The privacy of our customers, students and members data is important to us
and as we process personal data, we provide our policy for that.
Yorkshire Aero Club are committed to protecting and respecting your privacy. For any personal data you provide for the purposes of your membership, Yorkshire Aero Club is the Data Controller and is responsible for storing and otherwise processing that data in a fair, lawful, secure and transparent way.
Who we are
Our website address is: https://www.yac.uk.
What personal data we collect and why we collect it
You may give us information about you by filling in application forms or online, or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register with the Club, The information you give us may include your name, date of birth, address, e-mail address, phone number. We may also ask for relevant flying licence data such as expiry dates of ratings and medical certificates. If undertaking flight training, we shall maintain progress records with details of the training. On completion of training, these records will be archived for 5 years.
Why we need your personal data
The reason we need your Data is to be able to administer your membership and to provide the membership services you are signing up to when you register with the club. Our lawful basis for processing your personal is that we have a contractual obligation to you as a member to provide the services you are registering for.
Reasons we need to process your data include:
For training and aircraft hire purposes
- sharing progress data with club instructors and the CAA
- sharing personal data and with the CAA
For membership and club management
- processing of membership forms and payments;
- sharing data with committee members to provide information about club activities, membership renewals or invitation to social events;
- club newsletter promoting club activity; and
Marketing and communications (where separate consent is provided)
- sending information about promotions and offers;
- sending information about selling merchandise.
The club has the following social media pages: Facebook, Twitter and Instagram. All members are free to join these pages. If you join one of the Social Media pages, please note that provider of the social media platform(s) have their own privacy policies and that the club do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data on the club social media pages.
Who we share your data with
There are times where Yorkshire Aero Club will be obliged to share personal data with the CAA. The Club does not supply any personal data it holds to any other third party. The Club does not store or transfer your personal data outside of the UK with the exception of Mail Chimp, the email marketing provider that is used to send Yorkshire Aero Club email campaigns and Microsoft One Drive cloud storage. Data held by Mail Chimp is limited to Name and Email address only. Data held in Microsoft One Drive is that required for the maintenance of student progress and membership records. The Yorkshire Aero Club ATO Manual details the format of such progress and membership records. Yorkshire Aero Club will ensure that it is satisfied with the controls put in place by remote / cloud-based data services providers to protect the data.
How long we retain your data
We will hold your personal data on file for as long as you are a member with us. Member data is updated every year on annual membership forms. Any personal data we hold on you will be securely destroyed after five years of inactivity on that member’s account, in line with Yorkshire Aero Club’s retention policy of student records. Your data is not processed for any further purposes other than those detailed in this policy.
What rights you have over your data
As a data subject you may have the right at any time to request access to, rectification or erasure of your personal data; to restrict or object to certain kinds of processing of your personal data, including direct marketing; to the portability of your personal data and to complain to the UK’s data protection supervisory authority, the Information Commissioner’s Office about the processing of your personal data.
As a data subject you are not obliged to share your personal data with the Club. If you choose not to share your personal data with us we may not be able to register or administer your membership.