Policies

Policies

Privacy Policy

This Privacy Policy relates to customer data processed and stored by Tramore Water Centre CLG trading as “Splashworld” and “Target Fitness”.  It includes data captured on our website www.splashworld.ie, our various recording procedures, a CCTV policy, and a summary of your rights.

Tramore Water Centre CLG is the data controller and is registered with the data commissioner’s office. This Privacy Policy informs customers and users about the collection, use and sharing of personal information that we collect on our websites, on our webapp, at our centre through the various services we offer. This Privacy Policy is designed to protect you, our users by informing you how personal information is collected, how we look after that information and with whom we share it. Splashworld is committed to complying with the Data Protection Act 1998 and the General Data Protection Regulation (GDPR) from 25th May 2018. By using our website and our centre’s services, you are consenting to us processing your information in the ways stated here.

What information do we collect and why?

The basis on which we collect and process your data is usually through consent.  Sometimes there is a contractual reason such as being able to process a monthly recurring card payment.  Occasionally, there may be a legal reason for collecting data, such as for employees or, should you have an accident, we may need to provide details of this to the relevant health and safety authorities. We may also process your data based on our legitimate business interests for example in order to operate and improve our business.

The information we collect may include any of the following:

Any personal details you give us. Information you type into our websites or provide to one of our colleagues such as when you become a member, create your profile, update your member profile, make a booking, sign up for a class or visit our centre. This information may include your personal contact data, fitness-related data which has been obtained in order to create personalised fitness workouts for you or health related data. We use this to provide you with the services you request, tell you about services you are eligible for, to keep in contact with you, manage your account and the services we provide. If you contact us by email, via the website, in person or by telephone we may keep a record of your contact information and enquiry and may subsequently use your contact details to respond to your enquiry.

Information which allows us to recognise you.

Such as an unique ID number and mugshot that helps us identify you.

Details of your transactions.

We collect data for any transactions you carry out through our websites and services, so that we can administer the services you have with us. Please note that we never store your payment details on our website.

Sensitive Health Data

We collect any personal health data you provide to us when registering for membership.  Splashworld will not disclose your personal data to third parties except in exceptional circumstances, for example, if you suffer an injury or experience a medical difficulty on or in the vicinity of the Splashworld. We may ask you for information about your health in order to recommend appropriate exercise regime.

Banking data

We will store your bank account number and sort code data where you have a recurring card payment plan in place.  When the recurring card mandate finishes we will remove this data from our operational systems within 30 working days. We process bank card information at the time we take payment.  This data is not stored on our systems and is processed on Payment Card Industry Data Security Standard compliant banking systems.

Information about website visits including IP address.

The IP address is your computer’s individual identification number. We use your IP address to capture information about website visits so we can learn more about how our customers use the website in order to find ways to improve the website and our products and services for your benefit.

Google Analytics

This site uses Google Analytics which is one of the most widespread and trusted analytics solutions on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.

Customer feedback

We may record customer comments and surveys about how we are performing. We will only do this on the basis of given consent.

Your communications preferences.

We keep a record of any permissions and preferences you give us about what types of communication you are happy to receive from us.

Data relating to children

Data recorded on children include swimming lessons (booking and level information) and teen gym membership information. Children aged under 18 years must have a parent or guardian’s consent before providing personal information to us. We do not wish to collect any personal information without this consent.

How do we store and protect your personal information?

These are the basic guidelines we use to look after your personal data. We maintain secure systems to protect your personal information. We respect your wishes about how we contact you, whether by post, telephone, email or text message. We will update your information or preferences promptly when you ask us to. We will respond fully to requests from you to see the information that we hold on you. We will not hold your personal information for longer than is necessary for our legitimate business purposes. We follow strict procedures when storing or handling information that you have given us. Some information is encrypted, such as payment transactions and password. We will never sell your personal information to a third party.

Retention Policy

We retain personal information as long as we consider it useful to contact you, or as needed to comply with our legal obligations.  Where data is not needed for legal or statutory purposes we will delete this information if you request. See the contacts section to request your data to be deleted.

Services provided by contracted third parties

Splashworld may share information with third-party organisations that provide specific services on our behalf which enhance our products and your experience with us. These organisations act as a Data Processor under our instructions. There is a contract in place with each third party which includes strict terms and conditions to protect your privacy. Our current processing partner is LegendWare.

