Maypole Airfield and Maypole Liveries General Data Protection Regulation Policy
We want to ensure that you are satisfied with how Maypole Airfield and Maypole Liveries are operating to ensure compliance with the GDPR. This is our policy which we will operate for all your personal data.
What Are Our Roles
GDPR requires us to operate in two roles:
- As the “Controller” of the personal data you provide to us. We only collect basic personal data about you and the services we provide to you. This may include your name, addresses, emails, and phone numbers. It may, also include next of kin details, emergency contact details and the details of your horse/aircraft or similar.
- As a “Processor” undertaking the activities we are required to do on your behalf as a service provider and which relates to the data where you are the “Controller”. This includes personal data relating your contacts and other information where we may store it, back it up or support its transport across networks to reasonably support our services to you.
What We Do and Don’t Do As “Processor”
In providing services such as data back-ups or data storage of the data you generate, we will gather and potentially store your data in the performance of our services which may be required or maintained for us to provide those services. This will include such personal data which we need to maintain contact between us for email and other services which you have opted in to receive from us.
We may host or support the computers, servers and networks which store and transport the data between devices, users and locations. At all times we will keep devices we maintain and support at the highest reasonable level of available software and suitably configured to minimise access by unauthorised 3rd parties.
In addition, we run and maintain CCTV systems for security purposes. We capture and store the images on our computer systems.
We have access to your data for the sole purpose of providing support to you and managing our relationship with you. We do not access customer data for any purposes other than to provide service for you at your request.
Why We Require Your Specific Personal Data
We need to know your basic personal data to create your account, get in touch with you or to provide you a service or services within any agreement between us. In addition, we need to record CCTV information to provide security of your and other’s valuable possessions.
We will not collect any personal data from you which we do not reasonably need in order to provide and oversee our agreed services to you.
How We Use Your Personal Data
All the personal data we process is processed by us in the United Kingdom and resides on our computers, our servers and cloud based servers.
We use a cloud-based database and hosted Microsoft Exchange servers to store some personal information. Here, the provider acts as a processor and makes no use of the data held other than to deliver database services on behalf of ourselves.
No 3rd parties have or will have access to your personal data unless the law allows them to do so.
We take all reasonable steps to ensure that your personal data is processed securely, including isolated servers, robust firewall and a system designed with security in mind.
How Long We Retain Your Personal Data
We are required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of 6 years after which time it may be destroyed. Any information we use for marketing purposes (with your consent only) will be kept with us until you notify us that you no longer wish to receive this information.
CCTV information will be held until it is automatically overwritten as the disk storage area becomes full.
What Are Your Rights
If at any point you believe the information we retain or process for you is incorrect or inaccurate you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact us to have the matter investigated on any of our advertised email or telephone numbers.
If you are not satisfied with our response, or believe we are processing your personal data outside our legal contracted right to do so, you can complain to the Information Commissioner’s Office at https://ico.org.uk/. Please give us 30 days to respond to your complaint before doing so.
If you need any more information please contact us on 01227 860374