OUR DATA PROTECTION NOTICE (2018, compliant with GDPR)
DATA PROTECTION NOTICE- BRACKNELL SLING LIBRARY
Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by [the General Data Protection Regulation 2016/679 (the “GDPR”)].
Who are we?
Bracknell Sling Library is the data controller (contact details below). This means it decides how your personal data is processed and for what purposes.
How do we process your personal data?
The Library complies with its obligations under [the GDPR] by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We use your personal data for the following purposes:
1. To contact customers [email] to notify them that the sling they have hired is due back
2. To send an invoice [via Paypal] to a customer for either an agreed amount for rehire, or to cover a hire cost where it is due.
3. To contact customers [via email, telephone and text] if there is an overdue hire.
4. To follow up any non-returned items (assumed lost, damaged or stolen) via email, text, telephone and post.
5. To inform the customer [email] of any upcoming sling library sessions or special sling library events
Bracknell Sling Library do not pass on or share any personal data with any third party organisations.
What is the legal basis for processing your personal data?
The legal basis is as per article 6/ 1a & 1b of the GDPR (http://www.privacy-regulation.eu/en/article-6-lawfulness-of-processing-GDPR.htm) which states:
1 a) “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”
1 b) “Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.”
How long do we keep your personal data?
We keep your personal data for no longer than reasonably necessary and we only retain your data for the following purposes and use the following criteria to determine how long to retain your personal data. Data is retained for a period of up to 2 years in case of any legal claims relating to hires, and to process hires, returns and invoicing of customers.
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
To exercise all relevant rights, queries of complaints please contact Bracknell Sling Library on firstname.lastname@example.org.