Privacy Policy

This website privacy policy describes how Magna Vitae obtains, stores and makes use of the information you provide when using or interacting with our website, altitude44.co.uk.

If you are asked to provide information when using this website, it will only be used in the ways described in this privacy policy.

This policy is updated from time to time. The latest version is published on this page.

For the purpose of the General Data Protection Regulations (GDPR) 2018, the data controller is Magna Vitae, Meridian Leisure Centre, Wood Lane, Louth, Lincolnshire, LN11 8SA.

Magna Vitae is a registered charity (charity number 1160156).

This policy (together with our Terms and Conditions of use and any other documents referred to in this policy) explains how we will collect, process, use and protect any personal data which we collect from you or that you provide.  It applies to information we collect about:

• visitors to our website and social media feeds;
• people who use our services;
• job applicants and our current and former employees;
• complaints, comments and suggestions; and
• any other services we may provide.

We are committed to protecting and respecting your privacy. Whenever you provide personal information, we will treat your information in accordance with this privacy policy, and in accordance with GDPR 2018 and the Data Protection Act 2018. When you supply any personal information to Magna Vitae we have legal obligations under the GDPR 2018 and Data Protection Act 2018 in the way we deal with that information. In particular, we must:

• Collect the information fairly;
• Let you know how we will use it; and
• Keep the information secure.

What is personal information?

Personal information can be anything that identifies and relates to a living person. This can include information that when put together with other information can then identify a person. For example, this could be your name and contact details.

Some of your personal information might be ‘special’

Some information is ‘special’ and needs more protection due to its sensitivity. It’s often information you would not want widely known and is very personal to you. This is likely to include anything that can reveal you’re:

• physical or mental health
• trade union membership
• genetic/biometric data
• criminal history

Why do we need your personal information?

We may need to use some information about you to:

• deliver services and support to you;
• manage those services we provide to you;
• train and manage the employment of our workers who deliver those services;
• help investigate any worries or complaints you have about your services;
• keep track of spending on services;
• check the quality of services; and
• to help with research and planning of new services.

Information we collect from you

We collect and process the following data about you via the following means:

• Information you provide in applying for our services such as membership applications, theatre ticket purchases, holiday activity registration, Boditrax registration, swimming lesson (WaterWise) registration, course registration, employment application and expression of interest in our services.
• Information that you provide by filling in forms on our website magnavitae.org, www.embassytheatre.co.uk and www.sofestival.org includes information provided at the time of registering to use our site, subscribing to any service, posting material or requesting further services. We may also ask you for information when you report a problem with our site. If you contact us, we may keep a record of that correspondence. We may also ask you to complete surveys that we use for research or improvement purposes or for satisfaction surveys, although you do not have to respond to them.

Basis for Processing of Data

Magna Vitae process data in accordance with the following:

CONSENT OF THE DATA SUBJECT

We may use and process your personal information for marketing purposes where you have consented for us to do so for the following purposes:

1. Community activities and sports/leisure events
2. Festivals and events
3. Fitness, gym and Leisure Centre activities including swimming and classes/courses
4. Shows and entertainment

PROCESSING IS NECESSARY FOR THE PERFORMANCE OF A CONTRACT WITH THE DATA SUBJECT OR TO TAKE STEPS TO ENTER INTO A CONTRACT

Whenever you use or pay for a service, you are entering into a contract with Magna Vitae whilst you are using this service. We may need personal information about you in order to provide you with the service you have requested.

For example, if you buy a fitness membership we will need your name, address, date of birth, health and bank details

The information we require will vary by service.

LEGAL OBLIGATIONS

We will use your personal information to comply with our legal obligations:

1. To identify you when you contact us
2. To verify the accuracy of data that we hold about you.
3. To assist the police or legitimate agencies

LEGITIMATE INTEREST

We may use and process your personal information where it is necessary for us to pursue our legitimate interests for the following purposes:

1. Surveys to improve your customer or visitor experience;
2. For market research in order to continually improve our products and services
3. To administer our websites and for internal operations for example testing and statistical purpose
4. Magna Vitae may send you information regarding services similar to those you have previously accessed. In these circumstances you will always be offered an opportunity to opt out of receiving this information in the future.
5. To keep you informed about the product or service you have purchased.
6. To comply with a request from you in connection with the exercise of your rights (for example where you have asked us not to contact you for marketing purposes, we will keep a record of this on our suppression lists in order to be able to comply with your request);
7. To enforce a contract you have entered into with us or to defend a case brought against us.
8. For general administration including managing your queries or complaints
9. Magna Vitae operates CCTV in all of its venues for the purpose of prevention of crime and also to protect its assets from misuse. Your image may be captured and recorded whilst visiting our premises.

