MobileAdventure is registered with the Information Commissioner’s Office, reference ZA364350.
We are committed to ensuring that your privacy is protected and you can be assured that any information we request from you will only be used in accordance with this privacy statement. Under the updated General Data Protection Regulation (GDPR) we are to clearly state to you how we will use any personal data and our legal basis for collecting it, how long we will store it for, how we will transfer it and who to, how we will protect it, and your rights surrounding your data
Your rights as a data subject against MobileAdventure
If you would like to exercise any of the above rights please contact the Information Controller above. You also have the right to lodge a complaint direct with the supervisory authority, the Information Commissioner (ico.org.uk) who can also be contacted on 0303 123 113. Our Company Reference is ZA364350
We don’t! However, Google (if you have clicked through one of our adverts) may do. It is normally possible to set your web browser to stop this.
Links to other websites
Our website contains links to enable you to visit other websites of interest easily. Once you have used these links to leave the MobileAdventure site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement.
Providing MobileAdventure with your Personal Data
There are a number of ways in which you will be required to provide us with your personal data (Name, addresses, contact numbers, email address) and in some circumstances what is known as Special Category Data (Health and medical information). Under GDPR it is important for organisations to be transparent with you on how and why we collect this data. Further down this page you will also be able to learn about how or why we will transfer your data.
Collection via the website
Collection via the E-Newsletter
For e-marketing we use the provider MailChimp. You will only be added to the MailChimp client list if you have given us clear consent to do so. This will either be done by yourself completing the MailChimp e-newsletter sign up form or by ticking the appropriate box on our Acknowledgement of Risk form. The data collected for this can be as little as an email address. You can unsubscribe from this e-newsletter at any time either through the unsubscribe button or by emailing us.
Collection by Phone
Upon calling us, our phone will automatically store your number. Your number will not be saved by us and the memory holding call lists on our phones will be wiped incrementally through the year.
Collection via Acknowledgement of Risk Form
Before the event starts we will require confirmation of personal data and some special category data. This data is required to ensure we have appropriate contact information for you and have a handle on your health and physical condition. This special category data surrounding your health is used so we can inform your guide / instructor of any current or historical health issues (please see below for information on how we transfer this data).
Our Acknowledgement of risk form also has the requirement for you to list an appropriate emergency contact. This is required so that in the event of an incident we have a point of contact to notify. You will be required to tick the appropriate box to display this person has consented to their data being passed on to us.
Please note; While it is common practice, sending any of this data by email is not secure. This is why we only use paper copies of the special category data, physically handed to us on the day. Should you wish to use an encrypted service to transfer anything else you can do so via WhatsApp, Facebook Messenger or DropBox.
How do we store your Data? How is it secured?
Any data which is completed on an electronic form (be it through the website, e-newsletter or sent via email) is protected on appropriate accounts via password on a desktop PC. The passwords for these accounts is only known by the listed Information Controller. The PC in question has up to date anti-virus and malware protection to defend the data from hacking. The company email account is reputable, secure and protected by the above malware software. Personal data is never stored on external devices such as hard disk drives or CD.
If your data is to be stored in physical format it is done so within the MobileAdventure Office in a locked drawer and is not transferred from this location.
How long will we have it for?
Any personal data outside of the e-newsletter will be disposed of either by electronic deletion (or shredding if physical) 6 years after the date of the event you have attended. This time frame allows us to keep the data provided on file long enough to be used within any negligence claims that may be brought upon us (in which an individual has 3 years to make). Please note, this 6 year period will only start from when the person in question hits the age of 21 if they are not already on the event date.
Our Legal basis for requiring this personal data and Special Category Data
We have a Legitimate interest to collect this data from you so we can process your bookings and or keep you up to date with our marketing activities. With regards to processing special category data, it is in your best interest that our team know any and all vital medical issues and history to aid us in any incident.
The transfer of your Data
The only way in which your data will be transferred is to a member of the MobileAdventure team. Secure transfer procedures have been put in place to prevent loss of your data. The team member has also signed a contract with MobileAdventure detailing their understanding and compliance on this matter. They will never take a copy away after the event. This is done under the legal basis of Vital Interest I.e. the instructor will need to know your medical history in case of an incident.
Your data will never be passed or sold on to third parties
Personal Data Breaches
This could be as simple as sending your phone number to the wrong person or including another email address . In the event of such as break the ICO will be informed. You will only be informed if the breach is likely to result in a high risk of adversely affecting individuals rights and freedoms, in which case you will be informed immediately.
Changes to this Privacy Notice
This notice was last updated on 28th March 2020. MobileAdventure may amend this notice from time to time to keep it up to date or to comply with legal requirements. If necessary, you may be notified of the changes. Your contact details would be used for this purpose, based on the legal basis of compliance with legal obligations or legitimate interests (or both, as relevant)