Who We Are
MusicEL is the eLearning trading brand of Cornwall Music Service Trust. All MusicEL services are delivered by Cornwall Music Service Trust, and are governed by this privacy notice.
Cornwall Music Service Trust gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection Regulation and Laws. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.
Cornwall Music Service Trust: Registered with the Charity Commission for England and Wales (number 1159622) and a company limited by guarantee (number 09268124) registered in England.
Registered office: Cornwall Music Service Trust, Truro School, Trennick Lane, Truro TR1 1TH
Cornwall Music Service Trust is registered with the Information Commissioners Office ZA096861.
Information That We Collect
Cornwall Music Service Trust processes your personal information to meet our legal, statutory and contractual obligations and to provide you with our products and services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice.
The personal data that we collect from you can include: –
- Name
- Address
- Telephone Numbers
- Tax Payer Status
- Evidence of Entitlement to Remission and/or Subsidies
- Learners Name
- Learners Gender
- Learners Date of Birth
- School attended (if you are attending lessons or other music activities in-person with a teacher)
- Learners Address
- Medical and Dietary Information (if you are attending lessons or other music activities in-person with a teacher)
We collect information in the below ways: –
- Telephone
- In Writing
- Email/SMS
- Electronic (i.e. via website form)
How We Use Your Personal Data (Legal Basis for Processing)
Cornwall Music Service Trust takes your privacy very seriously and will never disclose, share or sell your data without your consent; unless required to do so by law. We only retain your data for as long as is necessary and for the purpose(s) specified in this notice. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw this consent at any time.
The purposes and reasons for processing your personal data are detailed below: –
- We collect your personal data in the performance of a contract or to provide a service and to ensure that orders are completed and can be sent out to your preferred address
- We will occasionally send you marketing information where we have assessed that it is beneficial to you as a customer and in our interests. Such information will be non-intrusive and is processed on the grounds of legitimate interests
Online and Distance Learning
Data and access to data using Zoom
MusicEL students with subscription levels that include live video sessions will be asked to use Zoom for online seminars, and group or individual lessons.
Zoom is a secure online platform. Nobody external to CMST will have access to video streams or any data related to online lessons. CMST follows all the standard practices to ensure safety and security. This includes using the waiting room, disabling student chat and screen sharing (except when asked to by the teacher), and other standard practices. Screen recording will not be enabled.
Students are instructed not to take screenshots or make video recordings of online sessions. Any training materials used for lessons can be shared by the teacher via the MusicEL platform.
Data and access to data using BandLab Edu classrooms
Adult MusicEL students with subscription levels that include live teaching using BandLab for Adults will be asked to sign up on the main BandLab platform, which has a social media element. Their privacy policy is here: https://blog.bandlab.com/privacy-policy/
MusicEL students under 18 with subscription levels that include live teaching using BandLab will be asked to sign up for a BandLab Edu account. BandLab Edu includes teachers inviting students to join classrooms, which are safe “walled gardens”. Only students on that course will be in that classroom, along with MusicEL teachers assigned to that classroom. Students will be able to upload work for assessment, and interact with teachers and fellow students by posting comments, collaborating on a live session, and through private message. As the teacher cannot see private messages between students, MusicEL requests that students under 18 register for BandLab Edu using a parent or carer’s email account, so the parent or carer will be able to log in and check messages, and raise any issues with the MusicEL teacher if there are any problems or concerns.
The BandLab Edu privacy policy is here: https://blog.bandlab.com/edu-privacy-policy/ and FAQs are here: https://help.edu.bandlab.com/hc/en-us/categories/900000030323-Privacy-Security
GDPR – Students’ personal information
CMST will not collect any information about students’ personal IDs or logons. Unlike other systems (such as Skype, Facetime, or Messenger) Zoom works by sending an invitation link to the subscriber (in the case of under 18’s this will be the parent or carer’s email address).
Students under 18 are asked not to share any personal contact information with teachers or other students (such as social media names or phone numbers). If there are any issues with students under 18 doing this, the teacher may remove the student from the online session and contact the parent/carer to discuss how to stay safe online.
Zoom also has a GDPR-compliant policy here: https://zoom.us/gdpr
BandLab’s GDPR-compliant policy is here: https://www.bandlab.com/dpa
Your Rights
You have the right to access any personal information that Cornwall Music Service Trust processes about you and to request information about: –
- What personal data we hold about you
- The purposes of the processing
- The categories of personal data concerned
- The recipients to whom the personal data has/will be disclosed
- How long we intend to store your personal data for
- If we did not collect the data directly from you, information about the source
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to do so as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with the data protection laws; as well as to object to any direct marketing from us. Where applicable, you have the right to data portability of your information and the right to be informed about any automated decision-making we may use.
