For the purposes of the General Data Protection Regulation ("GDPR") and Irish data protection laws, the controller is Malahide School of Music (the "we", "us") of 9 Castle Terrace Court, St.Margaret's Road, Malahide, Co.Dublin.
We may collect your personal data in a few limited ways, namely:
Directly from you, when you make enquiries on our website, or when you interact with us during your time as a student or parent/guardian, or when you interact with us in various other ways (for example, where you enter a competition, enter exams, sign up for lessons);
From someone else who has applied for lessons/course on your behalf (for example a family member (parent/guardian) who has provided us with your contact details for that purpose);
We may collect the following types of personal data about you:
Contact and communications information, including your contact details (email address and telephone number, and records of communications and interactions we have had with you);
Financial information, including records of payment;
Certain other information which you volunteer e.g data about your health or medical conditions, so that we can cater for you when you decide to take RIAM exam at our exam centre.
Personal data provided to us will be used for the purposes set out at the time of collection and, where relevant, in accordance with any preferences you express.
More generally, we will use your personal data for the following purposes:
Administration of your membership, including:
Informing you about facilities and opening hours;
Taking payment of registration/lesson fees;
Fulfilment of orders for services, including lesson bookings
Research and statistical analysis about who is taking lessons at our school of music
Communication about our school of music activities that we think may be of interest to you;
We will always respect your wishes in respect of what type of communications you want to receive from us and how you want to receive them. There are some communications, however,
that we might need to send you via email regardless of your marketing preferences in order for us to fulfil our contractual obligations to you as a student of our school of music.
Examples of these essential service communications are:
Membership/lesson related mailings such as reminders, notices of forthcoming events and information about venue closures and holiday opening hours.
You are in control of how we communicate with you. You can update your choices and/or your contact details by contacting us at: email@example.com
We do not sell or share your personal data with other organisations to use other than as set out below.
Personal data collected and processed by us may be shared with the following third parties, where necessary:
The Royal Irish Academy of Music for the purpose of taking a music exam.
The information is stored electronically on Google Docs, a software platform.
Are any payment details stored?
Payment details are not stored by Malahide School of Music but details of who has paid, any monies outstanding etc are kept in order to manage accounts and send invoices. Payment can be made via cheque, cash or EFT, subject to agreement with teacher.
We keep your personal data only for as long as necessary for each purpose we use it. For most data, this means we retain it for so long as you continue to participate in Malahide School of Music and/or lesson related services and for a period of six years after your last interaction with us (for accounting, tax reporting and record-keeping purposes).
Under certain circumstances, by law you have the right to:
Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.
Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it. You can also withdraw your consent, where this is the basis for our processing your data (without affecting the lawfulness of our previous processing based on consent).
Request the transfer of your personal data to another party.
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
If you are not satisfied with how we are processing your personal data, you can make a complaint to the Data Protection Commission. You can find out more about your rights under applicable data protection laws from: www.dataprotection.ie