LegendWare

We use LegendWare for all of our membership management, swimming lesson bookings, class bookings, and reporting . They act in the capacity of a processor on our behalf. The information we provide them with are all the details collected on our membership forms. For more information about LegendWare please read their Privacy Notice at https://www.legendware.co.uk/privacy-policy

Messagebird

We use MessageBird for some of our SMS communication primarily in regards to our Swim School, urgent notices, and renewal reminders for members. For more information about MessageBird please read their Privacy Notice at https://www.messagebird.com/en/legal/privacy

Marketing Partners

Splashworld will never sell your personal information to any third party for marketing or other purposes.

How do we use your information?

We use your information to help us provide and improve our services for you. We may use the information in the following ways to provide you with any services that you have purchased. Check your identity. To check your eligibility where appropriate. To update our records with any new information you give us. To notify you if we will be unable to provide a service you have booked before. To provide marketing communications (if you have given us your permission). For research and analysis so we can develop and improve our services for your benefit. To tailor our communications to you to ensure relevance (if you do not want us to do this please contact us using the details below). To comply with legal requirements. To safeguard users of our services

Keeping you updated

There are certain communications we need to send to you so we can provide our services.  We call these service communications and include for example notices about your direct debit payments, change of password, registration confirmations, appointment reminders and waiting list announcements.  We would not be able to provide you with services if we did not send these.

We may from time to time contact you about our services or products we think you might find interesting by email, by post, telephone or SMS, but only if you have given us your permission to do so.

If you do not want us to contact you other than for service emails let us know when you next visit us or contact us using the details below. You may also opt-out of email or any other communications by contacting the Data Protection Officer at info@splashworld.ie.

Accuracy of data

We will always try to ensure the data we hold about you is accurate and relevant.  If you believe the information we hold about you is out of date or incorrect, please tell a member of staff or see the contacting us section below. You will need a form of identification to request any changes.

Seeing your data – subject access request

The Data Protection Act 1998 and the General Data Protection Regulation give you the right to know what personal information we hold about you. This is called a Subject Access Request. If you would like to make a request you download and complete the form below.

Removing your data

If you no longer use our services and products and wish us to delete your personal data we will do this if there are no legal or statutory regulations requiring us to keep this information. Please write to the Data Controller.

Restricting processing

You can contact us using the details below to restrict the processing of your data including some processing we do under legitimate business interests.

Complaints about how we manage your data

If you are not happy about the way we manage your data please contact us as quickly as possible by contacting us.  You may also write to the Data Controller – who will investigate your complaint and get back to you as soon as possible.

Data Protection Commissioner’s Office (DPO)

The office of the Data Protection Commissioner is established under the 1988 Data Protection Act.  The Data Protection Amendment Act, 2003, updated the legislation, implementing the provisions of EU Directive 95/46. The Acts set out the general principle that individuals should be in a position to control how data relating to them is used.

The Data Protection Commissioner is responsible for upholding the rights of individuals as set out in the Acts, and enforcing the obligations upon data controllers. The Commissioner is appointed by Government and is independent in the exercise of his or her functions.  Individuals who feel their rights are being infringed can complain to the Commissioner, who will investigate the matter, and take whatever steps may be necessary to resolve it. More info here: https://www.dataprotection.ie

Our websites may contain links to and from external websites, advertisers and affiliates. If you follow a link to other sites please note that these will be governed by their own privacy policies. We cannot accept liability for data use on those websites.

Changes to this privacy policy

This policy may be updated from time to time on this page. If you have any questions or comments about our Privacy Policy or how we use your personal information please contact us at info@splashworld.ie

CCTV Policy

Introduction

The purpose of this policy is to regulate the use of Closed Circuit Television (CCTV) and its associated technology when monitoring both the internal and external environs of Splashworld premises under the remit of Tramore Water Centre CLG. A copy of this CCTV Policy will be made available on the www.splashworld.ie website, provided to all Splashworld staff, customers and members and a copy will be provided to visitors on request.

Scope

This policy applies to all personnel in and visitors to Splashworld, Railway Square, Tramore, Co. Waterford. Moreover, it relates directly to the location and use of CCTV, and the monitoring, recording and subsequent use of such recorded material. The CCTV Policy is in place to enable Splashworld to operate the CCTV system within the centre. This policy prohibits CCTV monitoring based on the characteristics and classifications contained in equality and other related legislation e.g. race, gender, sexual orientation, national origin, disability etc. Furthermore, CCTV monitoring is limited to uses that do not violate the reasonable expectation to privacy as defined by law. The CCTV cameras will be used to: protect the Splashworld buildings and assets, both during and outside of operational hours (the system will be in operation 24 hours a day, every day); promote the health and safety of personnel and visitors; support the Gardaí in a bid to deter and detect crime; and assist identifying, apprehending and prosecuting offenders. The personal data recorded and stored by the CCTV system will be used only for the purposes outlined in this policy document. Collection, storage and use of CCTV footage shall be in compliance with Data Protection legislation.

