Rising Stars Youth Club Privacy Policy
GDPR Statement
Privacy Notice
Under the data protection law, individuals have a right to be informed about how Rising Stars Youth Club uses any personal data that we hold about them.
We comply with this right by providing ‘privacy notices’ to individuals where we are processing their personal data. This privacy notice explains how we collect, store and use personal data.
We at Rising Stars Youth Club are the ‘data controller’ for the purposes of data protection law. This means that we decide how your personal data is processed and for what purposes.
Who we are?
We are Rising Stars Youth Club and we are the ‘data controller’ for the purposes of data protection law. This means that we decide how your personal data is processed and for what purposes.
What information do we collect?
Personal data that we may collect, use, store and share (when appropriate) may include, but is not restricted to:
Information about yourself when you register with the Youth Club, and by filling in forms at an event or online, or by corresponding with us by phone, e-mail or otherwise.
Contact details including name, date of birth and gender
Contact preferences including email address, home address, phone number, contact details of the third party in case of emergencies
Health information, which is classed as sensitive personal data, for the purposes of your health, well-being, welfare and safeguarding.
Any sensitive personal data we hold is with the explicit consent of the participant or, if applicable, the participant’s parent or guardian.
Sensitive personal data includes:- racial or ethnic origin, political opinions, religious beliefs or other beliefs of a similar nature, trade union membership, physical or mental health or condition, sexual orientation and criminal records
How do we use personal information?
We will only use personal data for any purpose for which it has been specifically provided and with our obligations under the “GDPR” by keeping personal data up to date; storing and destroying it securely; not collecting or retaining excessive amounts; protecting personal data from loss, misuse, unauthorised access and disclosure.
We will use your personal data to:
To be able to provide a voluntary service for the benefit of the Youth Club members
Administer membership records
Manage volunteers
Fundraise and promote Rising Stars Youth Club
Maintain the Youth Clubs accounts
Provide data as part of conditions for grant funding
Inform you of news, events, activities and services undertaken by Rising Stars Youth Club
Carry out feedback and surveys on the services operated by Rising Stars Youth Club
Meeting audit requirements
What legal basis do we have for processing your personal data?
The legal bases we rely on will consist of one or more of the following six possible
GDPR legal grounds:
• explicit consent - An example of this would be your consent to us processing your data by joining a mailing list so that we can keep you informed about news, events, activities and services or ensure we understand possible health risks to members
• legitimate interests - Necessary for the purposes where we need to use your data in our day to day activities e.g. keeping a record of your name and address on our membership list or sharing anonymised data with a funding partner as the condition of grant funding e.g. Local Authority
• vital interests - Protect the vital interests of an individual who cannot
physically or legally give consent. An example of this may be if we were to run activities for people with special needs.
• legal obligation - Necessary for us to comply with the law, an example of this could be our legal obligations to maintain certain records so that we may carry out our obligations under employment law and to ensure safeguarding legislation is adhered to.
Document name: GDPR Privacy Notice Status: Final v 0.1 Page 3 of 4
Issue Date: Sept 2018 Review Date: Sept 2019 Revision Date: