GDPR Statement

Introduction

The Drama Club Salisbury is committed to protecting the privacy and personal data of our members, their families, and our staff in accordance with the General Data Protection Regulation (GDPR). This statement outlines how we collect, use, store, and protect personal data for our after-school club and holiday clubs.

Data Controller

The Drama Club Salisbury is the data controller responsible for your personal data. Our contact details are as follows:

Drama Club Salisbury Administration

07841394485

Dramaclubsalisbury@outlook.com

Personal Data We Collect

We collect and process the following types of personal data:

Members and Parents/Guardians:
1. Names and contact details (address, email, phone number)
2. Emergency contact information
3. Medical and health information
4. Photographs and video recordings (with consent)
5. Attendance records

Staff:
- Names and contact details
- Employment details
- Background checks (DBS)
- Payroll information

Purpose of Data Collection

We collect personal data for the following purposes:

To manage club membership and communication
To ensure the safety and wellbeing of our members
To maintain attendance records
To process payments and manage accounts
To comply with legal obligations
To share photos and videos within consented boundaries for promotional and documentation purposes

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent: Where explicit permission has been provided (e.g., for photographs).
Contract: To fulfill our contractual obligations with members and staff.
Legal Obligation: To comply with laws and regulations.
Legitimate Interests: To operate and improve our club services.

Data Sharing

We do not share personal data with third parties except under the following circumstances:

With parental or guardian consent
To comply with legal obligations
To protect the vital interests of our members or staff
With service providers who assist in our operations (under strict data protection agreements)

Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Specific retention periods are defined in our data retention policy.

Data Security

We have implemented appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes secure storage solutions, access controls, and regular data protection training for staff.

Data Subject Rights

Individuals have the following rights regarding their personal data:

Right to Access: To request access to personal data we hold about you.
Right to Rectification: To request correction of inaccurate or incomplete data.
Right to Erasure: To request deletion of personal data under certain conditions.
Right to Restrict Processing: To request restriction of data processing under certain conditions.
Right to Data Portability: To request transfer of data to another organization.
Right to Object: To object to processing based on legitimate interests or direct marketing.
To exercise any of these rights, please contact us using the contact details provided above.

Changes to This Statement

We may update this GDPR statement from time to time to reflect changes in our practices or legal requirements. Any updates will be communicated through our usual communication channels.

Contact Us

If you have any questions or concerns about this GDPR statement or our data protection practices, please contact us at: