Privacy Policy

Purpose of Document

The Purpose of This Document Is to Define the Procedure for Data Protection of Members, Traders and Event Participants Information.

Introduction

From May 2018 the General Data Protection Regulations (Gdpr) Applies to ‘personal Data’ Meaning Any Information Relating to an Identifiable Person Who Can Be Directly or Indirectly Identified in Particular by Reference to an Identifier.

The Gdpr Applies to Both Automated Personal Data and to Manual Filing Systems Where Personal Data Are Accessible According to Specific Criteria. This Could Include Chronologically Ordered Sets of Manual Records Containing Personal Data.

As Part of the Gdpr We Must Demonstrate:

• That We Have a Lawful Basis for Collecting and Processing Personal Data;
• That We Keep the Data Securely;
• That We Will Delete Personal Data When Specifically Requested by an Individual or Company;
• That We Will Delete Personal Data after a Defined Time Period;

Company GDPR Compliance

Recording of Data

Any Event Entry Forms That Require the One of More of the Following Details of an Individual or Company Shall Include a Company Gdrp Statement (See Section 4)

• Name,
• Postal/Residential Address
• Email Address
• Phone Number
• Bank Account, Credit/Debit Card or Electronic Payment Information or Any Information That Could Identify You;

It Is Important to Note That Children (under Age 13) Are Not Legally Allowed to Give Their Consent and This Must Be Sought from Their Legal Parent or Guardian;

Storage of Data

Any Member Who Retains Paper Copies, or Uses a Personal Computer to Store Any Correspondence Such as Emails, Event Forms, Letters That Contain Personal Details of Any Persons or Company Having Contact with Swanage Regatta and Carnival Shall Ensure That the Computer Is Password Protected and Is Kept Secure at All times and That Paper Copies of Information Are Kept in a Suitably Locked Location.

Deletion of Data

Unless There Is a Specific and Legitimate Reason for Doing so, All Electronic Files and Emails Shall Be Deleted and Paperwork More than 12 Months Old Shall Be Destroyed. Paper Copies of Original Documentation Shall Be Shredded, Electronic Files Shall Be Deleted and Must Also Be Permanently Deleted from the Users “recycle Bin” or Deleted Items Folder.

Use of Email

Where a Member of the Company Fulfills a Position That Is Provided with a Company Email Address the Following Shall Be Complied With:

• When Sending Emails to More than One Non-member the Sender Must Use Bcc for All Recipients;
• When Sending Emails to More than One Member the Sender Should Use Bcc for All Recipients Unless They Know All Recipients Have given Consent for Their Email to Be Known;
• [Name]@swanagecarnival.Com Email Addresses Must Be Used for All Correspondence with Third Parties;
• Emails Pertaining to Swanage Regatta and Carnival Ltd Must Be Kept in a Separate Location (or Email Folder) from Personal Emails so They Can Be Located or Deleted When Necessary. This Includes Sent Items Folders Which Will Also Contain Emails Which Will Have to Be Managed;

Company GDPR Statements

General Policy Statement

The Following Statement Forms the Policy for Swanage Regatta and Carnivals Compliance with the 2018 Gdrp Legislation;

1. The Data Controller Is Swanage Regatta and Carnival Ltd, Herston Cross House, 230 High Street, Swanage, Dorset Bh19 2pq. Swanage Regatta and Carnival Is a Company Limited by Guarantee, Registered in England No.4933189
2. We Collect Personal Information Data to Respond to Enquiries and Administer Our Events.
3. We Obtain Personal Information from Our Contacts with You; Application Forms, Ticket Applications, Responses to Advertising and Trading Records.
4. We Have a Legitimate Interest in Keeping and Processing the Data to Maintain a Database to Provide Information Requested and in Our Commercial Interests Relating to Our Events.
5. The Processing Is Undertaken Within Our Organisation and Used Only for the Purposes of Administering the Event.
   Any Person or Company Has the Right to Be Removed from Our Data Lists.
6. We Will Remove Such Details on Request (Email Secretary@swanage Carnival.Com or by Post to the above Address) and Unless There Is a Legal Requirement to Keep That Information Will Delete It from Our Records;
7. Any Person or Company Has the Right to Know the Information We Hold about Them (Email Secretary@swanage Carnival.Com or by Post to the above Address). We May Make Further Enquiries to Confirm Any Such Request Is from an Individual or Company.
8. We Will Correct Any Errors a Person or Company Alerts Us To.
9. Except Where a Person or Company Has Asked for Removal We Will Keep Data for as Long as We Have a Relationship with Them and No Longer than 1 Year Thereafter Unless There Is a Specific Reason to Retain It.
10. Except Where There Is a Legal Requirement for Us to Provide Information We Will Refer Any Enquiry Asking for Personal Information to the Person or Company Concerned When It Is Requested.

Public Event Form Statement

The Following Statement Shall Be Added to All Event Entry Forms:

Swanage Regatta and Carnival Will Hold Personal Data about You Including Your Name, Postal Address, Phone Number(S) and an Email Address. We Will Keep Your Data for a Maximum of One Year Unless There Is a Specific Reason to Retain It. Data You Have Shared with Us Will Not Be Shared with Any External Parties Without Your Permission and Will Only Be Used to Contact You for Matters Related to This Event.

Traders Form Statement

The Following Statement Shall Be Added to All Trade Booking Forms:

Swanage Regatta and Carnival Will Hold Personal Data about You Including Your Name, Postal Address, Phone Number(S) and an Email Address. We Will Keep Your Data for a Maximum of One Year Unless There Is a Specific Reason to Retain It. Data You Have Shared with Us Will Only Be Shared with Any External Parties for Operational Requirements and Will Only Be Used to Contact You for Matters Related to This Event.