Data Controller

The data controller in respect of images recorded and stored by the CCTV system at the Splashworld premises. The data processor is also Splashworld. The manager and data protection officer is responsible for monitoring the implementation and compliance of the CCTV policy within Splashworld.

Fair Obtaining

The fair obtaining principles inherent in the Data Protection Acts 1988 and 2003 require that those people whose images may be captured on camera are so informed. Accordingly, the Splashworld Data Protection Officer will provide a copy of this CCTV Policy to staff, customers, and on request, to visitors to Splashworld. Adequate signage will be placed at each location in which CCTV 14 cameras are situated to indicate that CCTV is in operation (locations listed in the following section). Signage shall include the name and contact details of the data controller as well as the specific purpose for which the CCTV camera is in place in each location.

Location of Cameras

14 cameras record activities throughout the premises as follows: External Camera looking at front entrance and steps. 2 Reception camera positioned over the changing hall door looking at the Reception desk. 3 cameras looking at the pool area and steps to flumes. 3 cameras in the pool changing hall looking at entrance points and lockers. 1 camera in the studio positioned facing door. 2 cameras in the gym at opposite ends pointing at entrances to either stairwell access. 1 at the top of stairs over the office door looking at people coming up the stairs and entering office/gym 1 on the back stairs looking at pool access and emergency doors.

Operation of the System

The recording system is an Alhua Technology, XVR 16 V1, a solution which records video data over TCP/IP networks. The system can only be accessed by authorised personnel from Splashworld and DFS security (Installers of the system). A Service Level Agreement has been put in place between Splashworld and DFS which details the terms of the contract including confidentiality agreements, data security, and disclosure. The system is housed in the manager’s office room on the first floor to which the manager and facilities managers have access, in addition to DFS. The system can be accessed remotely using a unique password only available to the manager and DFS. Access by DFS is only by request of Splashworld and must be logged. Should the system be accessed or works conducted on it by unauthorized personnel or without Splashworld’s instruction, this will be viewed as extremely serious and will be grounds for automatic termination of the contract. Data Protection, Storage and Retention The data captured from the CCTV cameras are securely stored as electronic data in the manager’s office on the first floor. Typically, this data is recorded on a loop and will be retained for a maximum of 30 days. It will be overwritten after that period. However, data may be retained for longer periods where in the opinion of Splashworld the events captured may give rise to court proceedings. The manager’s office is a restricted area. Unauthorised access to that area will not be permitted at any time. Access to the data is restricted to authorised personnel. The area is swipe card secured with only the individuals identified in the list having access. The storage devices are password protected. Supervising the access and maintenance of the CCTV system is the responsibility of Splashworld. Unauthorised access will be viewed as a data breach. In such an event, the Splashworld Data Breach Management Policy and Procedure must be followed.

Access Requests

Access to the CCTV system and stored images will be restricted to authorised personnel only. In relevant circumstances, CCTV footage may be accessed: By An Garda Síochána where the Splashworld are required by law to make a report regarding suspected crime; Following a request by An Garda Síochána when a crime or suspected crime has taken place and/or when it is suspected that illegal/anti-social behaviour is taking place on the Splashworld premises; To data subjects (or their legal representatives), pursuant to an access request where the time, date and location of the recordings is furnished to the Splashworld; To individuals (or their legal representatives) subject to a court order; To Splashworld’s insurance company where the insurance company requires the same in order to pursue a claim for damage done to the insured property. Any person whose image has been recorded has a right to be given a copy of the information recorded, providing that such an image/recording exists (i.e. that it has not been deleted), and provided that an exemption/prohibition does not apply to the release. To exercise that right, a person must make an application in writing to the Splashworld using the Data Access Form found on the website, providing sufficient information to identify themselves, giving a reasonable indication of the time period sought, and identifying the location of the camera. If the person is under eighteen years, the parent or guardian may make an application. The cost for making this application is €6.35 and will be borne by the applicant. Requests must be responded to by Splashworld within 40 days. Access requests can be made to Paul Ennis. When a data access request is received, the relevant footage is copied and a specific retention time is assigned to this copy. In giving a person a copy of his/her data, the data controller may provide a still/series of still pictures, a tape or a disk with relevant images. However, other people’s images should be obscured before the data is released. Data will be delivered to the requester ensuring that security measures have been considered and implemented. A log of access to images will be maintained. If the image is of such poor quality as not to clearly identify an individual, that image may not be considered to be personal data.

