Welcome to Active Lichfield District’s privacy notice.
This privacy notice is to supplement the information Lichfield District Council currently makes available about how the organisation collects and holds your personal information in respect of its leisure facilities. Our core data protection obligations and commitments are set out in Lichfield District Council’s main privacy notice.
References to we, our or us in this privacy notice are to Burntwood Leisure Centre and Friary Grange Leisure Centre and the facilities are fully administered and managed by LWM Traded Services.
Lichfield District Council is the data controller for your information and LWM Traded Services is contracted as the council’s data processor. We have appointed a Data Protection Officer who is responsible for managing data protection and for ensuring that we comply with our legal obligations relating to personal information. (firstname.lastname@example.org)
Purpose of this privacy notice
This notice applies to you if you are either:
What data do we process and what is our legal basis for processing?
Personal data, or personal information, means any information about a living individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). Special category data is
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
We will use your special category data in the following circumstances:
The special category data processing conditions for the sharing of special category data are set out in the Data Protection Act, Schedule 1 Part 1 & 2 (various sections are applicable).
We collect, store, and use the following categories of personal and special category data about you, and we list our legal basis for processing:
Please note the above list is not exhaustive but gives an indication of the data we collect and our legal bases for processing your personal data.
Updating or changing your personal data
Please do help us keep your personal data up to date by notifying us of any changes to your personal information such as your name or address etc.
Purposes of our processing
We may use your personal information for the following purposes:
Please note this list is not exhaustive but gives an indication of the processing
Who we share your data with
We may share your personal data in the following circumstances:
As a Data Controller we ensure all our third-party service providers, such as LWM Traded Services, are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions. A list of third parties who we may share your data with can be obtained from our Data Protection Officer.
As a Data Processor we ensure we have the relevant contractual clauses, data sharing agreements or information sharing agreements in place to comply with the Data Protection legislation.
We take the security of your information very seriously. We have in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Data retention & rights
Details about the retention of your data and your rights can be found on our main privacy notice on our website.
Your right to complain
We would encourage you to contact us, in the first instance, if you are unhappy with any aspect of the way in which we process your personal data. You can get in touch with our Data Protection Officer using the details provided above.
If you are not satisfied with the outcome of your complaint, you have the right to refer such matters to the ICO (www.ico.org.uk). It is worth noting the ICO expect individuals to exhaust the complaints process internally before referring complaints to them.