WE HANDLE YOUR PERSONAL DATA SAFELY AND SECURELY AND ENDEAVOUR TO INFORM YOU WHEN WE GATHER YOUR DATA.
GDPR( GENERAL DATA PROTECTION REGULATIONS)
We hold your contact details for the purposes of engagement as a key supplier, facilitator, artist, community group, sponsor, or stakeholder in relation to work carried out by our organisation.
We will use the data to carry out direct Business to Business communications with you. The lawful basis we use for this processing is "Legitimate Interest" for "administration and marketing". This is covered in the GDPR. The Information Commissioner's Office (ICO) recommend that companies using this basis conduct a "Legitimate Interests Assessment" (LIA), and we have done this.
The lawful basis for processing your personal data is based on your consent, WheelWorks requires your permission and a positive ‘Opt-In’ from you to indicate that you still wish to remain on our contact list and to receive future information or our services and opportunities.
PRIVACY NOTICE:
ZAC’s Music Movement is the Data Controller under the General Data Protection Regulation (GDPR) for personal data it gathers. ZAC’s Music Movement accept that you consent to provide your personal data and are agreeing for us to hold and further use it solely to inform you of our services and opportunities.
Personal data may be shared internally within relevant staff involved in providing this service only where necessary, between artists and facilitators with the sole purpose of supporting effective delivery of services that you may require or avail of.
Your personal data will not be shared or disclosed to any other organisation without your consent, unless the law permits or places an obligation on WheelWorks to do so.
We hold and store personal data in a safe and secure manner and in compliance with Data Protection legislation and the organisation's Record Retention and Disposal Plan.
ZAC’s Bursary Application — Privacy Notice
How we use your personal information when you apply for a bursary
Why do we collect personal information?
ZAC’s Music Movement CIC collects and processes personal data relating to processing, assessing and managing applicant’s bursary application and to meet its statutory obligations as CIC. We are committed to being transparent about how and why it collects and uses that data and to meeting its General Data Protection Regulation (GDPR) obligations.
What personal information does the organisation collect and how long will it be kept for?
ZAC’s Music Movement CIC collects personal data under GDPR Article 6c (Legal Obligation), and 6e (Public Task) in order to meet its legal obligations with the Education and Skills Funding Agency (ESFA).
All data collected and processed will be held for as long as we are legally required to do so.
Financial records are held for 6 years following the current academic year (currently until July 2027)
If your application is unsuccessful, the reasons for not being awarded will be added to your electronic record and the application form securely deleted.
How is this collected and stored?
Data is stored in an electronic documents within a secure network.
Who has access to data?
Information will be shared internally, with bursary allocation team members who need access to the data to assess the application and provide services to applicant.
Where ZAC’s Music Movement CIC engages non-statutory third parties to process personal data on its behalf, we require them to do so on the basis of written instructions, under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data. This will only take place where the law allows it and the sharing is in compliance with GDPR legislation.
What rights do you have?
As a data subject, you have a number of rights. You can: access and obtain a copy of your data on request; require the organisation to change incorrect or incomplete data; require the organisation to delete or stop processing your data, for example where the data is no longer necessary for the stated purposes of processing; object to the processing of your data where the organisation is relying on its legitimate interests as the legal ground for processing.