Privacy
Halton Aero Club Privacy Statement
Halton Aero Club (HAC) is committed to protecting your data. We fully comply with the Data Protection Act 1998 and are fully compliant with the General Data Protection Regulation 2018 (GDPR). We do not conduct any profiling of sensitive personal data, we don’t make any decisions based solely on automated means and we do not transfer your data without a data subject’s express permission.
The Data Protection Officer for Halton Aero Club is contactable at data-protection@haltonaeroclub.co.uk or in writing to
Data Protection Officer
Halton Aero Club
Bldg 287 Aviation Avenue,
RAF Halton.
HP22 5PG
The Information We Collect and Retain
We work on the basis of only collecting, storing and using personal information that is essential for carrying out our work on behalf of Halton Aero Club. We are required to retain a certain amount of information in line with current financial and employment practices for our own records.
Website Cookies
Cookies on our website collect personal data in order to improve the way our website works for you. They collect data about things like your browsing patterns and non-specific geographical information. We anonymise that cookie data as soon as we collect it and are not able to identify you from it at a later date.
What the Law says about protection of personal information
The Law on Data Protection is derived from various pieces of legislation and including the Data Protection Act 1998 and the GDPR which will become enforceable on 25 May 2018. The GDPR states that personal data (information relating to a person that can be individually identified) can only be processed if there is a lawful basis to do so. Activities like collecting, storing and using personal information would fall into the GDPR’s definition of processing. The GDPR provides six lawful bases (reasons) under which personal information can be processed (used) in a way that is lawful. For the processing to be permitted by law, at least one of the lawful bases must apply.
The five lawful bases that Halton Aero Club has identified are applicable to our processing of your personal data are:
- Consent
- Vital Interests
- Legitimate Interest (see below)
- Contract (recruitment and employees)
- Legal Obligation (payroll & pensions)
What is Legitimate Interest?
In order for an organisation to use legitimate interest as the lawful basis for processing personal data it must
- have a genuine and legitimate reason for doing so; and
- that use does not harm any of your rights and interests as an individual.
- Legitimate Interest to process your information
We aim to be clear about what information we collect, to enable you to make meaningful choices about how it is used. These are the reasons why the Halton Aero Club uses legitimate interest to process personal data:
- to ensure accurate communications with Halton Aero Club volunteers and members that we regularly need to communicate with.
- to make payments to individuals and businesses and ensure that all accounting information is retained for the requisite timescale.
How Do We Use Your Personal Data?
We only use your personal data for the reason we originally collected it and in the way in which you would reasonably expect. That means to provide you with the services and information you have requested and for any associated administration to enable us to continue providing those services.
We will never sell your details and will ask your permission before passing your details on to any third party.
Rectifying, Blocking and Erasing Your Personal Data
You have the right to review your personal data and ask that it be amended, erased or blocked from further use if we have got any of the details wrong or if our using your data is causing you distress. We will consider all requests to erase your personal data whenever the lawful basis that we have used to process it permits. If we cannot erase the data, we will anonymise it wherever possible. If you want to know anything about your personal data please contact us by email at data-protection@haltonaeroclub.co.uk, or by post at:
Data Protection Officer
Halton Aero Club
Bldg 287 Aviation Avenue,
RAF Halton.
HP22 5PG
If we have made a mistake, we hope you will give us the opportunity to put it right by writing to the Chairman or sending an email to us at data-protection@haltonaeroclub.co.uk
If you need to take your complaint further you should contact the Information Commissioner (please refer to the contact details at the end of this document).
Social Media
We try to moderate the content of our social media platforms but we don’t have the ability to remove Facebook ‘likes’. Our digital team will try to challenge rather than delete inaccurate comments, but we will remove anything that is:
- Slanderous
- Libellous
- Discriminatory
- Abusive
- Contains offensive language
If you have concerns or a complaint about the way in which we utilise social media please contact us using the details listed above.
Photography
All photography and video on this site is reproduced with the kind permission of the photographers concerned.
Your Rights under the Personal Data Protection Laws
You have the right to:
- Request access to your personal data (known as a data access request). This enables you to receive details of the personal data HAC hold about you and to check that HAC are lawfully processing it.
- Request Correction of the personal data that HAC hold about you.
- Request erasure of your personal data. This enables you to ask HAC to delete or remove personal data where there is no good reason for HAC to continue processing it.
- Object to processing of your personal data where HAC are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this basis. You also have the right to object where HAC are processing your personal information for direct marketing purposes.
- Request the restriction of processing of your personal data. This enables you to ask HAC to suspend the processing of personal data about you, for example if you want to establish its accuracy or the reason for processing it.
- Request the transfer of your personal data to you or another data controller if the processing is based on consent, carried out by automated means and this is technically feasible.
Your Responsibilities under the Personal Data Protection Laws
Within your rights under privacy laws you are entitled to ask for a copy of the data (access request) that HAC hold in their systems. HAC will follow a process to make sure that before any personal data is transmitted to the requester, that they are legitimately entitled to receive it.
If you do not co-operate in this process to establish the legitimacy of the request, the information will not be released. Any requests on HAC’s part to verify your request will be undertaken solely to protect both you and HAC against a breach of your personal information.
Should this situation occur and not be resolved to your satisfaction, you should write or contact the ICO office to escalate the matter.
Consent Withdrawal
You may withdraw your consent at any time by contacting me at data-protection@haltonaeroclub.co.uk .
Automated Decision Making
HAC does not carry out any Automated Decision Making based on the data we hold about you. HAC has no interest in recording or analysing individual data from the website, any analysis on website performance and use is carried out at the aggregate level.
Data Retention Period
HAC will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.
Data retention periods will depend upon a number of factors such as :
- The requirements of our business relationship and services provided;
- Relevant statutory or legal obligations;
- The purposes for which the data was originally collected;
- The lawful grounds upon which I based the processing;
- They types of personal data collected;
- The amount and categories of your personal data;
- Whether the purpose of the processing could be achieved by other means.
HAC normal data retention period for data received in connection with operations and services will be 7 years in line with regulatory requirements unless there is a legitimate interest for retaining that data for a longer period.
Changes to this Privacy Notice
Halton Aero Club will review the content of this document annually and publish an updated version on the website at https://haltonaeroclub.co.uk/privacy/
How to Contact Halton Aero Club
If you have any questions about this Privacy Policy or complaints about how Halton Aero Club process your Personal Data and you want to contact HAC, you can do that sending an email to data-protection@haltonaeroclub.co.uk. Your issue will be resolved as quickly as possible.
You may also write to the following address:
Data Protection Officer
Halton Aero Club
Bldg 287 Aviation Avenue,
RAF Halton.
HP22 5PG
ICO office
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, at any time. The ICO’s contact details are as follows:
Information Commissioner’s Office. Wycliffe House, Water Lane, Wilmslow, Chesire, SK9 5AF
Telephone 0303 123 1113 (local rate) or 01625 545 745 (national rate).
Website – https://ico.org.uk/concerns
This privacy statement was last reviewed 23 July 2022