PRESTO DEVELOPMENT SERVICES LTD - PRESTO MUSIC and PRESTO MUSIC PRODUCTION
The EU General Data Protection Regulation (GDPR) came into effect on 25th May 2018. The GDPR introduced considerable changes to data protection law in the EU.
GDPR is an evolution of current laws, providing enhanced rights to data subjects and regulates how we, as a businesses obtain, use and store personal data. Fairness and compliance with data protection principles remain key concepts for PDSL and is central to all of our data processing.
The GDPR applies to ‘personal data’ meaning any information that can directly or indirectly identify a living person, e.g. customer or colleague, and includes one or more factors specific to that person’s physiological, genetic, mental, economic, cultural or social identity.
This could include: Name, date of birth, email address, location data, home address, IP address, social media (names/adds) and aven a photograph of a person.
What do we do to be compliant?
Firstly we ensure any incidents, however insignificant it might seem, are reported to our Data protection Officer.
What do we mean by data?
As a business we store personal data in respect of all Customers, Employees and Contractors.
We use this data in the normal operation of our business to;
We take appropriate measures to ensure that all processing of personal information by us, or by our service providers is lawful. The lawful basis for the processing of personal information (which is not a special category of personal data) will depend on the purposes for which we process your information.
We will not send personal information outside of the UK.
Personal information will normally be stored electronically on our database(s), workflow and management systems. Some of our personal information is stored in paper format within company records (mainly for accounting purposes).
We store information until such a time as we no longer need it. Once a relationship with the company ends we retain information for six years to meet our regulatory obligations and may retain some aspects of staff data to handle future pension’s queries which may arise after that time.
Where we hold your data, you have the right (subject to certain restrictions) to receive confirmation that we process your personal information, to receive a copy of the personal information we hold on file, to obtain details of how we process your personal information, to have the personal information we hold about you corrected if it is inaccurate, request to have personal information we hold about you erased (subject to certain restrictions), have restrictions placed on how we process your personal information (in certain situations) and object to how we process your information (certain to certain restrictions.
Children and our business
We avoid capturing personal data for children and where it is necessary to capture it is used internally for administering tuition and externally for examination management only. We recognise that a child’s personal data merits particular protection under the GDPR and that only children aged 13 or over are able provide their own consent as a lawful basis for processing personal data however we will always obtain the consent from whoever holds parental responsibility for them particularly if an older child is not deemed competent to consent to processing or exercise their own data protection rights.
We endeavour to create clear and age-appropriate privacy notices for children and recognise their individual right to have personal data and particularly when an individual gave their consent to processing when they were a child.
We seek to raise children and their parent’s awareness of data protection risks, consequences, safeguards and rights by telling them what we are doing with their personal data, being open about the risks and safeguards involved and letting them know what to do if they are unhappy.
Presto Development Services Ltd is the controller for all personal information that we process, unless otherwise stated. There are many ways you can contact us, including by phone, email, by visiting one of our schools and post.
Our postal address:
Presto Development Services Ltd
Units 7 – 8
Helpline number: 01925 577715
Our Data Protection Officer is Tim Morris. You can contact him at email@example.com or via our postal address. Please mark the envelope ‘Data Protection Officer’.
How do we obtain information?
Most of the personal information we process is provided to us directly by you for one of the following reasons:
What information do we collect and when?
How do we use your information?
We use the information we collect for many different things:
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
Your right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process. You are not required to pay any charge for exercising your rights. We have one month to respond to you.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing
You have the right to object to processing if we are able to process your information because the process forms part of our public tasks, or is in our legitimate interests.
Your right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.
Please contact Tim Morris firstname.lastname@example.org if you wish to make a request, or contact us on 01925 577715.
Sharing your information
We will not share your information with any third parties for the purposes of direct marketing.
We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
We currently share data or potentially could share data with the following;
In some circumstances we are legally obliged to share information. For example under a court order or where we cooperate with Government departments. We will always satisfy ourselves that we have a lawful basis on which to share the information and document our decision making and satisfy ourselves we have a legal basis on which to share the information.
We may also share your information in the event of the non-payment of overdue fees when other collection activities have failed. If the debt remains outstanding after the specified timeframe for payment, no payment plan is in place or an agreed payment plan is not being adhered to, we may initiate formal proceedings to recover the full amount of the unpaid penalty. As a result PDSL will share personal data with the litigation and recovery specialists it instructs in order for them to undertake recovery action through the courts.
Please note - We keep our privacy notice under regular review to make sure it is up to date and accurate.
Our Privacy Promise
It is important that you understand and are happy with how we use your information. Please take time to read this policy in full.
All information you choose to submit to us by enrolling as a student of the school or by being a parent or guardian of a student of the school, by signing up to offers e.g. Free Trial Lessons, news or competitions, by sending emails or texts, entering examinations, performing at live events, by adding posts to any of our webpages, by interacting with us on social media or by speaking to us.
Full details of the purchase that you make on our websites or via our school shop(s). These include the time date and details of any purchases made together with the details of any vouchers, discounts, gift card or other alternative means of payment you may use as well as relevant payment cards such as credit or debit cards.
Your social media content where this is in the public domain. This information can include posts and comments, pictures or video footage.
Information collected independently by online advertising networks (e.g. Google and Google AdWords) through whom we place advertisements from time to time. It relates to what you view, click on and access through websites in their network including the subject matter of the site you started at and where you subsequently go.
How do we use your information?
We use the information we collect for many different things:
How do we share your information?
We cannot run our business or provide many of the services and benefits you expect to receive without involving other people and businesses. We only share your information in accordance with the Data Protection Act 2018 (The General Data protection Regulation).
We share the information we collect with:
Complaints or queries
PDSL tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
When we receive a complaint from a person we make up a file containing the details of the complaint. This normally contains the identity of the complainant and any other individuals involved in the complaint. We will only use the personal information we collect to process the complaint and to check on the level of service we provide. We do compile and publish statistics showing information like the number of complaints we receive, but not in a form which identifies anyone.
This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of PDSL’s collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.
Access to personal information
PDSL tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ¡¥subject access request s under the Data Protection Act 1998. If we do hold information about you we will:
To make a request to PDSL for any personal information we may hold you need to put the request in writing addressing it to our Data Controller. If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone.
If we do hold information about you, you can ask us to correct any mistakes by, once again, contacting the Data Controller. Disclosure of personal information In most circumstances we will not disclose personal data without consent. We will however respond to legal requests from relevant bodies e.g. the Police or HMRCE. There are a number of factors that we consider when deciding whether information should be disclosed.
Links to other websites
This privacy notice does not cover the links within our website linking to other websites. We encourage you to read the privacy statements on the other websites you visit. Changes to this privacy notice We keep our privacy notice under regular review. This privacy notice was last updated on 2nd October 2017.
How to contact us
The Data Controller
Presto Development Services Ltd
Unit 8 Bankside
If you have any queries regarding this or any aspect of how we approach data security for you or our customers please do not hesitate to contact me directly on 07909 511157 or by email email@example.com.
Tim Morris (Director and Data Protection Officer)