GDPR Compliance Statement
The EU General Data Protection Regulation (GDPR) came into force across the European Union on 25th May 2018 and brings with it the most significant changes to data protection law in two decades.
Chris-Guitar are committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We have always had a robust and effective data protection program in place which complies with existing law and abides by the data protection principles. However, we recognise our obligations to meet the demands of the GDPR.
Chris-Guitar are dedicated to safeguarding the personal information under our remit and in developing a data protection regime that is effective, fit for purpose and demonstrates an understanding of, and appreciation for the new Regulation. GDPR compliance have been summarised in this statement and include the development and implementation of new data protection roles, policies, procedures, controls and measures to ensure maximum and ongoing compliance.
GDPR Compliance Statement
Chris- Guitar have a consistent level of data protection and security across our organisation.
Data Protection – our main policy and procedure document for data protection meets the standards and requirements of the GDPR.
Data Retention & Erasure – we meet the ‘data minimisation’ and ‘storage limitation’ principles and that personal information is stored, archived and destroyed compliantly and ethically. We have dedicated erasure procedures in place to meet the new ‘Right to Erasure’ obligation.
Obtaining Consent - obtaining personal data, ensuring that individuals understand what they are providing voluntarily, why and how we use it, processing their information, and an easy to see and access way to withdraw consent at any time
Data Subject Rights
In addition to the policies and procedures mentioned above that ensure individuals can enforce their data protection rights, to access any personal information that Chris- Guitar processes about them and to request information about: -
What personal data we hold about them
The purposes of the processing
The recipients to whom the personal data has/will be disclosed
How long we intend to store your personal data for
The right to request erasure of personal data (where applicable) or to restrict processing in accordance with data protection laws, as well as to object to any direct marketing from us and to be informed about any automated decision-making that we use
Information Security & Technical and Organisational Measures
Chris- Guitar takes the privacy and security of individuals and their personal information very seriously and take every reasonable measure and precaution to protect and secure the personal data that we process.
Chris-Guitar understands that continuous awareness and understanding is vital to the continued compliance of the GDPR.
Chris –Guitar Privacy Notice
Under data protection law, individuals have a right to be informed about how Chris- Guitar uses any personal data that we hold about them. We comply with this right by providing ‘privacy notices’ (sometimes called ‘fair processing notices’) to individuals. This privacy notice explains how we collect, store and use personal data about Guitar Students.
The personal data we collect, hold and share
Personal data that we collect, use, store and share (when appropriate) about Guitar students includes:
School Pupils Personal information & Contact details ( name, school year, parents/carer email address, parents/carer phone number)
Update Reports on pupils Guitar progress
Contact details held of all other Guitar Students (not in school / college) Name, email address & phone number
Why we use this data
Monitor and report on Guitar Student progress
Information on Guitar Lesson appointments
Comply with the law regarding data sharing
Our legal basis for using this data
Personal data, can be withdrawn at any time by emailing
Collecting this information
Information on Guitar students is provided voluntarily for Guitar Lessons.
How we store this data
We keep personal information about Guitar students only while they are attending guitar lessons. Once they no longer attend Guitar lessons all names, emails and phone numbers will be destroyed / deleted. We may keep it beyond their attendance if this is necessary in order to comply with our legal tax obligations.
We share necessary information about pupils at schools with attending Guitar Teacher.
Guitar teacher has a timetable of Name of pupil and school year – no emails or phones numbers are shared
Guitar teachers monitor and report on Guitar Student progress.
No personal data information is shared with any other third party.
Parents and pupils’ rights regarding personal data
Individuals have a right to make a ‘subject access request’ to gain access to personal information that Chris-Guitar about them.
Parents/carers can make a request with respect to their child’s data and have the right to make a subject access request with respect to any personal data Chris- Guitar holds about them.
If you make a subject access request, and if we do hold information about you or your child, we will:
Give you a description of it (name parent/carer email & parent / carer phone number & guitar progress)
Tell you why we are holding and processing it (regarding Guitar lessons)
How long we will keep it for – (only kept while attending guitar lessons & to comply with our legal tax obligations)
Tell you who it has been, or will be, shared with (Guitar teacher at attending school)
We take any complaints about our collection and use of personal information very seriously.
If you think that our collection or use of personal information is unfair, misleading or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance email
If you have any questions, concerns or would like more information about anything mentioned in this privacy notice, please contact email