Data Protection Policy for Hughenden Community Singers

1. Introduction

Hughenden Community Singers (HCS) is committed to protecting the privacy rights of its members and adhering to the General Data Protection Regulation (GDPR) requirements. This policy outlines how HCS collects, processes, and stores personal data, specifically names and email addresses, and ensures compliance with the GDPR.

2. Collection and Use of Personal Data

HCS collects personal data from its members, including names and email addresses, for the purpose of communicating with them about events, rehearsals, and performances. The data collected is limited to what is necessary for this purpose and is processed lawfully, fairly, and transparently.

3. Data Security and Confidentiality

HCS takes appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of the personal data it processes. This includes protecting personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

4. Data Retention

HCS retains personal data only for as long as necessary to fulfill the purpose for which it was collected, unless a longer retention period is required by law or necessary for legitimate business purposes. After this period, the personal data will be securely deleted.

5. Individual Rights

HCS respects the rights of individuals with respect to their personal data, including the right to access, rectify, and delete their data. Members may request access to their personal data and request that any inaccuracies be corrected. HCS will respond to such requests in a timely manner and within the GDPR guidelines.

6. Data Protection Officer

HCS designates a Data Protection Officer (DPO) who is responsible for ensuring compliance with this policy and the GDPR. Members may contact the DPO at hello[at]hughendensingers.org with any questions or concerns regarding their personal data.

7. Consent

HCS obtains explicit consent from its members before collecting and processing their personal data, specifically names and email addresses. Members may withdraw their consent at any time, and HCS will stop processing their data and delete it as required by the GDPR.

8. Policy Review

This policy will be reviewed and updated regularly to ensure compliance with the GDPR and any other applicable data protection laws and regulations.

By joining HCS, members agree to this data protection policy and its terms.