Individuals have a number of rights in relation to their personal information – i.e. personal data – and these rights have been enhanced by the General Data Protection Regulation (GDPR). This Data Protection Statement describes how we at Bike Green collect and process personal data, in accordance with the GDPR. Processing is the legal term used to describe various acts including – the collection, recording, organisation, structuring, storage, alteration, use of, retrieval, disclosure or transmission of information.
This Statement applies to all users of Bike Green including use of website, correspondance, services, events, courses, etc
For your information this Statement outlines:
· Who we are and how to contact us;
· What information we collect, process and retain;
· How information is collected and processed and the purpose and legal basis for so doing;
· Sharing information with third parties;
· Individual legal rights.
1. WHO WE ARE AND HOW TO CONTACT US
Bike Green is a cycling education company. Bike Green processes personal data, i.e. how we collect, record, store, retain and use personal data. Bike Green will respond to your questions in relation to this data protection statement and our approach to privacy.
If you have any questions about this data protection statement, including any request to exercise your legal rights, please contact us using firstname.lastname@example.org
2. INFORMATION COLLECTED
Bike Green may collect the following personal information;
(i) Personal Information
· Personal details such as name, address, date of birth, gender, PPS number, nationality, emergency contact information and information in relation to the pupil’s family as may be required,
· Any Special Education Needs (SEN),
· Any Child Protection information,
· Information for TUSLA (the Child and Family Agency) and/or the Health Service Executive (HSE),
· Attendance records
· Disciplinary records including notes that may be held by the instructor(s), incident and accident reports, investigations and sanctions if imposed,
· Photographs and recorded images from classes or events
· Consent to publish photographs on website / print media etc,
· Records, correspondence or notes arising from interaction with Parents / Guardians
(ii) Google Analytics
We use Google Analytics to track visitors on this site.
In order to be compliant with the new regulation Google included a data processing amendment.
The data we collect will be processed anonymously and “Data sharing” is disabled.
We don’t use other Google services in combination with Google Analytics cookies.
(iv) Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
3. PURPOSE & LEGAL BASIS FOR COLLECTING & PROCESSING INFORMATION
Bike Green processes personal information (as listed above) about its users for a variety of purposes and relies on a number of legal grounds to do so. Bike Green requires this information to perform our duties and responsibilities and to comply with our legal and statutory obligations. In addition, Bike Green requires this personal information to pursue the legitimate interests of our company and our dealings with relevant third parties (see below). The legitimate interests upon which we rely is the effective operation and management of Bike Green and managing the education and welfare needs of our clients. Bike Green processes personal data on the basis of the following lawful purposes:
a) Legal Obligation
Bike Green collects and process personal information to comply with our legal and statutory obligations, including, but not limited to those under the Education Act 1998 (as Amended), the Education (Welfare) Act 2000, the Education for Persons with Special Needs (EPSEN) Act 2004, the Health Act 1947, the Children First Act 2015, the Child Protection Procedures for Primary and Post-Primary Schools 2017, the Teaching Council Acts 2001-2015 and Safety Health and Welfare at Work legislation
b) Legitimate Interests
Bike Green may also process personal information to:
· Enable clients to develop to their full potential and meet the educational, social, physical and emotional requirements of the client as necessary
Bike Green sometimes process some of pupils’ personal information with consent e.g. photograph which may be displayed on our website or on social media platforms or in the print media. Please note that consent can be withdrawn at any time by contacting us – email@example.com.
4. HOW PERSONAL INFORMATION IS COLLECTED
Bike Green may collect personal information through school application forms
5. INFORMATION AND THIRD PARTIES
Bike Green may receive from, share and/or transfer information to a range of third parties such as the following:
· Monaghan/Cavan Sports Partnership
· Monaghan/Cavan Sports Partnership
· The Department of Education and Skills
· TUSLA / the Child and Family Agency
· Department of Social Protection and/or other state benefit providers
· An Garda Síochána
· Insurance Provider
· Physio/OT services
· Third Party Service Providers: We may share personal information with third party service providers that perform services and functions at our direction and on our behalf such as our accountants, IT service providers including, printers, lawyers and other advisors, and providers of security and administrative services, including data processing / cloud storage service providers
6. DATA RETENTION
We will only retain personal information for as long as it is necessary to fulfil the purposes the information was collected for, including any legal, accounting or reporting requirements.
7. TRANSFER OF PERSONAL INFORMATION OUTSIDE THE EUROPEAN UNION
Bike Green may transfer the personal information we collect to countries outside the EU. Where there is no adequacy decision by the European Commission in respect of any such country that means that that country is deemed not to provide an adequate level of protection for your data. However, to ensure personal information does receive an adequate level of protection we will in such circumstances put in place appropriate measures such as the use of model contractual clauses as approved by the European Commission to ensure personal information is treated by those third parties in ways that are consistent with respect to EU and Irish Laws on Data Protection.
8. INDIVIDUAL RIGHTS
Individuals have several rights under GDPR which in certain circumstances are limited and/or constrained. These individual rights include the right – free of charge and subject to any limitations as may apply – to:
1. Request a copy of the personal information held about the individual;
2. Rectify any inaccurate personal data held about the individual;
3. Erase personal information held about the individual;
4. Restrict the processing of individual personal information;
5. Object to the use of individual personal information for our legitimate interests;
6. Receive individual personal information in a structured commonly used and machine-readable format and to have that data transmitted to another data controller.
If you wish to exercise any of these rights please contact us at the school as outlined firstname.lastname@example.org
Bike Green will endeavour to respond to your request within a month. If we are unable to deal with your request within a month we may extend this period by a further two months and we will explain why.
You also have the right to lodge a complaint to the office of the Data Protection Commission.
We will update this data protection statement from time to time. Any updates will be made available.