Privacy Notice
Scottish Youth & The Countryside Education Trust
About this document
This Privacy Notice will help you understand how we collect, use and protect your personal information. If you have any queries about this Privacy Notice or how we process your personal information, please contact the SYCET Administrator by email: info@sycet.co.uk or by post: SYCET Administrator, Croft Cottage, Trochry, By Dunkeld, Perthshire, PH8 0DY or alternatively contact the Data Protection Officer by email: dpo@basc.org.uk or by post: Data Protection Officer, BASC, Marford Mill, Rossett, Wrexham, LL21 0HL.
Who we are
The organisation responsible for the processing of your personal information is Scottish Youth & The Countryside Education Trust (SYCET) of Croft Cottage, Trochry, By Dunkeld, Perthshire, PH8 0DY.
What information we collect about you
The personal data you have provided, we have collected from you:
- name, address, date of birth and gender
- telephone numbers and email address
- financial information, credit/debit card details (although we will not retain payment card information once a payment for an event has been received)
- those under 13 years of age details about your parents
- identifiers assigned to your computer or other devices, including your Internet Protocol (IP) address
- any relevant health details or medical history
- attendance of events and training courses
How we collect information about you
The personal information we hold about you is that which we collect directly from you, for example:
- when you enquire about an event or training course
- when you book on to an event or training course
- when you register to receive information from us about events or training courses
- when you make enquiries or raise concerns with us
What we use your information for and the legal bases for processing
We may store and use your personal information for the purposes of:
- administering your attendance at any event or training course that you attend (as is necessary for performance of a contract between you and us).
- Responding to your enquiry received from the ‘contact us’ section of our website (consent for the specified purpose).
- using your payment details to process payments relating to your booking of an event or training course (as is necessary for the performance of a contract between you and us)
- collection of any health or medical data for administering your attendance at an event or training course (Explicit consent for the specified purpose)
Who we share your data with
Where relevant given the nature of the service we provide to you, we may need to share your information with the following categories of third parties:
- third party service providers who organise, administer and run an event you have requested to attend.
- third party service providers who organise, administer and instruct on a training course you have booked.
How long your information is kept
We will retain your personal information for a number of purposes, as necessary to allow us to carry out our business. Your information will be kept for up to 7 years on our main systems after which time it will be archived, deleted or anonymised. Any retention of personal data will be done in compliance with legal and regulatory obligations and with industry standards. These data retention periods are subject to change without further notice as a result of changes to associated law or regulations. If you have any questions in relation to the retention of your personal data, please contact our Data Protection Officer at the details provided above.
Your rights
Under the Data Protection Act 2018 you have the following rights:
- Your right to obtain access to, and receive copies of, the personal information that we hold about you.
- Your right to require that we stop processing your personal information when you tell us.
- Your right to require us to correct the personal information we hold about you if it is incorrect.
- Your right to require us to erase your personal information.
- Your right to require us to restrict processing in accordance with your instructions.
- Your right to receive your personal data in a structured, commonly used and machine readable format and have the right to transmit your data to another controller.
Please note that these rights may be limited by data protection legislation, and we may be entitled to refuse requests where exemptions apply.
Where we use consent as our legal basis for processing your personal information, you are entitled to withdraw that consent at any time.
If you are not satisfied with how we are processing your personal information, you can make a complaint to the Information Commissioner.
You can find out more about your rights under data protection legislation from the Information Commissioner’s Office website: www.ico.org.uk.