Where we store your personal data

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website or booking systems, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website. Any transmission is therefore at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Our theatre booking systems (Spektrix & Artifax) are cloud based systems hosted by a third party in the UK.  We have a data sharing agreement in place to ensure that your data is held securely and will not be shared with any other party.

Our leisure venue booking and customer management system (Gladstone MRM) is maintained by Magna Vitae staff and is held on servers managed by Gladstone Limited a UK based company  with whom we have a data sharing agreement to ensure your data is held securely and is not shared with any third party. We monitor usage and communicate with our MV cardholders using a software package provided by The Retention People (TRP) a UK based company which utilises cloud-based services.  We have an information sharing agreement in place to ensure your data is held securely and is not shared with any third party.

The Boditrax system is a hosted cloud-based system which is operated by Boditrax, a UK based company with whom we have an information sharing agreement to ensure your data is held securely and is not shared with any third party.

Altitude 44 (A44) bookings are managed via EZ Runner software which is a cloud based hosted solution held on servers managed by a UK based company with whom we have a data sharing agreement to ensure your data is held securely and is not shared with any third party.  A44 also uses ParkUpKeep an adventure park inspection maintenance and reporting tool kit with whom we have a data sharing agreement.upon which we record any incident and accidents.

EPOS Now is Point of Sale software utilised by Café Magna which is a cloud based hosted solution with whom we have a data sharing agreement.

Our accounting software is provided by Sage Limited, a cloud-based service with whom we have a data sharing agreement.  If we Invoice you or place an order for your products or services, your data will be held in our Sage system in line with our retention policy

We use information held about you in the following ways

• To ensure that our services are presented in the most effective manner for you;
• To provide you with information, products or services that you request from us or which we feel may be of interest to you, where you have consented to be contacted for such purposes;
• To carry out our obligations arising from any membership contracts entered into between you and us;
• To allow you to book our services;
• To notify you about changes to our service; and
• To produce statistical information.

Disclosure of your information

We will not disclose your information to any third parties unless we have your permission to do so or are required to by law or in order to comply with any contractual agreements you have entered into.

Your rights

• The right to be informed;
• The right of access;
• The right to rectification;
• The right to erasure;
• The right to restrict processing;
• The right to data portability;
• The right to object; and
• Rights in relation to automated decision making and profiling.

You also have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to allow such processing by checking certain boxes on the forms we use to collect your data.

You can exercise the above rights at any time by contacting us at info@mvtlc.org

Our Website

When someone visits www.magnavitae.org.uk, www.embassytheatre.co.uk and www.sofestival.org we use a third party service, such as Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow the third party service to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will make this very clear. We will make it clear when we collect personal information and will explain what we intend to do with it. Our website may, from time to time, contain links to and from the websites of our partner networks and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for those policies or websites. Please check those policies before you submit any personal data to any of those websites.

Use of cookies

By using our website you are agreeing to us placing cookies on your device.   Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as provide information to the owners of the site. Cookies and logging of IP addresses are used to enable us to monitor site traffic and repeat visitor statistics. These statistics will not include information that can be used to identify any individual. Such information is anonymous and held on a temporary basis.  To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org  please see our Cookie Policy on our website www.magnavitae.org or via our contact details at the bottom of our privacy policy.

E-newsletter

We use a third party provider to deliver our monthly e-newsletter. We gather statistics about email opening and ‘clicks’ using industry standard technologies including clear gifs to help us monitor and improve our e-newsletter.

Security and performance

Magna Vitae uses a third-party service (LaserRed) to help maintain the security and performance of our websites. To deliver this service it processes the IP addresses of visitors to the Magna Vitae websites.

WordPress

Our website Customer Relationship Management (CRM) is provided by a third-party service, WordPress.

Social media

Nominated Magna Vitae staff monitor and respond to feedback and comments on our Facebook and Twitter feeds.  We use a third-party provider (Hootsuite) to manage our social media interactions.  If you send us a private or direct message via social media the message will be stored by Hootsuite for three months. It will not be shared with any other organisations.

Email

Magna Vitae use a third-party provider, Microsoft 365 outlook to provide its email infrastructure. Any email sent to us, including any attachments, will be monitored and used by us for reasons of security and for monitoring compliance with office policy.  Email monitoring or blocking software may also be used. Please be aware that you have a responsibility to ensure that any email you send to us is within the bounds of the law.

Survey emails are sent via a third-party provider, TRP Insight Software which is integrated into Gladstone MRM. If you wish to stop receiving these emails you can either use the unsubscribe service at the bottom of the email or contact us on 01507 607650 or email us at info@mvtlc.org or speak to the reception team at any of our venues.

