The Venue, as the data controller for the collection of personal data, will be responsible for compliance with data protection legislation for the period of time it holds the information. If that information is requested by the NHS Test and Trace service, the service would be responsible for compliance with data protection legislation for that period of time.
The NHS Test and Trace service, as part of safeguarding your personal data, has in place technical, organisational and administrative security measures to protect your personal information that it receives from the Venue.
NHS Test and Trace have asked us to retain this information for 21 days from the date of your visit, to enable contact tracing to be carried out by NHS Test and Trace during that period.
We will only share information with NHS Test and Trace if it is specifically requested by them. For example, if another visitor at the Venue reported symptoms and subsequently tested positive, NHS Test and Trace can request the log of visitor details for a particular time period.
Under government guidance, the information we collect may include information which we would not ordinarily collect from you and which we therefore collect only for the purpose of contact tracing. Information of this type will NOT be used for other purposes (for example, we will not use data collected for NHS Test and Trace for marketing purposes) and NHS Test and Trace will not disclose this information to any third party.
Your information will always be stored and used in compliance with the relevant data protection legislation and will be securely disposed of after 21 days.
The use of your information is covered by the General Data Protection Regulations Article 6 (1) (c) – a legal obligation to which we as a Venue are subject; a set of new regulations from the government, to co-operate with the NHS Test and Trace service, in order to help maintain a safe operating environment and to help fight any local outbreak of corona virus.
By law, you have a number of rights as a data subject, such as the right to be informed, the right to access information held about you and the right to rectification of any inaccurate data that we hold about you. If you are unhappy about how your information is used, please contact firstname.lastname@example.org, in the first instance, to resolve your issue.