Privacy Statement

Privacy Notice

Llantrisant Sub-Aqua Club (LSAC) believes you should always know what data we collect from you (our members), how we use it and our actions to ensure this data is protected by us.

We value your privacy and transparency, so we wanted to advise you of some changes we're making to our Privacy Policy.

This is part of our ongoing commitment to offering a quality service as a sub aqua club.

This includes:

Transparency over who we share your data with and why this is necessary to provide the service.
Our legal basis for processing your data.
Clarity surrounding how long we retain your data and what we do to ensure this information is erased at your request.
How you can request a copy of your personal information held by us.

What personal information do we hold?

Contact details such as title, full name, address and post code.
Your telephone numbers and email address.
Your date of birth and passport details.
Emergency cotact numers and blood group
Your medical disclaimer form.
Your diving qualifications and your instructor grade.

How is personal information collected?

Personal information is collected with the consent of the members by way of
submission of the Club Application Form and the Medical Declaration Form.

How does LSAC use this information?

There are various reasons why personal information is gathered and stored electronically which
includes but is not limited to;

The proper administration of the club.
To ensure that correct diving practices are observed in relation to dive depth policy and the buddy system.
To ensure that we can offer the correct instruction to members.
The issuing of qualification cards, certificates, etc.
The organising of diving trips both in the UK and abroad.

Information gathered with the explicit consent of the user will only be used for the purpose
for which it was intended except in those circumstances where LSAC must provide it to
fulfil statutory obligations.

LSAC may use personal details to contact users directly for the purposes of obtaining further information
needed to fulfil the original purpose.

LSAC may also use personal information to contact users by electronic or physical means
including but not limited to:

Sending e-mails to those that have requested it.
Telephoning users to obtain additional information and clarification.
Other electronic and physical correspondence.

What is the legal basis for processing your personal information?

We rely on the following legal bases to use your personal data:

Where it is needed to correctly administer the club.
Updating your records to keep up to date with your diving qualifications and contact information.

What should you do if your personal information changes?

You should inform the DO or club secretarty so that they can update our records.

Do you have to provide your personal information to us?

We would be unable to function correctly and safely as a sub-aqua club if you do not provide
certain information to us and if we do not keep records of your diving qualifications etc.

What are your rights under data protection laws?

Here is a list of the rights that all individuals have under data protection laws.

The right to be informed about the processing of your personal information.
The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed.
The right to object to processing of your personal information.
The right to restrict processing of your personal information.
The right to have your personal information erased (the “right to be forgotten”).
The right to request access to your personal information and to obtain information about how we process it.
The right to move, copy or transfer your personal information (“data portability”).
Rights in relation to automated decision making which has a legal effect or otherwise significantly affects you.
You have the right to complain to the Information Commissioner’s Office which enforces data protection laws: https://ico.org.uk/.

Security:

LSAC will take reasonable precautions to ensure that the personal data it gathers in the
course of operating electronic computer systems will be kept securely and within the
control of the club at all times.

LSAC does not pass any member's personal identifiable information to third parties for
marketing purposes or any other reason. Information is only supplied to other members
with consent to ensure the smooth running of the club and to the SAA to enable them to
carry out their duties to the membership.

LSAC will take reasonable precautions to ensure that all representations made for and
on behalf of the club will be clearly identifiable.

Changes to this privacy notice:

We may change this privacy notice from time to time by updating this page in order to
reflect changes in the law and/or our privacy practices. We encourage you to check this
privacy notice for changes at regular intervals.

The following is a quick reference table showing the type of information we collect and record together with the purpose for collecting the information and our legal basis for recording it:

Type of Information	Purpose	Legal Basis
Member's name, address, telephone numbers, e-mail address.	Managing the membership of the Club. Contacting club members.	Performing the Club's duty to the Membership. For the purposes of our legitimate interests in operating the Club.
The Member's name, telephone numbers and e-mail address.	Creating and managing the Club's online Membership Directory.	Consent: We will seek the Member's consent on their membership application form and each membership renewal form. The Member may withdraw their consent at any time by contacting us to tell us that they no longer wish their details to appear in the Membership Directory (web site).
Date of birth / age related information.	Managing membership categories which are age related.	Performing the Club's duty to the Members appropriately.
The Member's name, address and e-mail address, whilst a current member and for up to two years after ceasing to be a member of the Club.*	Passing to the SAA for the SAA to carry out its duty to the club and to its members by issuing membership cards, qualification cards and certificates and other publications necessary to the membership. To enable the club to determine a member's qualification level should the member miss a period of membership and seeks to re-activate their membership.	For the purposes of our legitimate interests in operating the Club and the legitimate interests of the SAA in its capacity as our national body for sub aqua activities.
Member's name, and relevant diving qualifications and diving experience.	Managing diving activities at the Club.	For the purposes of carrying out the normal activities of a sub-aqua club including health and safety issues and to ensure that member's dive at their relevant level of experience, to ensure that dive depth policy is observed and that the buddy system is correctly operated.
Instructor's name and relevant qualifications.	Managing instruction within the cluband region.	For the purposes of our legitimate interests in ensuring that we can offer the correct instruction to members.
Member's name, date of birth and passport information.	Managing diving activities and trips outside the UK.	To ensure that the member has a current and relevant passport to travel abroad to dive on club diving trips.
Emergency contact information and member's blood group details.	Contacting next of kin in the event of emergency. To pass on to the emergency services in the event of an incident requiring this information.	Protecting the Member's vital interests and those of their dependants.
* After a period of two years of non renewal theformer member's data is archived and may be re-activated if the person concerned returns to membership unless expessly required by the member to destroy the information.