​

Purpose and Statement:

Theatre Studio is committed to ensuring the data processed by our school remains safe and secure. 

 

This policy has been written in line with legislative change, including both the Data Protection Act (1998) and the EU’s General Data Protection Regulation (GDPR). 

 

Theatre Studio has determined the lawful reasons with which it processes personal data:

• Legal obligation – GDPR Article 6(1)(c)

• Legitimate interest – GDPR Article 6(1)(f)

• Contract - GDPR Article 6(1)(b)

 

There is also some limited data we process with consent from the Data Subject; Consent – GDPR Article 6(1)(a).  

 

While Theatre Studio avoids sharing data with third parties at most times, some data is shared in accordance with our business practices. The sharing of data with third parties will always be consensual with the data subject and/or their parent/guardian, and only if Theatre Studio is satisfied that their Data Protection policy is GDPR compliant. 

 

Main Aims for the policy:

• Specify the data Theatre Studio collect, how it is stored/protected and the reason for collecting it

• State how Theatre Studio use personal data in processing

• Disclose who has access to the data and how long we retain information for

• Explain Data Subject’s rights with Theatre Studio data including access, rectification and erasure

 

Distribution:

• To be distributed to Board at AGM and Induction sessions for Board Members

• To be displayed on the Theatre Studio website

• This policy will be sent directly to members of the public on request

• Confirmation of receipt of information - Signed statement from recipient to be held on file

​

Review and monitoring of policy:

• Reviewed annually or in instances of legislative change

• Monitoring is part of Management and Supervision