Data Protection Policy

If you undertake any of the following activities and provide personal data to us we will endeavour to make it clear why we need it and to obtain your specific consent to use it. Unless otherwise notified you will be treated as having consented to our use of your personal data under the terms of this Policy if you then:

• use any of our facilities or the facilities of Plas Heli, the Welsh National Sailing Academy and Event Centre
• obtain any goods or services from us;
• participate in any sporting event, experience day, boat show, or sporting competition run by us;
• enter a competition, promotion or survey run by us;
• visit the Plas Heli web site or any of our associate websites
• become a volunteer of the user groups of Plas Heli or in any other capacity;
• subscribe for the Plas Heli e-newsletters and updates;
• or any child for whom you are responsible participates in a Plas Heli activity;
• become an instructor;

For the purpose of the Data Protection Act 1998 (the Act), the data controller is Plas Heli Cyf, Glan y Don, Pwllheli, Gwynedd LL53 5YT

In the membership application process of CHPSC the applicant will be asked to confirm their consent for their details to be forwarded to Plas Heli Cyf so that the appropriate discount afforded to CHPSC members can be provided. The data received and held on trust by Plas Heli for CHPSC is as follows :

• 'Name',
• 'Membership Number' and
• 'Post Code'

The Plas Heli.org websites use cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to make improvements. For detailed information on the cookies we use on our websites and the purposes for which we use them, please refer to the cookie policy here.

The PlasHeli.org  web site is SSL certified and uses HTTPS - SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral.

We use information held about you to fulfil our obligations to you in the following ways:-

• to provide you with any products and services that you request from us including: camping, carparking, pontoon berths, room hire, race entries; participation events; social events; coaching and training services;
• to register you as a volunteer, or in some other capacity;
• to perform management and governance duties of the enterprise for the benefit of the user groups and community;
• to comply with the Rules of the Governing Bodies and other regulatory authorities;
• to consider any complaints made to us about you which is of legitimate concern to us.

We use the information to keep you updated in the following ways:

• By e-newsletter:
• to notify you about changes to our products, facilities or services;
• to notify you about activities, achievements and articles which we feel may be of interest to you;
• to provide you with information about other goods and services we offer;

• By web site information and Articles:
• to ensure that content from the site is presented in the most effective manner for you and for your computer or mobile device;
• to administer the site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
• to identify and implement improvements in the operation of the site, the content included on the site and the way in which content is presented;
• to allow you to participate in interactive features of the site, when you choose to do so;
• as part of our efforts to keep the site safe and secure;
• to measure or understand the effectiveness and relevance of advertising on the site.

We will not share your information with any third parties except for the following:

• with CHPSC regarding club membership card information and discount associated processes;
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation; 
• to protect the rights, property, or safety of Plas Heli Cyf. This includes exchanging information with other organisations for the purposes of fraud protection and credit risk reduction.

We may keep and process your personal data for so long as required to fulfill our obligation to you on your chosen service.

Where the service provided to  you lapses we may retain your data for up to two years for the purpose of facilitating the renewal of your service.

We may also retain and process your personal data in a format that does not permit identification of you for historical and statistical purposes.

All data collected will be kept securely on computer and paper membership forms on files. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Where we have given you (or where you have chosen) a password or PIN number which enables you to access certain parts of the Plas Heli website, you are responsible for keeping this password or PIN number confidential. We ask you not to share passwords and PIN numbers with anyone.

The transmission of information over the internet is not completely secure. We will do our best to protect your personal data, we cannot, however, guarantee the security of your data transmitted to us and consequently any transmission to us is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

The Plas Heli web site is SSL certified and uses HTTPS - SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral.

If we retain your personal data after the service provided to you has lapsed then you have the right to ask us not to process your personal data. You can exercise this right at any time by contacting us at by e-mail here.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

You are entitled to have access to the information we hold about you. Access request must be made by e-mail to the Plas Heli Cyf here.

We will respond within a reasonable period but not more than 14 days.

Any changes we may make to our privacy policy in the future will be posted on the Plas Heli.Org website and, where appropriate, notified to you by e-newsletter. Please check back frequently to see any updates or changes to our privacy policy. The version date is shown at the bottom of this document.

 Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to Plas Heli Cyf here.

Schedule 1 to the Data Protection Act lists the data protection principles in the following terms:

1. Personal data shall be processed fairly and lawfully and, in particular, shall not be processed unless –
   (a) at least one of the conditions in Schedule 2 is met, and
   (b) in the case of sensitive personal data, at least one of the conditions in Schedule 3 is also met.
2. Personal data shall be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes.
3. Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed.
4. Personal data shall be accurate and, where necessary, kept up to date.
5. Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
6. Personal data shall be processed in accordance with the rights of data subjects under this Act.
7. Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
8. Personal data shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.