Website and telephone payments Sunday 19 May
Our website and telephone payment systems are unavailable between 9am and 2pm on Sunday 19 May. You will not be able to pay for any council services on our website or over the phone during this time.
This privacy notice is designed to help you understand how and why the North Yorkshire Council processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). The council operate four leisure centres under the ‘zest’ brand.
The council has appointed Veritau to be its data protection officer. Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
To provide our leisure centre service, we may collect the following personal data:
We may also collect certain categories of special category information:
We process your information for the following purposes:
You may also consent to your information being used for the below purposes. Your information will only be used in this way if you consent to it and you can withdraw your consent at any time. These purposes are:
We obtain most of the information we hold about you from yourself when you register for our service however, we may also obtain information from:
We may pass your information to our service partners, agents and associated organisations to allow us to service your membership and communicate with you. This includes:
We will also pass your information to other partners for the purpose of marketing or promotion of services offered by the council, but only if you have consented to this such as TA6.
We are legally required to hold some types of information for certain periods of time. We set retention periods for all types of personal data and review data accordingly. For example, we will hold:
Data held |
Retention period |
---|---|
Financial data |
7 years |
Accident data |
3 years or if a minor, under 18, until the individual reaches 21 years old |
Membership contracts, direct debit mandate |
1 year after leaving |
Health data for programmes |
1 year after non-use of facilities |
Health data from our gym inductions or gym GP referrals |
1 year after non-use of facilities |
Customer comments cards |
1 year |
Information from enquiries |
Information will not be retained after contact has been made |
Membership exit surveys |
1 year |
North Yorkshire Council relies on the following lawful basis to process your personal data:
For the use of your image/ videos in marketing material and for where you have opted in to receive marketing communications, the Council relies on:
For all other processing activity, the council will rely upon the following lawful basis:
When processing special category data, the council will rely on the following lawful basis:
UK GDPR Article 9(2)(g) – processing of your special category data is necessary for reasons of substantial public interest (with a basis in law), meeting schedule 1, part 2 of the data protection act 2018 as below:
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.