For the purposes of the General Data Protection Regulations 2018, The Data Controller is:
Deborah Johns LTCL, LWCMD, AMEPTA 31 Blackfriars Avenue, Droitwich, Worcs WR9 8RH
Tel: 01905 773094 / 07546 971638
I am listed on the Public Register Of Data Controllers, registration number ZA328167. You can view my entry here: https://ico.org.uk/ESDWebPages/Entry/ZA328167
Lawful Basis For Processing
I rely on the following basis for lawfully processing your data: Contract
Processing of personal data is necessary for the performance of the contract and also if I have been asked to do something prior to entering into a contract, for example if an initial meeting prior to lessons is agreed. This is so that I am able to communicate with parents or adult pupils in connection with pupils’ music lessons.
What Personal Details Are Collected?
I collect personal information including names, addresses, mobile and landline phone numbers and email addresses of parents / pupils and, where necessary for entry for examinations, competitions or competitive festivals, children’s dates of birth.
These are collected in writing – by email, text or handwritten, and verbally – in person and by phone.
Special Category data, for example health, may also be collected with consent under article 9(2)(a) of the GDPR (General Data Protection Regulations 2018). An example of this is a health condition which affects learning. This is so that I am better able to meet pupils’ needs in teaching them.
How Personal Details Are Stored
Personal information is stored securely both electronically and on paper.
I store parents’ and adult pupils’ names and email addresses in my email contacts list.
I also store parents’ and adult pupils’ names and phone numbers in my mobile phone contacts lists. Apps on my mobile phone may have the ability to read these contact details.
Texts, voice mail messages and emails are all retained as they form part of my business records and I occasionally need to refer back to them.
Purpose Of Processing
To administer my services and to communicate with parents and adult pupils in connection with pupils’ music lessons.
How You Can Manage Your Preferences If you wish to stop receiving communications from me by a certain method, for example by email or text, you must tell me in writing.
If you wish to stop receiving communications from me completely I will no longer be able to give tuition to your child / you. To stop receiving communications from me, you must give notice to me to discontinue lessons as agreed in the contract and to pay all fees in full.
Sharing Of Personal Data
Personal information may be shared with competition, festival and concert organisers and with examination boards. In the case of an emergency or if I have concerns about the welfare of a pupil or anyone related to or connected to a pupil, I will share that person’s personal data with relevant authorities.
Special Category data, eg. a health condition, may also be shared with examination boards, for example if a pupil requires a large-print exam paper or sight-reading test.
Retention Period Of Personal Data
I retain your information while you have a contract with me and for and for as long as necessary to resolve disputes or as long as the law requires.
Data Subject Individual Rights – Your Right To See What Information I Hold About You
You have the right to see the personal information which I hold about you and to update it and correct it if you think it is wrong. This is usually free.
Right Of The Individual To Lodge A Complaint With The ICO (Information Commissioner’s Office)
If you are unhappy with the way I process your personal information or if you believe that I am storing your information unlawfully, you may make a complaint to me using the contact details as the top of this document.
If you have complained to me and you are still unhappy, you have the right to complain to the Information Commissioner’s Office www.ico.org.uk
a right of access to a copy of your information comprised in your personal data;
a right to object to processing that is likely to cause or is causing damage or distress;
a right to prevent processing for direct marketing;
a right to object to decisions being taken by automated means;
a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed; and
a right to claim compensation for damages caused by a breach of the Act.
Do you transfer personal information out of the EU?
I use both Yahoo! (Oath) and Gmail for email. I store adults’ names and email addresses in my accounts. Communicating with me by email may mean that your personal information is processed outside the EU.
If you do not wish your information to be processed outside the EU, you have the right to ask me to stop storing your information in this way. I would then be unable to communicate with you by email.
Website Contact Form
The company which provides the plugin which I use for my Contact form on my website does not track, monitor or collect the form entries in any way. User cookies are not used and additional user details are not collected.