Providing CCTV Images to An Garda Síochána

With regard to requests from An Garda Síochána to download footage, the Data Protection Commissioner recommends that requests for copies of CCTV footage should only be granted when a formal written (or fax) request is provided to the Splashworld stating that An Garda Síochána is investigating a criminal matter. For practical purposes, and to expedite a request speedily in urgent situations, a verbal request may be sufficient to allow for the release of the footage sought. However, any such verbal request must be followed up with a formal written request. It is up to the Splashworld to be satisfied that there is a genuine investigation underway. For practical purposes, a phone call to the requesting Garda’s station may be sufficient, provided that you speak to a member in the District Office, the station sergeant or a higher ranking officer, as all may be assumed to be acting with the authority of a District/Divisional officer in confirming that an investigation is authorised. A log of all An Garda Síochána requests will be maintained by the Splashworld and data processors. Any such requests should be on An Garda Síochána headed paper, quote the details of the CCTV footage required and should also cite the legal basis for the request (i.e. Section 8(b) of the Acts). Prior to the Splashworld issuing any CCTV images to An Garda Síochána, it will be discussed and agreed with the responsible Splashworld staff member. There is a distinction between a request by An Garda Síochána to view CCTV footage and to download copies of CCTV footage. In general, An Garda Síochána making a request to simply view footage on the premises of a data controller or processor would not raise any specific concerns from a data protection perspective.

Review and Approval of the CCTV Policy

This policy will be reviewed and updated regularly to take into account changing Data Protection legislation or guidelines from the Data Protection Commissioner, An Garda Síochána, and relevant bodies.

Child Safeguarding

Name of service being provided: Recreation and leisure. Tramore Water Centre CLG T/A Splashworld.

Nature of service and principles to safeguard children from harm: Water based activities including swimming lessons for individuals and schools, public swim sessions, and private hire for swimming clubs and groups. Gym access for teenagers 13-18 years. Supervision of all areas espcially during times in which children are present.

Risk Assessment

We have carried out an assessment of any potential for harm to a child while availing of our services. Below is a list of the areas of risk identified and the list of procedures for managing these risks.Risk area identified: Swimming pool area. Procedure in place to manage identified risk: Lifeguards/Swimming Instructors on duty. Safeguarding protocol. Entry control at reception.

Risk area identified: Changing Hall Area. Procedure in place to manage identified risk: Lifeguards/Swimming Instructors on duty. Safeguarding protocol. Entry control at reception; Risk area identified: Gym Area. Procedure in place to manage identified risk: Lifeguards/Swimming Instructors on duty. Safeguarding protocol. Entry control at reception; All staff have been Garda vetted and have done Child Safeguarding courses.  CCTV is in all above areas.

Procedures

Our Child Safeguarding Statement has been developed in line with requirements under the Children First Act 2015, Children First: National Guidance for the Protection and Welfare of Children (2017), and Tusla’s Child Safeguarding: A Guide for Policy, Procedure and Practice. In addition to the procedures listed in our risk assessment, the following procedures support our intention to safeguard children while they are availing of our service:Procedure for the management of allegations of abuse or misconduct against workers/volunteers of a child availing of our service;

Procedure for the safe recruitment and selection of workers and volunteers to work with children; Procedure for provision of and access to child safeguarding training and information, including the identification of the occurrence of harm; Procedure for the reporting of child protection or welfare concerns to Tusla; Procedure for maintaining a list of the persons (if any) in the relevant service who are mandated persons; Procedure for appointing a relevant person. All procedures listed are available upon request.

Implementation

We recognise that implementation is an on-going process. Our service is committed to the implementation of this Child Safeguarding Statement and the procedures that support our intention to keep children safe from harm while availing of our service.

Child Admission Policy

Children 10 years and under must be accompanied by an adult over 18 years old at all times in the pool.

There must be a ratio of 1 Adult to every 2 children under 6 years in the pool.

School Tour and supervised birthday party, and swimming lesson groups with children under 10 years of age will be allowed to use the pool without an adult in the pool.  In such an incidence additional lifeguards would be rostered to supervise the group and if required a lifeguard would be in the water.

