Data Privacy Policy

Privacy notice

Elsecar Heritage Railway is committed to protecting and respecting your privacy.
Through this privacy notice we have sought to be as transparent as possible to fully explain how your personal information is held and processed. This notice explains how we collect, use and share your information and how we keep it and how we keep it secure.

This privacy notice also explains when and why we collect personal information about people who engage with us.

 

Information collected about you

Elsecar Heritage Railway only collect personal data that is necessary and any information we collect about you will be in accordance with data protection laws and other statutory obligations we are bound to follow.

The types of personal data we collect may include:

  • contact details; including name, address, email address, telephone number, etc.
  • emergency contact details (such as a family member)
  • date of birth
  • proof of identity
  • IP address and information regarding what pages are accessed and when
  • Licenses, permits or qualifications held
  • financial details for purposes of receiving or making payments

We may also collect sensitive personal data that may include:

  • physical or mental health details
  • racial or ethnic origin
  • gender and sexual orientation
  • offences (including alleged offences)
  • religious or other beliefs of a similar nature
  • criminal proceedings, outcomes and sentences

From May 2018, genetic data and biometric data will be treated as sensitive personal data. We may also record and monitor telephone calls to our Contact Centre for quality and training purposes.

Lawful basis to process your information

Elsecar Heritage Railway must have a lawful basis for processing your information. In cases where your consent is required to process your information we will seek your consent. In these cases, consent is the lawful basis to process your information.

However, where your consent is not required to process your information, for example where there is a separate lawful basis for processing your information, your consent will not be sought . Elsecar Heritage Railway is a not-for-profit organisation and some of our legitimate activities require the processing of sensitive information with respect to its members and volunteers or persons with whom it has regular contact. Where we need to disclose sensitive or confidential information such as medical details to other organisations we will do so only with your prior explicit consent unless we are legally entitled to share the data. We may also disclose sensitive or confidential information to protect your vital interest or the vital interest of another person.

Elsecar Heritage Railway may also process your information where processing is necessary for the performance of a contract

How long we keep your information

Elsecar Heritage Railway will retain information which enables identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed and you have the right to ask for your data to be removed when it is no longer necessary to be held.