If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.
Sharing and Disclosing Your Personal Information
We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. Cornwall Music Service Trust uses a thirdparty to provide the below services and business functions; however, all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.
Zoom
For more information on Zoom, read their privacy policy and GDPR policy.
Cornwall Music Education HUB (CMEH) and Cornwall Council (CC)
As part of our processes of claiming remissions and subsidies for learners along with assisting Cornwall Music Education HUB with Data Returns to the Arts Council we will need to share information with CMEH and CC through this process. For more information about Cornwall Music Education HUB, please read their Privacy Notice at http://www.cornwallmusiceducationhub.org/media/3182/cmeh-privacy-notice-may-2018.pdf
Paritor Ltd
We use Paritor Ltd as our management software programme who through Microsoft PLC provide our data hosting. For more information about Paritor Ltd, please read their GDPR Compliance Statement and Privacy Policy on the links below:
https://drive.google.com/file/d/0B94eTrjNbebtcFQzVV9IWlI1dFNyUzRiNEJRRVRlWl9sbHBr/view?usp=sharing
https://drive.google.com/file/d/0B94eTrjNbebtR0ZpUm1nM21ZQnpHdXVFT1I2aE53OW5zSHpN/view?usp=sharing
Microsoft PLC.
Paritor use Microsoft PLC to provide data hosting and management services via use of their Office 365 product. They act in the capacity of a processor on their behalf.
Please note below the Privacy Notices of all third party organisations we use operationally:
For more information about Microsoft PLC, please read their Privacy Notice at https://www.microsoft.com/en-us/trustcenter
For more information about Xero Ltd, please read their Privacy Notice at https://www.xero.com/uk/about/terms/privacy/
For more information about MailChimp, please read their Privacy Notice at https://mailchimp.com/legal/privacy/
For more information about Survey Monkey, please read their Privacy Notice at https://www.surveymonkey.com/mp/legal/privacy-policy/
For more information about Google, please read their Privacy Notice at
https://privacy.google.com/businesses/compliance/#?modal_active=none
Safeguarding Measures
Cornwall Music Service Trust takes your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place.
Transfers Outside the EU
Personal data in the European Union is protected by the General Data Protection Regulation (GDPR) but some other countries may not necessarily have the same high standard of protection for your personal data. Cornwall Music Service Trust, by virtue of the fact that we engage with the Google Drive platform, will transfer or store personal data outside the EU. However, the level of compliance that Google adheres to is in line with current GDPR legislation.
Consequences of Not Providing Your Data
You are not obligated to provide your personal information to Cornwall Music Service Trust. however, as this information is required for us to provide you with our services, we will not be able to offer all our services without it.
Legitimate Interests
As noted in the ‘How We Use Your Personal Data’ section of this notice, we occasionally process your personal information under the legitimate interests’ legal basis. Where this is the case, we have carried out a thorough Legitimate Interests’ Assessment (LIA) to ensure that we have weighed your interests and any risk posed to you against our own interests; ensuring that they are proportionate and appropriate.
An example of when we would use the legitimate interests’ legal basis for processing your personal information, would be in the event of direct marketing within the legislation’s scope. This would include contacting you with regards to commercial interests that would be directly beneficial to your business.
How Long We Keep Your Data
Cornwall Music Service Trust only ever retains personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations.
Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and/or withdraw your consent.
Special Categories Data
Cornwall Music Service Trust will not process sensitive personal information (known as special category data) about you.
Marketing
Occasionally, Cornwall Music Service Trust would like to contact you with information regarding products and services that we provide. If you consent to us using your contact details for this purpose, you have the right to modify or withdraw your consent at any time by using the opt-out/unsubscribe options or by contacting Cornwall Music Service Trust directly.
If you would like to receive this information please confirm using the provided consent options.
LEGITMIATE INTERESTS
Cornwall Music Service Trust will occasionally send you information which will have been identified as being beneficial to our customers and in our interests. Such information will be relevant to you as a customer and is non-intrusive and you will always have the option to opt-out/unsubscribe at any time.
Lodging A Complaint
Cornwall Music Service Trust only processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with the supervisory authority.
Website Cookies
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.