Introduction
South County Dublin Leisure Services CLG, trading as SCD Leisure, is committed to protecting the privacy and data protection rights of all individuals whose personal data we process.
SCD Leisure processes personal data under applicable Irish and European data protection laws and is generally the data controller for personal data used in its services, employment, administration, and operations.
Policy enquiries should be sent to joanne@scdleisure.com.
Purpose and scope
This policy explains how SCD Leisure collects, uses, stores, shares, protects, and retains personal data. It applies to all personal data processed by SCD Leisure.
SCD Leisure will process personal data lawfully, transparently, securely, and only for legitimate and clearly identified purposes.
Personal data we collect and use
SCD Leisure may collect and process personal data such as contact details, membership details, booking and attendance records, payment information, facility-use records, health or medical information where required for safety, CCTV images, communications, survey responses, employment records, contractor details, and supplier information.
We use personal data to administer memberships, bookings, lessons, classes, programmes, payments, facility access, customer accounts, communications, safety procedures, incident management, safeguarding, HR administration, legal compliance, service improvement, surveys, reporting, and relevant service updates or marketing where permitted.
We will only collect personal data that is adequate, relevant, and limited to what is necessary.
Lawful basis for processing
SCD Leisure will only process personal data where a lawful basis applies. This may include consent, contract, legal obligation, vital interests, public task where applicable, or legitimate interests.
Where we rely on legitimate interests, we will balance SCD Leisure’s interests against the rights and freedoms of the individual. Where we rely on consent, consent may be withdrawn at any time, without affecting processing carried out before withdrawal.
Special category and children’s personal data
SCD Leisure may use special category data, such as health or medical information, where needed for safety, participation, incidents, employment obligations, or legal requirements, and only where permitted by data protection law.
Children’s personal data used for lessons, camps, programmes, or activities will be protected appropriately. Where appropriate, SCD Leisure will collect or share relevant information through a parent or guardian.
CCTV, marketing and sharing
SCD Leisure may use CCTV and access-control systems for safety, security, crime prevention, incident management, and protection of people and property. CCTV will be used proportionately, signage will be displayed where appropriate, and footage will be accessed only by authorised personnel.
SCD Leisure may send service-related communications where necessary. Marketing communications will only be sent where permitted by law, and individuals may opt out at any time.
SCD Leisure may share personal data where necessary and lawful with authorised staff, service providers, professional advisers, insurers, regulators, An Garda Síochána, emergency or medical personnel, parents/guardians where appropriate, and other bodies where required or permitted by law. We will not sell personal data to third parties.
Retention, security and breaches
SCD Leisure will retain personal data only for as long as necessary for the purpose for which it was collected and for any related legal, regulatory, accounting, insurance, safeguarding, employment, health and safety, contractual, or operational requirement.
When personal data is no longer required, it will be securely deleted, destroyed, anonymised, or archived in line with SCD Leisure procedures.
SCD Leisure will use appropriate technical and organisational measures to protect personal data.
Any suspected or actual personal data breach must be reported immediately in line with SCD Leisure procedures. Where required by law, SCD Leisure will notify the Data Protection Commission and/or affected individuals.
Individual rights
Individuals have rights under data protection law, subject to certain conditions and limitations. These may include the right to be informed, access personal data, rectify inaccurate data, request erasure, restrict processing, object to processing, request data portability, withdraw consent, and lodge a complaint with the Data Protection Commission.
Requests to exercise data protection rights should be made in writing to SCD Leisure. We may need to verify identity before responding. Valid requests will normally be responded to within one month.
Cookies
Our website uses cookies. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. These cookies allow us to distinguish you from other users of our website, which help us to provide you with a good experience when you browse our website and also allows us to improve our site.
The cookies we use are “analytical” cookies. They allow us to recognise and count the number of visitors and to see how visitors move around the site when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Cookies do not harm your computer and do not enable us or any third party to view any information on your computer’s hard drive. You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site. Except for essential cookies, all cookies will expire after 23 days.
To learn more about how to reject cookies, visit allaboutcookies.org or go to the help menu within your internet browser.
Responsibility and review
Overall responsibility for data protection compliance rests with senior management and Data Protection Officer of SCD Leisure. All employees, contractors, and service providers who handle personal data on behalf of SCD Leisure must process it lawfully, securely, confidentially, and only for authorised purposes.
This policy will be reviewed at least annually and updated where necessary to reflect changes in legislation, regulatory guidance, SCD Leisure services, operational practices, technology, or data processing activities.
AN AWARD WINNING LEISURE CENTRE
