Stalder Academy - Privacy Notice 

This privacy notice tells you what to expect when Stalder Academy collects personal information.

We may change this policy by updating this page. You should check from time to time to ensure that you are happy with any changes. This policy is effective from 25th May 2018

 

Introduction

 

Stalder Academy is committed to process any personal information it holds only in ways that are fair, transparent and meet its legal obligations, in other words, in accordance with the Data Protection Act and its successor the General Data Protection Regulations (GDPR).

Stalder Academy will take particular care over email addresses which in addition to the GDPR are subject to the Privacy and Electronic Communication Regulations (PECR).

 

Data protection principles

The legislation sets out various data protection principles. These include that personal information is:

  •     used fairly and lawfully

  •     used for limited, specifically stated purposes

  •     used in a way that is adequate, relevant and not excessive

  •     accurate

  •     kept for no longer than is absolutely necessary

  •     kept safe and secure

  •     not transferred outside the European Economic Area without adequate protection

 

Your rights

The legislation conveys various individual rights. These include the following:

 

    •     The right to be informed

    •     The right of access

    •     The right to rectification

    •     The right to erase

    •     The right to restrict processing

    •     The right to data portability

 

  •     The right to object

  •     Rights in relation to automated decision making and profiling.

 

The sections towards the end of this Privacy Notice let you know how you can exercise your rights.

You can read more about your rights at https://ico.org.uk/for-the-public/.

 

Information Stalder Academy processes

The following sections describe the information that Stalder Academy collects and how it is processed. The sections are split according to the type of information.

 

Legal basis for processing

The legislation requires that there is a clear legal basis for processing personal information. In general Stalder Academy relies on the individual’s consent in order to process their data. Where there are exceptions such as a legal obligation, contractual agreement or Stalder Academy’s legitimate interest, they will be noted below.

 

Please note that if consent is withdrawn the level of service that we can offer might be severely restricted.

 

Students/ Parents/Guardians contact details

We collect contact details (name, address, phone numbers, email, addresses) to successfully be able to communicate with you anything relevant to the classes and or events your child attends at Stalder Academy.

If an email address is provided we assume consent to use it for administrative purposes.

We will not use it to send you e-news and marketing items without your explicit consent.

 

Students Medical Information

This is collected for the safeguarding of all students at the Academy and in case of an emergency this will help staff to deal with the situation more efficiently.

Data Retention

Once a students leaves Stalder Academy the student and account holder is made inactive on our system and is removed from our mailing list. Customers with receipts, we cannot remove the addresses as these are required by HMRC for tax purposes. We have been advised that this guideline cannot be ignored for GDPR and is legally what we need to do. Once the data is removed, it will simply list the first and last name of the customer and student and all other data will be deleted.

 

Exam records and qualifications

We collect and hold information to administer the taking of qualifications and exams and issuing of certificates to successful candidates.

Data retention

Stalder Academy relies on legitimate interest as the legal basis for retaining exam qualification information.

 

Website visitors

When someone visits stalderacademy.com we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone.

 

Use of cookies by the Stalder Academy

You can read more about how we use cookies on our Cookies page.

 

Forms

There are various forms on the website used to collect information. That information is only used for the stated purposes which are described in the relevant sections of this Privacy Notice.

 

Payments

PayPal is used to take payments. Only sufficient information to complete the payment is shared with PayPal. For more information see the Suppliers / 3rd Parties section of this Privacy Notice.

 

Links to other websites

This Privacy Notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.

 

Suppliers / 3rd parties

Use of data processors 

 

Data processors are third parties who provide services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will NOT share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct. The following is a list of our main data processors. There may be others from time to time.

 

 

Website hosting

 

We use a third party service, LCN.com to host our website. LCN.com are contractually obliged to treat any information on our private website as confidential and only use such information for the purpose of providing Stalder Academy with web hosting.

 

DanceBIZ -Thinksmart software

 

DanceBIZ is our operational software with which we store all our students and their parents/guardians contact details, issue invoices, keep class and attendance records, students medical records and records of payments made. It does not store any bank account or credit card details.

Please click on the link for more information on their privacy policy and how they are committed to keep all your data safe on their server.

 

Examination Boards

We will share candidates personal details with IDTA, LAMDA, RAD, Acrobatic Arts for the sole purpose of entering candidates for examinations. This is only with your consent and after you have filed in and exam registration form and made your payment. Please refer to each organisations privacy notices for more information about how they hold, store and process your data.

Festival / Competition Organisers

We will share candidates personal details with competition organisers for the sole purpose of entering candidates for these events This is only with your consent and after you have filed in and exam registration form and made your payment. Please refer to each organisations privacy notices for more information about how they hold, store and process your data.

 

PayPal

Where PayPal is used to take payments, only sufficient information to complete the purchase is shared with PayPal.

Stalder Academy does not see nor retain your credit card details since these are handled by PayPal.

Facebook/Social Media

We will only post photos and or names on social media with your consent. This is for the purpose of congratulating students in their achievemnts and letting people share in the Academy's fun events and success stories.

 

International Data Transfers

 

Your personal information will be stored in the EU and in accordance with the GDPR.

The GDPR applies to EU residents. If we share personal information of EU residents with suppliers or 3rd parties outside of the EU we will ensure that they meet the requirements of the GDPR.

We are committed to complying with the data regulations of non-EU residents according to their jurisdiction.

 

Security

Stalder Academy has implemented technical and organisational security measures to protect your personal data against unauthorised access, loss or misuse. This includes password protection on all devices, removal of unnecessary software, extra security at our studios and staff training.

 

Complaints or queries

Stalder Academy tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.

 

We are happy to provide any additional information or explanation needed. Any requests for this should be sent to the email address below.

 

accounts@stalderacademy.com

 

Access to personal information

Stalder Academy tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by asking. This is formally known as a ‘subject access request’ under the Data Protection Act 1998. If we do hold information about you we will:

 

  •     give you a description of it.

  •     tell you why we are holding it.

  •     tell you who it could be disclosed to.

  •     let you have a copy of the information in an intelligible form.

 

 

Disclosure of personal information

Except as described in this Privacy Notice we will not disclose personal data without consent.

 

Legal Obligation

We may disclose your information to governmental agencies or entities, regulatory authorities, or other persons in line with any applicable law, regulations, court order or official request.