Privacy Notice - Fitness Suite Members

Although we have tried to make this Privacy Notice as straight forward as possible, some may find it difficult to understand. Please contact the school Data Protection Lead, details at the end of this notice, for further help if needed.

This notice explains how we use information about you and what we do with it. We call this information about you ‘personal data’ or personal information’.

Collecting and storing Fitness Suite Members information

We process personal data relating to Fitness Suite Members and their emergency contacts.

We will not give information about our Fitness Suite Members or their emergency contacts to anyone without consent unless the law allows us to do so.

Storing Members data

We will keep information relating to a Fitness Suite Member for a period of 7 years after the last date of use of the Fitness Suite Facilities.

We will only keep your information for as long as we need it or for as long as the law requires us to. Most of the information we have about you will be in our Fitness Suite Members file. We have a policy which explains how long we keep information, it is called the Records Retention Policy and if you would like to discuss this in greater detail please contact the school’s Data Protection Lead.

Any personal data that we are required to keep about our members is securely stored, with limited access for staff. You will not suffer any detriment or harm by having it stored in/on our secure systems.  We do use a software package to help us manage and administer the use of the Fitness Suite – this software is on a local server and only approved school staff have access to this system.  There are a limited number of staff who have access to this system.  Each member of staff has a unique username and password and these are not shared with anyone.  The third party supplier may occasional need access to the system for maintenance and operational reasons, we have a data sharing agreement in place with this supplier.

We use the hirer data to:

• Administer and manage the Fitness Suite
• To ensure compliance with Health and Safety Statutory Requirements
• To ensure compliance with Insurance Regulations
• To process financial transactions necessary for the hire of our facilities and comply with Financial Regulations

The categories of hirer information that we collect and hold include:

• Personal information (such as – name, address, DOB, phone number, email address)
• Special Category data (such as – Medical Information)
• Bank Details

The lawful basis on which we use this information

All data we process is in accordance with the rules as laid down in statute, including the General Data Protection Regulations.

Where we rely on consent to process personal data about individuals, we ensure that we obtain that consent freely and in a positive manner. Anyone whose personal data is processed on the basis of consent can withdraw that consent easily and quickly. See “Requesting access to personal data & individual rights” listed later in this notice”.

Please note that the main reasons for our processing of personal and sensitive information is due to

1. We need to, to comply with the law
2. We need to, protect someone’s interests
3. To communicate with you/fitness suite members

If you would like to discuss this in greater detail please contact the school’s Data Protection Lead.

Who will see your personal data

We will only share your information with people who have a legal or operational reason to see it.

CCTV

Our school uses Closed Circuit Television cameras for the purposes of monitoring our premises. There are visible signs showing that CCTV is in operation and images from this system are securely stored where only a limited number of authorised persons may have access to them. We may be required to disclose CCTV images to authorised third parties such as the police to assist with crime prevention or at the behest of a court order.

Requesting access to personal data & individual rights

The General Data Protection Regulations and associated Data Protection Act 2018 allows individuals the right to access the information that we hold about them. To make a request for information please contact the Data Protection Lead on 0208 551 4321 or alternatively email dataprotection@ecaterham.net

You also have the right to:

• object to processing of personal data that is likely to cause, or is causing, damage or distress
• prevent processing for the purpose of direct marketing
• object to decisions being taken by automated means
• in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
• claim compensation for damages caused by a breach of the Data Protection regulations

If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance.

Contact

If you would like to discuss anything in this privacy notice or make a request for information, please contact:

School Business Manager, 020 8551 4321 or email

dataprotection@ecaterham.net

Please note our Statutory Data Protection Officer details are below:

Fiona Alderman, London Borough of Redbridge, Lynton House, 255-259 High Road, Ilford, IG1 1NY

dataprotection.schools@redbridge.gov.uk

Alternatively, should we not be able to provide a satisfactory answer to your request in the first instance, you may wish to contact the Information Commissioner’s Office (ICO) directly using the following details:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

0303 123 1113

www.ico.org.uk/concerns/