SURF SCHOOL WALES PRIVACY STATEMENT
Surf School Wales ("We") remain fully committed to the protection of your privacy at all times. The information contained in this policy has been published to inform you of the way in which any personal data you provide us with or we collect from you will be used. We recommend that you read this information carefully in order to fully understand how we treat your personal information.
This Notice is intended to comply with the provisions of the General Data Protection Regulation EU 2016/679 (GDPR) which governs how Personal Data is processed within the European Economic Area (EEA).We are the “data controller” for the purposes of GDPR. This means that we decide how your Personal Data is processed and for what purposes.
PERSONAL INFORMATION WE MAY OBTAIN FROM YOU
We may obtain and use the following data about you:
Any correspondence we have with you should you contact us
Data you provide when you fill out forms, including but not limited to data you provide when you register for our services
Details of transactions made by you through our site
Responses to terms & conditions and medical declaration that you complete
Details of your visits to our site, which includes without limitation location and traffic data, weblogs, resources you access and other communication data. We may collect this information for both the purposes of our own billing and otherwise
COOKIES AND IP ADDRESSES
We may obtain information about your computer, which includes your IP address, browser type and operating system where available. This accumulation of data is used to assist system administration, and customer support. The collection of this data does not identify any personal information about you. We may also collect information regarding your browsing activity and interests through use of a cookie file. This cookie file is stored on the hard drive of your computer, and contains information that is transferred to your computer's hard drive. We use the collection of this data to help us improve the experience of users on our site and to deliver a more personalised service with more relevant content. The collection of this data allows us to:
Store data indicative of your preferences, allowing us to adjust our application to appeal to your individual interests
Estimate the size and usage patterns of our audience
Record the details of any transactions carried out by you through our site
Identify you upon your return to our site
WHERE WE STORE PERSONAL INFORMATION ABOUT YOU
Because the transmission of data via the internet cannot be assumed completely secure, we cannot guarantee the security of any of your data transmitted to our site; you are therefore responsible for any risk associated with such transmission. We will however at all times take all reasonable steps to ensure the transmission of your data is executed as securely as possible, and upon receipt of your data we will continue at all times to enforce strict security procedures and features in an attempt to prevent any unauthorised access.
HOW WE USE YOUR INFORMATION
The information we hold about you may be used in any of the following ways:
To send you further information about our services for which we think you may have an interest. This information will be supplied only where you have given consent
To send you further information about our services based on a request we have received from you
To fulfil the obligations we have in relation to any contracts we have in place with you
To provide you with notification about any changes to our services
Administer our website and web application, on any of our domains
To improve and personalise your experience with us
To deal with enquiries and complaints made by or about you relating to the website
Your rights are explained in a later section of this policy, and subject to such rights we may also use the data we hold about you to provide you with information about other services we offer which we feel may be of interest to you. We may provide this information electronically via email, telephonically via SMS or telephone, or physically by post.
We will never supply your data to third parties unless under the conditions stated beneath this section of our policy.
If you wish to reject such communication regarding our other services, we will give you the opportunity each time we contact you to terminate our permission to contact you for such purposes.
We make use of Google Analytics Demographics and Interest Reporting using Google's 3rd-party audience data (such as age, gender, and interests) with Google Analytics
DISCLOSURE OF YOUR INFORMATION
Your Personal Data will be treated as strictly confidential and will be shared only with organisations whose services are required in order to provide the services we offer. We use other companies to help us process your Personal Data so that we can offer you the best possible service for example we use WIX as our website and booking system provider.
We will only share your Personal Data with other third parties with your consent. These third parties, in turn, may rely on data processors to provide services that help them help us.
When you give your consent to our holding of your Personal data you agree to us sharing your Personal Data (including special categories of Personal Data – where we have your explicit consent) with third party processors and sub-processors.
You retain the right to request us to refrain from processing your data for the purposes of marketing. To exercise such right, you may reply to any information we send you, detailing your request that we refrain from sending any marketing correspondence, or you can exercise this same right by contacting us electronically via email at firstname.lastname@example.org. If at any time we intend to use your data for such marketing purposes however, it is standard practice for us to make you aware in advance of collecting such data.
Unless we have an exemption under GDPR, you have the following rights with respect to your Personal Data: -
The right to request a copy of the Personal Data which we hold about you, without any charge.
The right to request that we correct any Personal Data found to be inaccurate or out of date.
The right to request that your Personal Data is erased where it is no longer necessary for us to keep it.
The right to withdraw your consent to the processing we carry out at any time.
The right to request that we provide you with your Personal Data and, where possible, to send that data directly to another data controller.
The right, where there is a dispute in relation to the accuracy or processing of your Personal Data, to ask us to restrict further processing.
The right to object to the processing of Personal Data.
The right to lodge a complaint with the Information Commissioners Office and to seek legal recourse.
We may at times provide links on our site to third party websites, including without limitation those owned or managed by our partner networks, affiliates or advertisers. These websites have separate privacy policies, and we therefore cannot accept any responsibility for the content. As such, choosing to follow these links is a choice you make at your own risk, and we advise that you check these websites' individual privacy policies before submitting any personal data.
ACCESSING YOUR INFORMATION
In accordance with the Act, you retain at all times the right to access any data we hold about you. You may exercise this right by making a request in accordance with the Act.
QUESTIONS, COMMENTS AND GETTING IN TOUCH
You can contact the Information Commissioners Office on 0303 123 1113 or via email or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.