Your personal data and privacy is important to Oriam. We could not provide you with our services and fulfil our obligations to you without collecting, holding and using your personal data. This guide explains what we do with your personal information and why, the type of information we gather, how the information is used, and when and why we share information with others.
This Guide applies to:
- All users of our facilities, including regular users, customers, members and partners
- Anyone who uses our website oriamscotland.com, our join@home membership system or who registers at our reception
Who is the data controller
What information we collect and use
- Name and address;
- E-mail address
- Financial information
- Goods or services provided;
- Visual images e.g. on a membership card
If you purchase through our website, we will record your billing address, however we do not record your payment card details.
If you email us directly via an email hyperlink or contact form to provide us with feedback or to ask us a question regarding the site, we will record any information contained in such email.
If you fill out a form on the site, which asks for your personal information, we will record your contact information and other fields within the form.
Where this is necessary to meet a legal obligation, or with your consent, we may also process sensitive information, also known as special categories of data under GDPR, or protected characteristics under UK human rights law which may include:
- Physical or mental health
- Pregnancy and Maternity
Why we collect and use your personal data
- For most of these activities, we need to process your data to fulfil a contract or service agreement you have entered into with us
- If you register your interest in receiving information about membership services e.g. sports facilities, you can opt into communication about these and withdraw your consent to them at any time
- Where necessary for our legitimate interests to improve and promote our services as long as this does not compromise your rights to data protection
For all users and potential users of Oriam: we collect, store and use information about you in order to deliver our services to you. We collect this information when you:
- Sign up to receive emails
- Request resources by post
- Sign up for a training course
- Participate in one of our activities
- Join a health walk group
- View our websites or contact us by email
- Give us your details at an open day, event or conference
- Seek your feedback on our environment, terms and conditions, and facilities
For administrative and financial management purposes. What is our legal basis?
- We need to process your data to fulfil a contract you have entered into with us.
These may include:
- Fees and payments
- Catering services
- Club and facility memberships
To meet our duty of care to you and our legal obligations. What is our legal basis?
Where this is necessary to:
- Comply with a legal obligation; this may be under employment, social security and social protection law, immigration law or another statutory duty
- Protect vital interests in an emergency
- Exercise or defend legal claims or comply with court judgements
- Provide medical and health services
- Protect public health. Comply with legal duties in the substantial public interest e.g. for equality monitoring
- To meet our legal duty of care to you under health and safety and safeguarding laws
- To protect your vital interests or someone else’s e.g. in a medical emergency
For public safety and the prevention and detection of crime What is our legal basis?
- Where this is necessary for the prevention, investigation, detection or prosecution of criminal offences
- Where required by law
- For the safeguarding against and the prevention of threats to public security
Processing for these purposes includes:
- Use of CCTV systems to monitor and collect visual images
- IT security monitoring Fraud prevention and detection
- Reporting incidents of suspected criminal activity to the police
- Applying security, welfare and other procedural measures where necessary for the safety and security of our users, staff and the wider University community under health and safety and other relevant laws.
To improve our services and promote ORIAM and the University Group. What is our legal basis?
- Where we have your consent
- Where necessary for our legitimate interests as long as this does not compromise your rights to data protection
- Where necessary for archiving purposes in the public interest
In order to improve our services we may analyse data about our members’ use of facilities, responses to our promotional campaigns and usage of our website.
We may take photographs, and other images and recordings of users for possible use in our publicity and promotional material in print and online on our websites and social media. We always inform people when filming and will only feature you in such promotional material with your consent. We keep copies of promotional material in the University Archive as a record of Oriam activities down the years.
For archiving and research What is our legal basis?
- Where this is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
While always protecting your rights to privacy we will:
- Retain copies of promotional material and other records of Oriam events and activities community life that may include images and other data about you
- Produce management and statistical information to monitor and improve our performance.
Who your information may be shared with and why
- Help the emergency services (fire, police, ambulance) or a health professional to protect your vital interests or someone else’s e.g. in a medical emergency
- Provide limited information necessary to an organisation with a statutory function, such as the police, Home Office or other Government Agency; Disclosure Scotland or other relevant disclosure services, where this is necessary for law enforcement
- Meet a statutory or regulatory obligation, e.g. a court order
How long we keep your personal data
Automated decision making
You have the right to:
Find out what personal data we process about you and obtain a copy of the data, free of charge within one month of your request at email@example.com. We may make a charge for additional copies of the same information
If you think, we are acting unfairly or unlawfully you can:
- Object to the way we are using your data
- Complain to the UK Information Commissioner’s Office.
Under certain conditions, you also have the right to ask us to:
- Restrict the use of your data e.g. if you have raised issues about the accuracy or use of your personal data, until we have investigated and responded to your concerns
- Erase your information or tell us to stop using it to make decisions about you
- Comply with your wishes where you have previously agreed to us processing your data for a particular purpose and have withdrawn your consent to further processing
- Provide you with a portable electronic copy of data you have given us
Data Protection Officer and conntact details
If you have any questions about what we do with your personal information or your rights under privacy laws, you can contact us via the details at the foot of this page.
Find out more about your rights under privacy law
In our Data Protection Policy and our webpages.
Find out about our Information Security policies and procedures.
On the website of the UK Information Commissioner’s Office.