DATA PRIVACY NOTICE
York Music Hub CIO
Charity Number 1172491
York Music Hub CIO is committed to protecting your personal data that we hold and to being transparent about how and why we may use it.
This privacy notice is intended for parents, students, schools, music organisations and individual practitioners, donors, sponsors, funders and other music hub supporters.
York Music Hub CIO is the data controller for the purposes of data protection law.
1) Your personal data - what is it and how may it be used?
Personal data relates to an individual who can be identified from that data. Identification can be by the information alone or in conjunction with other information in the data controller’s possession or likely to come into their possession. Personal data includes data stored in both paper and electronic formats. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”).
York Music Hub needs data in order to fulfil its contractual obligations with a range of users in order to provide them with the education for which they or their children have applied.
We will only process personal data where we have one of 6 ‘lawful bases’ to do so under Article 6 of the EU General Data Protection Regulations.
2) What data do we collect and why?
3) Why we use this data
We use this data to:
4) Photographs and Video Recording
As part of York Music Hub’s activities, we may take photographs and record images.
Such material will be used solely by York Music Hub, for example, for publicity purposes, such as prospectuses and other similar information about the York Music Hub; for display at events (such as banners); for website and social media; for ID badges and the Approved Tutor online register; and for fundraising or other purposes to help achieve the York Music Hub’s aims.
When using photographs and videos of children for publicity, display or website purposes, we will not accompany them with any other personal information about the child, to ensure they cannot be identified. Although we will carefully use images on the basis of our ‘legitimate interests’ (see above), we understand there may be occasions where there is good reason why we should withdraw certain images. If you ask us to withdraw an image of your child with good cause, we will delete the photograph or video and not distribute it further. Images that might cause embarrassment, distress or that we deem unsuitable will not be used. For all public events the York Music Hub has a clear policy that photographic/video permission must be sought for all young people under 18.
5) How do we process your personal data?
York Music Hub CIO complies with its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
6) Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with York Music Hub CIO staff. We will only share your data with third parties outside of the York Music Hub CIO with your consent.
7) How long do we keep your personal data?
Specifically, we retain data while it is still current; data relating to finances (e.g. gift aid declarations and associated paperwork) for up to 7 years after the calendar year to which they relate to meet tax and accounting requirements.
8) Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:-
How to contact us
To exercise all relevant rights, queries or complaints, please contact us:
If you are unhappy about the way we handle your personal data you can lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk