We are part of Cumbria County Council and as such abide by their policies, procedures and rules. Cumbria County Council is the 'data controller' under the General Data Protection Regulation and is committed to protecting your privacy when you use its services including the services provided by Active Cumbria.
The County Council Privacy notice explains what personal data the council will collect, who it will be shared with, why it is needed, and how it will be used. The council will continually review and update this privacy notice to reflect service changes, feedback from customers and changes in the law.
As an Active Partnership we are contracted by Sport England to carry out a number of activities. In this instance, Sport England are the 'data controller' and we are a 'data processor'. Sport England will still be responsible for decisions about how your personal data is used.
The information we collect via this Website may include:
Any personal information we collect from this website will be used in accordance with the Data Protection Act 2018 and other applicable laws. The details we collect will be used:
Before we collect and use personal data, we must be able to demonstrate that there is a lawful basis for us to do so. The General Data Protection Regulation 2018 provides six lawful bases for processing personal data:
Our lawful basis for collecting and using personal data varies depending on why we have collected it and what we will do with it. Whenever we collect personal data directly from you we will set out our lawful basis as clearly as we can, or links to the information you need. If we receive personal data about you from a third party, we will use reasonable efforts to identify our lawful basis where it is possible and practical for us to do so.
Subject to certain conditions, you are entitled to have access to your personal data (this is more commonly known as submitting a "data subject access request"). If possible, you should specify the type of information you would like to see to ensure that our disclosure is meeting your expectations. We must be able to verify your identity. Your request may not impact the rights and freedoms of other people, eg privacy and confidentiality rights of other staff. Where you, the data subject, make a request by electronic form means, the information will be provided by electronic means where possible, unless otherwise requested.
Subject to certain conditions, you are entitled to receive the personal data which you have provided to us and which is processed by us by automated means, in a structured, commonly-used machine readable format. If you exercise this right, you should specify the type of information you would like to receive (and where we should send it) where possible to ensure that our disclosure is meeting your expectations. This right only applies if the processing is based on your consent or on our contract with you and when the processing is carried out by automated means (ie not for paper records). It covers only the personal data that has been provided to us by you.
You may challenge the accuracy or completeness of your personal data and have it corrected or completed, as applicable. You have a responsibility to help us to keep your personal information accurate and up to date. We encourage you to notify us of any changes regarding your personal data as soon as they occur, including changes to your contact details, telephone number, immigration status. Please always check first whether there are any available self-help tools to correct the personal data we process about you. This right only applies to your own personal data. When exercising this right, please be as specific as possible.
Subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data. As stated above, this right applies where our processing of your personal data is necessary for our legitimate interests. You can also object to our processing of your personal data for direct marketing purposes.
Subject to certain conditions, you are entitled to have your personal data erased (also known as the "right to be forgotten"), eg where your personal data is no longer needed for the purposes it was collected for, or where the relevant processing is unlawful. We may not be in a position to erase your personal data, if for example, we need it to (i) comply with a legal obligation, or (ii) exercise or defend legal claims.
As stated above, where our processing of your personal data is based on your consent you have the right to withdraw your consent at any time. If you withdraw your consent, this will only take effect for future processing.
You also have the right to complain with the Information Commissioner's Office (ICO), which is the UK data protection regulator. More information can be found on the Information Commissioner's website: www.ico.org.uk/concerns
If you would like to discuss your information rights further, please contact the council's Data Protection Officer:
Data Protection Officer, Information Governance Team
Cumbria County Council, Cumbria House, 117 Botchergate , Carlisle