Membership Code Of Conduct

Health & Safety

1. Drinks must be contained in closed vessels – no glass allowed.

2. Chewing gum is not permitted within the gym OR pool area.

3. Alcohol is not permitted on the premises. Anyone suspected of being in a state of inebriation will be prevented from the use of the facilities and asked to leave.

4. Lockers are provided for all personal belongings. Belongings are not permitted to be stored in the gym, fitness studio or pool area.

5. Equipment must not be moved, modified or used in an incorrect manner.

6. Equipment should be replaced after use on storage racks provided.

7. The use of mobile phones for calls or texting is not permitted whilst using the equipment.

Respect for Others

1. Users are asked to bring a towel into the gym.

2. Users must wipe equipment after use with disinfectant spray and towels provided.

3. Users should limit their cardiovascular work to 20 minutes if people are waiting for equipment.

4. Users must not ‘hog’ equipment either when exercising alone or in groups. Equipment should be made available within a reasonable time for any other user.

5. Users should not shout, use foul or abusive language or behave in a threatening or intimidating manner of any description towards any other user, visitor or employee.

6. Lockers provided are for the use of users from the time of entry and all personal belongings must be removed on leaving. Lockers are cleaned at the end of the night any belongings will be taken and placed in the lost and found.

Inappropriate Behavior

All users must conduct themselves in a lawful and respectful manner at all times. Any behavior that is illegal, poses a threat to child safety, or violates our commitment to providing a secure and inclusive environment will result in immediate expulsion from the facility and may be reported to the appropriate authorities. This includes, but is not limited to, harassment, abuse of any kind, and any form of behavior that compromises the safety or well-being of others.

personal Cleanliness & Attire

1. High standards of personal hygiene must be maintained and users must make every effort to deodorize before using the facilities.

2. Footwear and clothing must be clean and free from odours.

3. Appropriate exercise clothing must be worn when using the gym facilities. No sandals, jeans, or open-toed shoes. Tops must be worn at all times.

4. Users should wear appropriate attire when in the Gym to use the Sauna, Steam Room and Pool e.g. Flip-flops, towel, robe or t-shirt or shorts.

Respect for the facilities & Service

1. Users should be in possession of their swipe cards at all times.

2. Users should not ‘tailgate’ or hold open the gym doors to allow access to anyone who is not in possession of their ID card.

3. Litter must be placed in bins provided.

4. Users should report any damage or suspected damage to equipment or facilities.

5. Repairs should not be attempted to any facilities, equipment, or property structure.

6. All problems, personal disputes or grievances must be addressed to the Manager in the first instance.

Membership Terms

1. All memberships are non-refundable. Memberships may be transferred at the discretion of management and payment of a fee (€15).

2. Splashworld management reserve the right to refuse membership to any individual without cause. References may be required on a case by case basis and Garda checks may also be run on a case by case basis. Failure to pass a Garda check will result in membership termination and the refusal of entry.

3. All times and prices are subject to change. Under 18 year olds must bring photographic proof of age.

4. You can freeze your membership for a minimum of one month up to a maximum of twelve months upon production of a medical certificate. Suspension of your membership can only be granted with a prior written request from the member and approval by management. Periods of non-use of the facilities cannot be back-dated under any circumstances. For non-medical related freezes, there is a freeze fee of €10.

5. 12-month couples membership includes 2 children free (pool only) and €150 for every subsequent child or €3 per swim pay-as-you-go.

6. Couples must be over 18 years old.

7. Students must be enrolled in Full-time 3rd Level Education. Valid Student ID with a clear expiry date or issue date plus 4 years is required.

8. Your membership starts immediately, unless you select a deferred Start Date.

9. Monthly Recurring card payments will continue to be paid until the member contacts us to pause or cancel. Members must inform us in writing at member@splashworld.ie with 14 days notice.

10. If you join the Centre and change your mind, you are entitled to cancel your membership at any time within the period of fourteen (14) days from the date of commencement of your membership by informing us at member@splashworld.ie by midnight on day 14. Where you have not used the pool or gym or classes, you will be entitled to a full refund of all joining fees and membership fees paid. Where you have used the facilities prior to cancellation, we reserve the right to charge you a reasonable fee for your usage during this period.

11. Subsequent monthly membership fees will be collected monthly thereafter and these monthly payments made are not refundable. If a payment is not received on the due date, once is it is received prior to the cancellation of the membership, it will be backdated to the due date as this date is linked to your membership start date.

©️ Splashworld 2023