GDPR

The trustees of Riviera Concert Brass recognise that your privacy is important to you and that you care about how your information is used and shared.  We respect and value the privacy of our members and friends and will only collect information in ways that are useful to you, is a legal requirement, promotes safeguarding, or improves our service to our members and friends, and is in a manner consistent with your rights and our obligations under the law.  This policy applies to our use of any and all data collected by us.

Your personal data – what is it?

Personal data relates to a living individual who can be identified from that data.  Identification can be by the information alone or in conjunction with any other information in the data controller’s possession.  The processing of personal data is governed by the General Data Protection Regulation (GDPR).

Who are we?

Riviera Concert Brass is the data controller.  This means that the trustees decide how your personal data is processed and for what purposes.

How do we process your personal data?

Riviera Concert Brass complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying of it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

We use your personal data for the following purposes: to enable us to provide quality music making and concerts within Torbay and South Devon, to help safeguard all members of the band, to administer membership records, to promote our charitable aims, to manage the band, to maintain our own records, to inform you of news, events and activities.

What is the legal basis for processing your personal data?

Processing is necessary for carrying out legal obligations in relation to subscriptions, financial agreements (for instance, payments for events/ trips/ tickets), social protection law or for something needed and agreed by the committee.

Sharing your personal data

Your personal data will be treated as confidential and not shared with third parties without your consent.

How long do we keep your personal data?

Members’ data is kept as long as they are a member of the band.  Details may be kept, with consent if a player wishes to play/ help out on an irregular basis.  Otherwise data will be deleted within a year of a member leaving the band.  Photos included on the website/ social media will remain on site unless we are asked to remove it.

Your rights with regards to your personal data

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: – the right to request a copy of your personal data held by Riviera Concert Brass; the right to ask that Riviera Concert Brass corrects any personal data if it is found to be inaccurate or out of date; the right to request that your personal data is erased where is no longer necessary for Riviera Concert Brass to retain such data; the right to lodge a complaint with the Information Commissioners Office.

Further Processing

If we wish to use your personal data for a new purpose not covered by this Data Protection Notice, then we will provide you with a written notice explaining this new use prior to commencing and setting out the relevant purposes. We will then seek your consent to the new processing.

Contact Details

To exercise all relevant rights, please contact the Musical Director, Chairman or Safeguarding Officer.