In preparation for the General Data Protection Regulations that come into effect in May 2018, Edinburgh School of Music have audited and reviewed all our systems, policies and processes related to how we store and process your personal data. Protecting your data, and your rights under the GDPR is a priority for us and we will continue to review our processes as our business evolves.
We are committed to protecting your privacy
We collect the minimum amount of information about you that is commensurate with providing you with a satisfactory service. Our Privacy Notices declare the types of data we collect, store and process.
We may collect any or all of the information that you give us depending on the type of transaction you enter into, including your name, address, telephone number and email address, together with data about your use of our services.
How and why we process your personal data
To enroll a child in our lessons or register your interest in our service, you need to provide some personal data:
Your Contact Details
Product Preferences (for example instruments you would like your child to play)
Your Child’s Information (Name, School, Year Group, any relevant Medical / Educational Notes)
We consider Medical Notes you provide to be Special Category Data, and our legal basis for storing this is to protect the Vital Interests of your child. For example, when your child is in our care, knowing about life-threatening allergies helps us to keep them safe.
To effectively delivery our service, we may also store a record of your:
Communication History with us (e.g. copies of emails, or notes about phone calls)
Child’s Lesson Attendance
If you are a paying customer, you are required to provide:
Bank Details or Credit/Debit Card Details
These will be stored and processed by specialist third party payment processing suppliers. We do not store a copy of any credit/debit card details.
Recording your child’s performances (video/photo/audio)
With your consent, we may film, photograph and record your child’s musical performance as an optional part of the educational experience we deliver. Any images/recordings are published separately from your personal data, and you are able to take part in ESM services without opting-in to this part of our product.
Our Legal Basis for processing your personal data
For active customers, our Legal Basis for collecting and processing your personal data is our Contract with you.
For prospective customers (e.g. if you join our waiting list) our Legal Basis is your intention to enter into a Contract with us.
For recording (video/photo/audio) our Legal Basis for processing this data is Consent.
How and when we share your personal data
We may share details of your personal data such as a phone number or email address with your music teacher to ensure lessons run smoothly.
How long we store your data
We store your data for up to three years after:
You finish as an active customer; or
Your last contact with us
We use the information collected primarily to deliver our services to you. Data collected in the UK is held in accordance with the General Data Protection Regulation (GDPR). All reasonable precautions are taken to prevent unauthorised access to this information.
We do not disclose any personal information obtained about you to third parties except when we need to do so in order to deliver our service to you, when required to do so by law, or with your consent.
Keeping you informed
We may use your information to keep in contact with you and inform you of developments associated with our business. You will be given the opportunity to remove yourself from any mailing list or similar device.
Changes to this policy
Edinburgh School of Music, Studio 1.03, St. Margaret's House,
151 London Road, EH7 6AE
TELEPHONE: 07595 759367
Your rights under the GDPR
You have qualified rights to access, rectify and erase your personal data, and to restrict or object to processing, and to make your data portable. You have the right to complain to a Supervisory Authority (e.g. The Information Commissioner’s Office).
How to raise a concern about how your data is handled
Please contact us with any concerns you have about how we are handling your data. For detailed guidance on how to raise a concern, and your rights to escalate concerns to the Information Commissioners Office (ICO) please visit: https://ico.org.uk/for-the-public/raising-concerns/