May 2018
To all Colleges, Schools, Universities, Aviation Providers, students and other users
On 25 May 2018 the European General Data Protection Regulation (GDPR) and the UK Data Protection Act (DPA) came into force. The new regulations strengthen individual’s rights over how their personal data is used.
JARE ATP is committed to good governance and transparency. The following sets out what we do with your information when we collect it, why we collect it and how we dispose of it.
The JARE ATP Data Protection Officer (DPO)
The JARE ATP Data Protection Officer is Andrew N.S.Easton. He is responsible for ensuring that the GDPR and DPA regulations are fully complied with. He is also the first point of contact should you wish to know what information we hold on you. He can be contacted via email:
anse@jare-atp.co.uk or by mail at:
J.A.R.E. Airline Training Partnership Limited, 307NE Commercial Road, Bournemouth Airport, Hurn, Christchurch, Dorset, BH23 6NW.
What are your rights?
If we have collected any of your personal data, then you have a number of rights. These are:
- To have confirmation of what data we hold on you and what we do with that data
- To have a copy of the data we hold provided to you free of charge
- The right to correct the information we hold on you if it is factually incorrect
- The right to object to us using your information
- Under certain circumstances you have the right to have your data erased and to tell JARE ATP to cease further dissemination of your data to third parties
- You also have the right for your data to be transferred to another organisation in an electronic format
When do we have to ask you for the right to collect your personal data?
If we collect Special Category Data, we might need to ask your permission. Special category data includes any data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, data concerning health or data concerning a natural person’s sex life or sexual orientation.
JARE ATP has only a limited need to collect this information for any of its activities/courses and will always ask you for your permission via a signed authority – this relates to students using our Aviation Facilities and the Health Questionnaire we send out for each participant which requires permission via this signed form, it is only used to assess a participant’s health for activities only.
We will only collect data for:
- In order for us to provide, aviation activities, courses and quality assurance for our organisation
- The dissemination of JARE ATP newsletters
- Contacting you to follow up on an enquiry you have made to us
What we don’t do with your data
- We will not use your data for automated decision making
- We will not use your data for profiling purposes
- We will never sell your data
- We will not keep your personal data by any electronic means at any time
- We will never pass your data on to a third party
- We will not share your data for any other purpose than that described above
Why do we collect your data and what do we do with it?
JARE ATP collects data for a number of reasons explained below:
Basic information and DATA
What data we collect?
We collect information on staff and student names for the purposes of conducting student/participant activity days and courses.
Do we share your data with anyone outside of the organisation?
No.
The information is used within JARE ATP to ensure that the activity requirements are met and maintained and for our records. We also use the information to assist the staff providing your activities/courses.
What is the legal basis for keeping my data?
To comply with JARE ATP practical activity and course requirements based on informed consent
What would happen if I/we refused to give you this data?
In this case we would not be able to offer you/your organisation aviation practical activities and/or aviation courses
Who has access to my records?
JARE ATP staff and the instructors providing your organisation with practical activities and courses
How long will my records be kept for once we have finished our practical activities at JARE ATP
Information, such as student and staff names will be stored until the end of an academic year and then securely stored.
We will monitor the storage of your data at the end of the academic year OR dispose of it by securely shredding the data we have kept
Newsletters (these are only by post sent annually to colleges/schools/universities addressed to the last known/ named person in the relevant department OR by e-mail to designated staff who have had contact with JARE ATP in the past).
We will use the data to carry out our postal marketing of our aviation services and products to colleges, schools, universities and other interested parties, the lawful basis we use for this process is “Legitimate Interest” for “Direct Marketing”.
What data do JARE ATP collect?
We collect your name, email address and the name of the organisation you represent + Address
Do we share your data with anyone outside of the organisation?
No – we will never share your information with any other parties.
What is the legal basis for keeping my data?
Informed consent.
You will be asked to confirm your willingness to accept your inclusion on the Newsletter distribution and to receive further information on JARE ATP
What would happen if I refused to give you this data?
We will not be able to send you the JARE ATP Newsletter or provide you with information on JARE ATP aviation practical activities and courses
Who has access to my records?
JARE ATP directorial staff involved in the distribution of the newsletter
How long will my records be kept for once I withdraw my consent?
You may withdraw your consent at any time. This will mean you will not receive any further newsletters.
Any information we hold on you will be removed from the JARE ATP contacts database immediately
Audit
Annually at our ISO 9001:2015 QMS Management Review Meeting we will confirm the action taken regarding data we hold for our educational services.
Your privacy and the security of your data is important to us we hope that this information has answered any queries you have about GDPR, for further information and our full Privacy Policy please contact us directly
Julie A.Rushton,
Chief Executive,
JARE Airline Training Partnership Limited.
