In order to comply with the General Data Protection Regulation (GDPR) in effect from May 2018, Frome Voices collects, processes and handles customer data in the following ways:-
Frome Voices currently collects and holds personal data from singers (data subjects).
In compliance with GDPR regulations, Frome Voices only collects personal data which is needed and necessary. This data is:
- Phone Numbers
- Email Address
- Voice part
- Record of subscriptions
Available Basis for Lawful Processing
Frome Voices has completed a full review of which lawful basis from the six available (Article 6) that customer personal data can be processed under. It has been determined that lawful basis numbers (a) and (b) apply. They are as follows:
(a) “The data subject has given consent to the processing of his or her personal data for one or more specific purposes”
(b) “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”
In view of these and to ensure singers have real choice and control, Frome Voices obtains genuine and explicit consent from data subjects (singers) whenever personal data is required for a specific purpose.
Obtaining Consent and the ‘Right to be Informed’
The data that is collected by Frome Voices is in response to requested circulation of Frome Voices concert details and the collection of subscriptions for these concerts. We also circulate information about other relevant local concerts. To ensure GDPR compliance Frome Voices obtains explicit consent from the data subject to collect data. All data subjects are informed of the collection and use of their personal data in the following manner:-
- Data Subjects are made aware that the data collected will only be used for fulfilment of the contract between them and Frome Voices
- Frome Voices will retain the data for four years after the subject last engaged with the choir. After this time, the data will be deleted
Storage of Data
All data collected by Frome Voices will be held on private computers owned by the four committee members. Access is limited to the four Frome Voices committee members.