Woodside Caravan Park takes the security of all the data we collect very seriously. A company responsible for data collection and use is called the “data controller”.  The data controller is Woodside Caravan Park and our representative is Heather Boak.

INFOMATION WE MAY COLLECT

In order to run the site efficiently we need access to some of your personal data, this will include names, addresses, email addresses, phone numbers (both landline and mobile) and depending on how you pay your bills (cheques) we will have access to some bank details.

LAWFUL BASIS

The data processing we do is necessary for legitimate interests and/or to fulfil a contract with us; we need the data to fill in the contracts we use, to send invoices, to let you know of any changes that will affect you or the site, to reply to any enquiries that we receive through our website and in case of any emergencies.

OTHER PEOPLE WITH ACCESS TO THE DATA

As a business we sometimes need to use other businesses to help us with other services, like using a web hosting service to help with our website or using an accountant, they are referred to as “data processors” and they will have some access to your personal data.  In order to comply with the General Data Protection Regulations (GDPR) 2018 and the Data Protection Act 1998 we have Data Protection Agreements in place with all of our data processors.

We warrant that we will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.

Every data subject is entitled to see what information an organisation holds about them but you are not entitled to see anyone else’s information.

HOW LONG DO WE KEEP DATA

As long as you have a caravan or lodge on Woodside Caravan Park we will keep your personal data, once you are no longer a caravan/lodge owner we will no longer require your data and it will be removed from our data base, apart from financial records which will be kept for six years following your last transaction with us.

DATA SUBJECTS RIGHTS

The right to be informed
As a data controller, we are obliged to provide clear and transparent information about our data processing activities. This is provided by this privacy policy and any related communications we may send you.

The right of access
If anyone wants to see their information you can ask by putting in a request in writing or verbally. This is called a data subject access request (DSAR).  We will provide access to the personal data we hold about you within one month as well as the following information:

1. a) The purposes of the processing
   b) The categories of personal data concerned
   c) The recipients to whom the personal data has been disclosed
   d) The retention period or envisioned retention period for that personal data
   e) When personal data has been collected from a third party, the source of the personal data

The right to rectification
When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.

The right to erasure (the ‘right to be forgotten’)
Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data. This includes personal data that may have been unlawfully processed. We will take all reasonable steps to ensure erasure.

The right to restrict processing
You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies you may exercise the right to restrict processing:

1. a) The accuracy of the personal data is contested
   b) Processing of the personal data is unlawful
   c) We no longer need the personal data for processing but the personal data is required for part of a legal process
   d) The right to object has been exercised and processing is restricted pending a decision on the status of the processing

The right to data portability
You may request your set of personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available for information that you have given to us and only applies if we are processing information based on your consent or have entered into a contract (or are about to do so) and the processing is automated.

The right to object
You have the right to object to our processing of your data where:

Processing is based on legitimate interest;

Processing is for the purpose of direct marketing;

Processing is for the purposes of scientific or historic research. We do not use your personal data for this purpose

Processing involves automated decision-making and/or profiling. We do not make decisions using automated means or use your personal data to create a profile of you.

The right to withdraw consent.

You have the right to withdraw consent at any time where we use consent as the lawful basis for using your personal data. Currently we do not use consent in this way.

COMPLAINTS

Should you wish to discuss a complaint, please feel free to contact us using the details provided above. All complaints will be treated in a confidential manner.

Should you feel unsatisfied with our handling of your data, or about any complaint that you have made to us about our handling of your data, you are entitled to escalate your complaint to a supervisory authority within the European Union. For the United Kingdom, this is the Information Commissioner’s Office (ICO), who is also our lead supervisory authority. Its contact information can be found at https://ico.org.uk/global/contact-us/.

HOW TO CONTACT US

You can contact us by:

Emailing us at: info@woodside-caravanpark.com

Phone: 01768483253 /07895 426296

Writing to: Woodside Caravan Park, Greystoke, Penrith, Cumbria, CA11 0TJ