Privacy Policy

HYSTS is committed to protecting our users’ privacy. The Data Protection Act 1998 has been replaced by the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. 

The GDPR is the data protection law which aims to improve protection of your personal data, which is data that directly or indirectly identifies you. 

What information does HYSTS hold and why? – We hold some of your personal data, including email addresses, to enable a selected few personnel within HYSTS to manage the Scheme effectively. This information is derived from: 

  • A completed Gift Aid form – Name, address, phone numbers and in some cases, the bank details of individuals. 
  • A Young Person’s application – Name, age, limited medical information and contact details of those with parental responsibility.  
  • Details held on Volunteers – Name, RYA qualifications, self disclosure and references forms, next of kin, and from the DBS certificate: age, place of birth and address. 
  • Details held on Senior Instructors – Name, next of kin, RYA qualifications, bank details and from the DBS certificate: age, place of birth and address.   

You have certain Individual rights, these are: 

  • the right to be informed; 
  • the right of access;  
  • the right to rectification;  
  • the right to erasure;  
  • the right to restrict processing;  
  • the right to data portability;  
  • the right to object; 
  • the right not to be subject to automated decision-making including profiling.  

What is the right of access? 

You have the right to ask us whether or not we are using or storing your personal information. You can also ask us for copies of your personal information, verbally or in writing. 

This is called the right of access and is commonly known as making a subject access request or SAR. 

Why make a subject access request? 

You can make a subject access request to find out: 

  • what personal information we hold about you; 
  • how we are using it; and 
  • where we got your data from. 

This information can also help you exercise your other information rights effectively. 

Protecting your personal information – This is achieved by the following methods: 

  • By keeping physical documents locked in a steel cabinet. 
  • By restricting who has access to personal data. 
  • By guarding access to computer files by password.  

Is my consent necessary?  Consent would be appropriate if HYSTS could offer you a real choice and control over how we use your data, and we wanted to build your trust and engagement. But, we cannot offer a genuine choice because the personal data we hold is required to effectively operate the Scheme so consent is not appropriate.  

 Sharing your personal information – HYSTS does not share your information with others.  

How long does HYSTS hold my information? We hold your information for as long as you are associated with the Scheme. After that time your personal data will be destroyed.  

Who do I contact? If you have a concern about the way we are collecting or using your personal data, you should raise your concern with the HYSTS Principal, via info.hysts@gmail.com  

Notes:  

  1. HYSTS’s Data Protection Policy is reviewed annually and amended if necessary.
  2. For additional information visit:  www.ico.org.uk    

Links to other websites 

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.  

Scroll to Top