Privacy notice

This privacy notice has been prepared in order to comply with the GDPR (General Data Protection Regulation) which comes into force on 25th May 2018.

I am a sole trader, and can be contacted through my website at www.stephanie-anderson.co.uk . I collect and process data with the explicit consent of the individuals concerned: email addresses and phone numbers are collected, and occasionally postal addresses. Information is stored on Gmail Contacts, and on a computer spreadsheet with access controlled by password, and also protected by anti-virus software and firewall; paper back-up of the data is stored securely. Access to the data is limited to myself and David Anderson.

Photographs/videos of choir members are stored on computer as above, and occasionally used for publicity purposes, online and on posters. This will only be done with the permission of the individuals concerned.

The purposes of data processing are:

·         For the administration of choirs, and the giving out of information to choir members;

·         For the administration of workshops (led by myself, or other leaders that I host);

·         For the administration of a mailing list which aims to send out information about singing events to people who have expressed an interest.

The provision of personal data is not part of a statutory or contractual requirement. People who attend choirs or workshops can withhold consent for their data to be held and processed.

No data will be passed on to third parties. No data is used for automated decision-making such as profiling.

The data will be reviewed every two years, and amended or deleted as necessary.

If there is any breach of data security, I will inform the individuals concerned, and if there is a concern about serious consequences arising from this I will also inform the supervising authority the Information Commissioner’s Office (ICO). Each person has the right to see their data, to have it amended if it is wrong, or to withdraw their consent at any time. They have the right to lodge a complaint with the ICO.

Further information about the GDPR is available at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/

Comments