Complaints

When we receive a complaint from a person, we construct a file containing the details of the complaint. This normally contains the identity of the complainant and any other individuals involved in the complaint.

We will only use the personal information we collect to process the complaint and to check on the level of service we provide. We do compile and publish statistics showing information like the number of complaints we receive, but not in a form which identifies anyone.

We may have to disclose the complainant’s identity to whoever the complaint is about. This is inevitable where, for example, the accuracy of a person’s record is in dispute. If a complainant does not want information identifying him, or her, to be disclosed they must tell us and we will try to respect that. However, it may not be possible to effectively deal with a complaint on an anonymous basis.

We will keep personal information contained in complaint files in line with our retention policy. This means that information relating to a complaint will be retained for two years from closure. It will be retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle.

Similarly, where enquiries are submitted to us we will only use the information supplied to us to deal with the enquiry and any subsequent issues and to check on the level of service we provide.

Job applicants, current and former employees

When individuals apply to work at Magna Vitae (or are Trustee applicants), we will only use the information they supply to us to process their application and to monitor recruitment statistics.  Payroll services are provided by Duncan and Toplis and we will therefore share the information provided by successful candidates with them. Where we want to disclose information to a third party, for example to take up a reference, obtain a ‘disclosure’ from the Disclosure and Barring Service (DBS), or for  pre-employment occupational health surveillance – we will not do so without informing the employee beforehand unless the disclosure is required by law.

Personal information about unsuccessful candidates will be held for 12 months after the recruitment exercise has been completed, it will then be destroyed or deleted. We retain de-personalised statistical information about applicants to help monitor our recruitment activities, but no individuals are identifiable from that data.

Once a person has taken up employment with Magna Vitae, we will compile a personal file relating to their employment. The information contained in this will be kept secure and will only be used for purposes directly relevant to that person’s employment. Human Resource Management advice is provided by an external HR Consultant with whom employee information may need to be shared from time to time. Once employment with Magna Vitae has ended, we will retain the file in accordance with the requirements of our retention schedule and then delete it (or shred where held as hard copy)

Safeguarding

Safeguarding Incident report & Safeguarding Referral report forms will be kept for a maximum period of six (6) years and marked ‘Strictly Confidential’ along with all other associated documentation;

Exception to the aforementioned 6-year period will occur when records:

(a)           Need to be retained if information is relevant to any known ongoing legal action case;

(b)           Are required by law to be retained for longer.

Where allegations have been made against a staff member, documents and information will be retained at least until that person reaches normal retirement age, or ten (10) years, whichever is the longer. **This includes people who leave Magna Vitae. The purpose of the record is to enable accurate information to be given in response to any future request for a reference. It will provide clarification in cases where future DBS disclosure reveals information from the police that an allegation was made but did not result in a prosecution or a conviction. It will also prevent unnecessary re-investigation if, as may happen, allegations resurface after a period of time.

Access to personal information and contact details

Magna Vitae tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘Subject Access Request’ under GDPR 2018 if we do hold information about you we will:

• give you a description of it;
• tell you why we are holding it;
• tell you who it could be disclosed to; and
• let you have a copy of the information in an intelligible form.

You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us at the address listed below. We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate. There is no charge for a copy of the data we hold about you. Data will be supplied within 40 calendar days from receipt of your request and validation of proof of identity.

How long do we keep your personal information?

There’s often a legal reason for keeping your personal information for a set period of time, we try to include all of these in our retention schedule which lists how long your information may be kept for. This ranges from months for some records to decades for more sensitive records.

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to:

The Chief Executive, Mark Humphreys, Magna Vitae, Meridian Leisure Centre, Wood Lane, Louth, Lincolnshire, LN11 8SA.

Or email us at:    info@mvtlc.org

You can also get further information on:

• Agreements we have with other organisations for sharing information;
• Circumstances where we can pass on personal data without consent for example, to prevent and detect crime and to produce anonymised statistics;
• Our instructions to staff on how to collect, use and delete personal data;
• How we check that the information we hold is accurate and up to date; and
• Links to other websites.

For independent advice about data protection, privacy and data sharing issues, you can contact the Information Commissioner’s Office (ICO) at:     Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire SK9 5AF

Tel: 0303 123 1113 (local rate) or 01625 545 745

Alternatively, visit ico.org.uk or email casework@ico.org.uk.

Changes to our privacy policy

We may revise this privacy policy at any time by updating this page. You should check this page from time to time to review the current privacy policy because it is binding on you.

This privacy notice was last updated on: 31.07.2019