1. Purpose
Continuum Attractions is committed to protecting your privacy and complying with The EU General Data Protection Regulation (GDPR). This notice sets out the basis by which we will collect, use and disclose the personal data of our Employees as well as your rights in respect of such personal data.
The Continuum Group Ltd is the Data Controller and is committed to protecting the rights of individuals in line with the Data Protection Act 1998 (DPA) and the new General Data Protection Regulation (GDPR).
2. What information do we collect about you?
We may collect the following types of personal data:
- Your name and address, email address, telephone number and other contact information that allow us to meet our organizational and statutory obligations to you as your Employer;
- Details of your family members and Next of Kin details
- Bank details
- Right to work documentation and other security screening information.
- ‘Special categories’ of personal data (sensitive personal data) relate to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation. We will not utilize this data unless we have your specific consent.
3. How will your information be used?
Your information may be used for any or all of the below:
- To comply with legal obligations e.g. HMRC, pensions S29 requests
- To deal with any Employee/employer disputes that may arise
- For assessment and analysis purposes to help improve the operation of, and manage the performance of, our business
- providing IT and information services
- managing accommodation and car hire
- promoting our services
- safeguarding
- ensuring guest’s safety and security
- To prevent, detect and prosecute fraud or other crime.
- For any other purpose for which you give us your consent to use personal data.
We may share your personal data with:
- Our employees, agents and/or professional advisors
- With other companies within the current or future Continuum Group
- With other third party contractors who provide services to us
- Where we are under a legal obligation to do so, for example where we are required to share information under statute, to prevent fraud and other criminal offences or because of a Court Order for example HMRC, the police and any other statutory body.
4. What is our legal basis for processing your personal data?
Whenever we use personal data, we must have a legal basis for doing so. GDPR gives us a list of possible legal bases we can choose from, such as:
- Necessary for contractual arrangements
- processing to comply with legal obligations
- processing to protect vital interests
- processing to perform a task in the public interest
- processing necessary for legitimate interest
- Consent
If we are using special categories of (sensitive) personal data, there are additional legal bases we must comply with. Full details can be found within our Data Protection Guidance and on the Information Commissioner’s Office website.
5. How long will your information be held?
You data will be held for no longer than is necessary. Our retention policy is set out in the Data Protection Guidance document available on our website.
6. What are your rights?
You have a right to to access your personal information, to object to the processing of your personal information, to rectify, to erase, to restrict and to port your personal information. Please visit the intranet for further information in relation to your rights.
Any requests or objections should be made in writing, marked “Private & Confidential” to The People Team, Continuum Attractions, St Edmond’s House, Margaret Street, York, YO10 4UX.
7. Security of your information
The security of your personal data is very important to us. We will ensure that we have in place appropriate technical and organizational measure to prevent unauthorized or unlawful processing of personal data and against accidental loss or destruction of or damage to personal data.
8. How to make a complaint
If you are unhappy with the way in which your personal data has been processed you may in the first instance contact:
Dorothy Stubbs, Group Head of People & Development, St Edmunds House, Margaret Street, York, YO10 4UX.
If you remain dissatisfied then you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:
Information Commissioner’s Office (www.ico.org.uk)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
