business).	5 years from prize draw, competition or survey.
To enable you to access the AELTC premises with the aim of: (a) creating a safe environment (which may include observing protocols around limiting the number of visitors and staff within our spaces, wearing face coverings and installing signage with the aim of ensuring social distancing measures are observed; (b) adhering to the most up-to-date government instructions and guidelines; and (c) maintaining and monitoring facilities for health and safety purposes. For further information, please see our Conditions of Entry relating to COVID-19.	(a) Identity Data (b) Contact Data (c) Sensitive Data	(a) Necessary to Comply with a Legal Obligation. (b) Necessary for Our Legitimate Interests (to keep Our records updated and to study how customers use Our products/services).	For as long as necessary to fulfil the purposes We collected it for, including for the purposes of satisfying any legal requirements.
To administer and protect Our business and the AELTC Digital Platforms (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).	(a) Identity Data (b) Contact Data (c) Technical Data	(a) Necessary for Our Legitimate Interests (for running Our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise). (b) Necessary to Comply with a Legal Obligation	5 years from collection of data.
To deliver relevant AELTC Digital Platform content and advertisements to you and measure or understand the effectiveness of the advertising We serve to you.	(a) Identity Data (b) Contact Data (c) Profile Data (d) Usage Data (e) Marketing and Communications Data (f) Technical Data	(a) Necessary for Our Legitimate Interests (to study how customers use Our products/services, to develop them, to grow Our business and to inform Our marketing strategy).	5 years from collection of data.
To use data analytics to improve the AELTC Digital Platforms and Our products/services, marketing, customer relationships and experiences.	(a) Technical Data (b) Usage Data	(a) Necessary for Our Legitimate Interests (to define types of customers for Our products and services, to keep the Site updated and relevant, to develop Our business and to inform Our marketing strategy).	5 years from last interaction.
To make suggestions and recommendations to you about goods or services (including debentures) that may be of interest to you.	(a) Identity Data (b) Contact Data (c) Technical Data (d) Usage Data (e) Profile Data	(a) Consent (to send you information about Our products/services). For more information about how we market to you, please see paragraphs 4.6 to 4.9 below.	5 years from last interaction.
To facilitate and publish the results of Our events.	(a) Identity Data (b) Profile Data	(a) Necessary for Our Legitimate Interests (We need the ability to publish and store the results, challenge results after the specific Event and keep a historic log of this data all for the purpose of staging the event(s) and for archival and historic research).	In perpetuity.
To televise, film and/or otherwise record Our events and to take photographs and record footage of Our events.	(a) Identity Data	(a) Necessary for Our Legitimate Interests (We need the ability to publish, display, sell and distribute Our events by means of film, television, radio, print media, internet, publicity material or any other media now or in the future).	In perpetuity.
To invite you to participate, and for you to participate, in Our hospitality	(a) Identity Data (b) Contact Data (c) Marketing and Communications Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (We need this data to be able to give you the option to attend, and to provide you with, high quality hospitality.	5 years since the last invitation or purchase, whichever is later.
To sign up to jobs.wimbledon.com	(a) Identity Data (b) Contact Data (c) Profile Data (d) Usage Data (e) Technical Data (f) Marketing and Communications Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (to facilitate your registration with jobs.wimbledon.com). (c) To contact you about news and information regarding future employment opportunities which we feel may be of interest to you based on your previous interaction or preferences.	5 years from your last interaction with Us.
To apply for a part-time or full-time position of employment with Us	(a) Identity Data (b) Contact Data (c) Employment Data (d) Sensitive Data	(a) Necessary for Our Legitimate Interests (We require this data to consider your suitability for the particular position with Us). (b) Necessary to Comply with a Legal Obligation (We request certain data about you in order to carry out our obligations under employment and social protection laws, including the Employment Rights Act 1996 and the Equality Act 2010).	12 months following the conclusion of the recruitment process for which you have applied, unless you have accepted an offer to work with Us in which case the retention period shall be in accordance with Our employee retention policy.
To volunteer for Our events (including ball boys and girls).	(a) Identity Data (b) Contact Data (c) Profile Data (d) Marketing and Communications Data (e) Sensitive Data	(a) Performance of a Contract with you (b) Nessecary for Our Legitimate Interests (We need this data to be able to allow you to participate in Our events and to stage Our events). (c) Necessary to Comply with a Legal Obligation (including security and safety at Our events and tax purposes).	5 years since your last application to volunteer.
To be included on Our media lists.	(a) Identity Data (b) Contact Data (c) Marketing and Communications Data	(a) Necessary for Our Legitimate Interests (We need this data to be able to enable Our events to be covered in the media).	5 years.
To be a partner, sponsor or supplier or potential partner, sponsor or supplier of or to Us or Our events.	(a) Identity Data (b) Contact Data (c) Financial Data (d) Transaction Data (e) Marketing and Communications Data	(a) Performance of a Contract with you (as Our partner, sponsor or supplier, including when processing payments and verifying bank details). (b) Necessary for Our Legitimate Interests (We need this data to be able to contact you about becoming a partner, sponsor or supplier to allow you to become officially associated with Us or Our event(s)). (c) Necessary to Comply with a Legal Obligation (including for tax purposes).	5 years after the end of any contract (if any) or 6 years from the last correspondence about being a potential partner, sponsor or supplier.
