Effective 24th May 2018 & updated 1st September 2020
UK Flying Clubs Ltd (t/a Blackbushe Flying Club & Midlands Flying Club) is the Data Controller, for the purpose of compliance under the Data Protection Act 2018 ('the Act'), the Privacy and Electronic Communication (EC Directive) Regulations 2003 and the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR').
UK Flying Clubs Ltd address is 86-90 Paul Street, London, EC2A 4NE
Under the Act and the GDPR, ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Data Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
LAWFUL BASIS OF PROCESSING
The bases on which personal data can be collected and processed are outlined by Article 6 of the GDPR and at least of one of the following must apply:
1. Consent – you have given UK Flying Clubs Ltd your clear consent to process your personal data for a specific purpose;
2. Contract performance - the processing is necessary for a contract you have with UK Flying Clubs Ltd, or because UK Flying Clubs Ltd asked you to take specific steps before entering into a contract;
Legal Obligation – the processing is necessary for UK Flying Clubs Ltd to comply with the law (not including contractual obligations);
Vital Interest – the processing is necessary to protect someone's life;
Public Interest – the processing is necessary for UK Flying Clubs Ltd to perform a task in the public interest or for a task which must have a clear basis in law; and
Legitimate Interest – the processing is necessary for UK Flying Clubs Ltd legitimate interest or the legitimate interest of a third-party unless there is a good reason to protect your personal data which overrides the legitimate interests.
The GDPR provides the following rights for individuals:
· The right to be informed
· The right of access
· The right to rectification
· The right to erasure
· The right to restrict processing
· The right to data portability
· The right to object
· Rights in relation to automated decision making and profiling
If you wish to exercise any of the above rights please do not hesitate to contact us at: firstname.lastname@example.org.
What we collect
We may collect the following information:
· Name and job title
· Contact information including email address
· Emergency contact information
· Demographic information such as postcode, preferences and interests
· Financial details if required to process a payment or refund
· Other information relevant to customer requests and/or offers
What we do with the information we gather
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
· Internal record keeping.
· We may use the information to improve our products and services.
· We may periodically send group update emails about new aircraft, special offers or other information which we think you may find interesting using the email address which you have provided.
Email marketing subscriptions
Under the GDPR we use the consent lawful basis for anyone subscribing to our newsletter or marketing mailing list. Any email marketing messages we send are done so from the group owner/manager, however we may make use of a third party marketing service in the future.
In this instance, email marketing messages that we send may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.
If we use a third party marking service then any email marketing messages we send are in accordance with the GDPR. We provide you with an easy method to withdraw your consent by clicking the ‘Unsubscribe’ link at the bottom of the emails.
Currently, we only send marketing and information emails directly.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
SHARING YOUR PERSONAL DATA
We may share your personal data to third parties only if we are under a duty to comply with any legal obligation, to carry out a contract, to protect your rights and freedoms, or for the safety of UK Flying Clubs Ltd and other individuals.
PROTECTING YOUR PERSONAL DATA
All of your personal data retained by UK Flying Clubs Lts is stored at our servers in. Your personal data may also be processed and stored by organisations operating within the European Economic Area that we have instructed.
If your personal data is transferred outside the EEA to a country which does not have an adequacy rating provided by the European Commission, UK Flying Clubs Ltd will seek your consent before transferring your personal data. However, your consent will not be requested if your personal data is transferred under established Binding Corporate Rules, Standard Contractual Clauses or adhoc contractual clauses approved by the relevant supervisory authority.
We retain and protect your personal data in accordance with our Data Retention Schedule. The Data Retention Schedule is reviewed internally to ensure that we do not hold your personal data for longer than is necessary for providing with the services to which you subscribed.
Additionally, some of the personal data we hold, may be subject to certain legal obligations which provide a standard retention period, therefore, the retention period varies depending on the type of data we hold.
Please contact us if you
· Would like us to stop using your information
· Want to exercise any of your rights as set out above, or have a complaint
By post: UK Flying Clubs Ltd, 86-90 Paul Street, London, EC2A 4NE
If you feel that UK Flying Clubs Ltd does not process your personal data lawfully, please refer your query to the Information Commissioner's Office https://ico.org.uk/concerns
Or by contacting them at:
Information Commissioner's Office
Tel: 0303 123 1113 (local rate)