Any GDPR experts about?

[PasDeGeeGees]

Could anyone help with the wording I need please, on a membership application form for a society. It is a very small local club relating to a hobby (about 40 members) and members' details are held only for membership admin and to contact members about club activities - nothing else. We don't share or pass the details on to any other party.

The form asks for name, address, phone number and contact email and the list is held by the membership secretary.

We have an annual membership application form which I am updating (lucky me), and the GDPR consent wording needs to go on the bottom of the form.

I've looked online, but most of what I've found seems to be for commerce or industry, or for marketing, and I can't find what I'm looking for at all.

All advice gratefully received

You can use legitimate interest as a lawful reason for storing data - as you can't really run the club without such data. It's what someone expects.

You don't need consent to store their data. It's the wrong reason in this case.

You could ask if people want to expect email newsletters - although I'd argue that it's expected that you would want to communicate with people.

You could have a privacy notice explaining what happens with their data. Nothing too complex.

Your details will be stored on our database and not shared with other 3rd parties without your permission, unless we are legally required to share it. You can find full details of how we use your data and your rights in our privacy policy.

So isn't there specific wording then?

So isn't there specific wording then

Not really - there are things you need to address in your privacy policy such as the rights someone has over their data, subject access requests etc.

But in your case, it's not consent to store data. Slightly fussy - but consent needs to be 'freely given' and if you need their data to be members, then it's not being freely given. Legitimate Interest is the best one.

if you need their data to be members, then it's not being freely given Well, they don't have to join and pay annually. They can just turn up and pay per meeting as a visitor if they want to.

They can just turn up and pay per meeting as a visitor if they want to

In that case, you don't need their data as they aren't members.
If you need their data to be a member, then that's LI.

Oh yes, I see. I'll ask the committee to decide whether they think new wording is needed after all then.
Thank you.