GDPR & Privacy Policy

PEDALL Privacy Notice 

This notice explains how PEDALL (we) use the personal information that we collect about you. PEDALL is run by the charity Friends of PEDALL and the New Forest National Park Authority, who are the data controller.

How we will use your information 

We collect information about you when you correspond with us or register to attend one of our rides or events. In order to take part and for us to provide you with a safe and ability-appropriate experience we need to collect personal information about you, which will often include special categories of personal data such as optional accessibility information, as well as mental and physical health information.

The information you provide will be used to process your booking and to provide you with the most appropriate bike, equipment and experience for you and your group’s abilities and needs. Where you provide us with special categories of data, such as accessibility information, you are consenting to us using the information for this limited purpose.

The lawful basis for our use of your information under the UK General Data Protection Regulation is Article 6(1)(f) – where processing is necessary for the legitimate interests pursued by the controller; in this case our legitimate interests in administering the event in a proper and safe manner. If you are paying for an event, then processing your personal information is necessary for the performance of a contract to which you, the data subject, are party (Article 6(1)(b)). Special categories of data (predominantly health data) are being processed under Article (9)(2)(a) – the data subject has given consent to the processing of their personal data for one or more specified purposes.

Your information will be held securely on our systems and will not be used for any other purposes. It will not be shared with third parties except in the event of a serious incident where it may be necessary to pass your information to the emergency services and potentially to other bodies such as the Health and Safety Executive or our insurers.

As part of PEDALL’s funding agreements, we are required to share information on the project, for example in order for the Big Lottery Fund to better understand the project and analyse the success and take up of their various funded projects. This is done in an anonymised way, such as providing only numbers of participants, and individuals can’t be identified from any of the shared information.

After the event we will retain your information for 4 years, in accordance with our retention policy, and it will then be permanently deleted from our systems.