General Data Protection Regulation Policy for MTW 2019
GDPR stands for General Data Protection Regulation and replaces the previous Data Protection. It came into effect on 25th May 2018.
GDPR states that personal data should be ‘processed fairly and lawfully’ and ‘collected for specified and legitimate purposes’ Also that individuals’ data is not processed without their knowledge and are only processed with their ‘explicit’ consent. GDPR covers personal data relating to individuals.
Individuals have the right to know what information is held about them and where it is stored.
There are rights for individuals:
The Right to be Informed
An individual has the right to know what personal data we hold.
MTW offers musical theatre workshops and has a legitimate purpose for knowing and storing some personal data of the attendees.
We need parents’ names, addresses, email addresses and telephone numbers.
We need to know children’s full names, addresses, dates of birth and if there are any medical conditions that we should be aware of.
The Right of Access and Right to Erasure
An individual can request a copy of all the personal data held about them within our organisation(Subject Access Request) and will be allowed to have all their data deleted or returned to them, if they so wish, within a month of the request.
MTW will keep personal email contacts on a database subject to permission. See online forms.
The Right to Strict Processing
Individuals have the right to object to us processing their data. This means that records can be stored but not used for communications.
The Right to Data Portability
MTW does not required to share the data we hold or to transfer to any other system.
The Right to Object and the Right to not be subject to automated profiling
Individuals can object to their data being used for marketing or for research.
Automated profiling is used for marketing based organisations.
MTW do not use personal data for these purposes and will not store the data on a database if objected to on the online workshop booking form.
Storage and Use of Personal Data
Workshop registration forms are completed on MTW’s secure website. This information is kept on the data processor’s computer encrypted with a password for communication purposes with the attendees and for advising of future workshops at MTW.
On each workshop there is a paper register/sign in/out sheet kept with the workshop leader for fire and safety regulations however only the first initial of surname will be logged on the class register and no other personal data is logged on these registers.
In addition, there is paper copy of the attendees’ full name and phone/address contact details in the event of an emergency, which is kept in a portable lockable file.
No names of children will be displayed anywhere in a public place or online.
No photos/ video footage will be displayed online without prior consent of Parents/Carers- see online form.
The personal data collected on the MTW online form is inputted into a database which is used solely for communication purposes. This data is stored under encrypted files on password protected computers accessed by the data Kirsty Callender)
Any portable data storage (USB) is stored in a locked cabinet.