General Data Protection Regulation 2018
CHANNEL VIEW LEISURE CENTRE PRIVACY NOTICE
This notice is for individuals who have signed up to use the facilities at Channel View Leisure Centre.
The Council processes certain information about you (known as personal data) on a day-to-day basis to carry out our functions. We are registered with the Information Commissioner’s Office and any information we hold will be processed in line with the requirements of the Data Protection Act and UK GDPR.
This notice is designed to give you information about any data Channel View Leisure Centre holds about you, how they use it, your rights in relation to it and the safeguards that are in place to protect it.
What personal data we hold and how we obtain it
Channel View Leisure Centre collects, processes, and holds your personal data in order to provide leisure services effectively on behalf of Cardiff Council. We obtain your personal data when you sign up to use our leisure facilities.
The data that we collect, and process is:
- Contact details, including name, address, telephone numbers and email address.
- Financial details such as bank account number if you pay a membership by Direct Debit.
- Date of birth
- Disability Data
- Physical Health
How we will use your personal data
We will use your personal information to provide you with access to our leisure services. This may include any of the following:
- Processing your membership via our computer system
- Provide access to our facilities
- To provide banks with direct debit information to process payments
- To create registers for class bookings and courses
- For health and safety reasons, such as emergency contact details
- To contact you for service-related matters e.g., missed direct debit payments, change of membership type etc.
- Where consent has been given, to contact you with updates/offers of the services available
Organisations that we may share your personal data with
We may disclose your information to others, such as the NHS or police, but only where this is necessary either to comply with legal obligations or as permitted by Data Protection legislation.
How long we keep your personal data
We will only keep your personal data for as long as we need to in order to fulfil the purpose(s) for which it was collected and for so long afterwards as we consider may be required to deal with any questions or complaints that we may receive, unless we elect to retain your data for a longer period to comply with our legal and regulatory obligations.
Personal data will be kept for 1 year after your membership is cancelled. After this period of time, data will be anonymised, and hard copies destroyed.
You have a right to access and obtain a copy of the personal data that the Council holds about you and to ask the Authority to correct your personal data if there are any errors or it is out of date. In some circumstances you may also have a right to ask the Council to restrict the processing of your personal data until any errors are corrected, to object to processing or to transfer or (in very limited circumstances) erase your personal data.
If you wish to exercise any of these rights or have any queries or concerns regarding the processing of your personal data, please contact the Data Protection Officer as indicated below.
You can obtain further information about these rights from the Information Commissioner’s Office or via their telephone helpline 0303 123 1113.
The legal basis for our use of your personal data
Our lawful basis for processing this information for the above purposes is Article 6 (1) (b) where processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
In some circumstances, we will be required to process information regarding an individual’s health. This is classified as special category data and will be processed under Article 9 (2) (g) where processing is necessary for the purposes of preventative or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health and social care systems.
Data Protection Officer
Please contact the Data Protection Officer for further information.
Data Protection Officer
Information Governance Team
Updating this notice
We may update this notice periodically. Where we do this, we will inform you of the changes and the date on which the changes take effect.
Last updated: October 2022