To be a medical professional including doctor, podiatrist and physiotherapist at one of Our events.	(a) Identity Data (b) Contact Data (c) Marketing and Communications Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (We need this data to be able to allow you to provide your services at Our events, to ensure that you are adequately qualified and to ensure that We have the requisite number of medical professionals at Our events).	5 years from the date of the last event you assisted with.
To attend one of Our events in any capacity that requires photographic accreditation (not otherwise dealt with in this table).	(a) Identity Data (b) Contact Data (c) Sensitive Data	(a) Necessary to Comply with a Legal Obligation (b) Performance of a Contract with you (c) Necessary for Our Legitimate Interests (We need this for security reasons).	5 years after the last time you were accredited.
To participate in Our events if you are under 13 years of age.	(a) Identity Data (b) Contact Data	(a) Consent (parental consent either obtained by Us or via a third party, please see paragraph 4.12). (b) Please note that we will rely on Legitimate Interests upon the individual turning 13 years of age (to allow such individual to participate in Our events).	5 years from last participation.
For The Wimbledon Foundation to receive grant applications.	(a) Identity Data (b) Contact Data (c) Transaction Data	(a) Necessary for Our Legitimate Interests (We need this data to analyse the applicants (for example, by area and type of project), and to track an applicant’s record with Us since they may re- apply).	In perpetuity (to obtain data insights for the purposes of assisting with local knowledge and with the charitable purposes of The Wimbledon Foundation).
For The Wimbledon Foundation to allocate grants.	(a) Identity Data (b) Contact Data (c) Financial Data (d) Transaction Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (We need this data to ensure that each grantee continues to comply with the grant conditions and to analyse the applicants (for example, by area and type of project). (c) Necessary to Comply with a Legal Obligation (charity laws and regulations concerning the grant).	In perpetuity (to obtain data insights for the purposes of assisting with local knowledge and with the charitable purposes of The Wimbledon Foundation).
For The Wimbledon Foundation to receive donations.	(a) Identity Data (b) Contact Data (c) Transaction Data	(a) Performance of a Contract with you (b) Necessary for Our Legitimate Interests (We need this data to ensure that each person donating continues to comply with the donation conditions. (c) Necessary to Comply with a Legal Obligation (charity laws and regulations concerning the donation).	5 years or until the conditions attached to any donation expire, whichever is later.
For The Wimbledon Foundation to provide gift in kind donations.	(a) Identity Data (b) Contact Data (c) Transaction Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (We need this data to ensure that each recipient of the donation continues to comply with the donation conditions. (c) Necessary to Comply with a Legal Obligation (charity laws and regulations concerning the donation).	5 years or until the conditions attached to any donation expire, whichever is later.
To respond to general enquires from members of the public about The Wimbledon Foundation.	(a) Identity Data (b) Contact Data	(a) Performance of a Contract with you (b) Necessary for Our Legitimate Interests (to respond to your enquiries).	5 years or until the conditions attached to any donation expire, whichever is later.
To sign up to the Wimbledon Junior Tennis Initiative (“WJTI”).	(a) Identity Data (b) Contact Data (c) Transaction Data (d) Marketing and Communications Data e) Profile Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (to facilitate your application). (c) Consent (parental consent if you are under the age of 13).	3 years from last registration / renewal with WJTI or last interaction with Us as a WJTI member, whichever is later.
To sign up to the AELTC Community Sports Ground (“CSG”).	(a) Identity Data (b) Contact Data (c) Financial Data (d) Transaction Data (e) Marketing and Communications Data (f) Profile Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (to facilitate your application). (c) Consent (parental consent if you are under the age of 13).	2 years from last booking or last interaction as a CSG member with Us as a WJTI member, whichever is later.
To be a member of the All England Lawn Tennis Club.	(a) Identity Data (b) Contact Data (c) Financial Data (d) Transaction Data (e) Marketing and Communications Data (f) Profile Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (to deliver the membership benefits to you).	5 years after expiry or termination of membership.
To facilitate services for debenture holders.	(a) Identity Data (b) Contact Data (c) Financial Data (d) Marketing and Communications Data	(a) Performance of a Contract with you. (b) Necessary for Our Legitimate Interests (to deliver the debenture benefits and services to you). (c) Necessary to Comply with a Legal Obligation (inheritance and tax purposes).	Until all payments have been made to the holder pursuant to the debenture or 10 years from the date that the individual last held the debenture, whichever is later.
To participate as a competitor in any of Our events.	(a) Identity Data (b) Contact Data (c) Transaction Data (d) Technical Data (e) Profile Data (f) Marketing and Communications Data (g) Sensitive Data	(a) Performance of a Contract with you. (b) Legitimate Interests (We need this data to be able to allow you to participate in Our events and to stage Our events). (c) Necessary to Comply with a Legal Obligation (prize money and tax purposes).	15 years from last competition in which the competitor took part.
To administer and deliver the AELTC lost property service.	(a) Identity Data (b) Contact Data	For purpose of legitimate interests (to identify and return lost property to guests).	12 months after the applicable Championships in which Lost Property form is completed for.
To allow guests, players, staff and members use of Our gym facilities (onsite and at any other premises operated by Us).	(a) Identity Data (b) Profile Data (c) Sensitive Data (d) Contact Data	(a) Performance of a Contract with you (contract which allows you to use Our gym). (b) Necessary for Our Legitimate Interests (We need this data to facilitate your use of Our gym). (c) Necessary to comply with legal obligation (including health and safety).	Two years from last interaction with you (the guest), in relation to use of Our gym facilities.