On 25th May 2018, a new European Union (EU) data protection law, the General Data Protection Regulation (GDPR), takes effect. The GDPR gives individuals in the EU more control over how their data is used and places certain obligations on businesses that process information of those individuals.
The regulation contains 6 principles
- Personal data should be processed fairly, lawfully and in a transparent manner.
- Data should be obtained for specified and lawful purposes and not further processed in a manner that is incompatible with those purposes.
- The data should be adequate, relevant and not excessive.
- The data should be accurate and where necessary kept up to date.
- Data should not be kept for longer than necessary.
- Data should be kept secure.
What information do we collect?
We hold contact details and correspondence addresses as part of the booking process for classes, workshops and events within the hall.
We hold details for those who are the main contact for regular user groups or for bookings who wish to be invoiced.
We hold contact details of trustees and other volunteers that help with the running of the hall from time to time.
We hold the details of any employees of the hall.
How do we use the information?
We use the data to communicate directly with you about the hall and/or your booking. We also use the data to assist with the running of the hall and improving the service we offer. Employee details are used for paying salaries and contacting HMRC.
How is the information shared?
Personal information is not shared without the consent of the individual and is not sold on to other companies.
Non personal information may be collated to measure and improve services provided.
How do we manage or delete information?
We store the data as long as is necessary to provide products and services applicable to you.
Information associated with accounts will be kept until the account is no longer required and is then deleted.
You can request removal of information and accounts with us at any time.
The data is stored electronically and is password protected. Any written information, in paper format, of a personal nature will be shredded before being disposed of.
How do we respond to legal requests?
We may share your information in response to verified legal requests, (e.g. court orders/search warrants), if we have good faith the law requires us to.
We may retain information from accounts disabled due to violation of terms, for the term of one year to prevent repeat violation.
How to contact us
Email: marybankhall@gmail.com
Write: Fairburn Memorial Hall, Achonachie Road, Muir of Ord, IV6 7QE