Box Cleva
DATA PROTECTION | GDPR
GENERAL PRIVACY STATEMENT
BOX CLEVA are fully committed to maintaining compliance with Data Protection and specifically the General Data Protection Regulations (in force from 25 May 2018) as well as maintaining the trust and confidence of attendees and their families / guardians, visitors to our web site and the individual trainers / contractors working on our behalf.
Privacy Impact Assessments (PIA's) will be carried out for both attendees and our trainers / contractors as and when required.
This charity is currently exempt from registration with the ICO.
Data protection is regularly monitored and reviewed and is reported on at full Board of Trustees level on a quarterly basis.
ATTENDEES
We do not retain or hold sensitive personal data relating to the attendees at our initiatives.
When you register you will be asked to complete a Registration Card which the attendee or their parent / guardian will retain and must be brought to each session. We also ask that a MEDIA CONSENT FORM is completed for every attendee.
The MEDIA CONSENT FORM does not contain any sensitive personal data but allows us to ascertain if we are able to use an individual attendees image for our website etc. They are securely stored and are used only as evidence of agreement for the use of images - we do not further process this information or share it with anyone else. They are retained for no longer than absolutely required, after which they are securely destroyed. If it is appropriate, you will be asked to complete a new form.
For more information please contact: [email protected]
OUR TRAINERS | CONTRACTORS
We only collect, store, process and retain information which is required either by law or which allows us to legally function as a charity.
You may rescind your consent for us to hold, process or retain your personal data at any time. Doing so will have the consequence of your not being able to work on behalf of Box Cleva..
For more information please contact: [email protected]
COMPLAINTS
Data subjects have the right to make a formal complaint to the ICO, should they believe that their rights under data protection legislation have been breached.