Cairngorm Mountain Privacy Policy

Recruitment Privacy Policy

Cairngorm Mountain (Scotland) Ltd understands and respects the importance of your privacy. This Privacy Policy outlines how we use the personal data we collect from you, or that you provide to us. Please read the following information carefully.

For the purpose of the GDPR Regulation 2018, we, Cairngorm Mountain (Scotland) Limited are the Data Controller and Processor for https://www.cairngormmountain.co.uk (The Site).

By making a booking/purchase or submitting your personal data via this web site, you agree to the transfer, storing or processing of it as set out below. As a visitor attraction, we require these details in order to fulfil our contract with you. Please do not use this website if you do not agree with any of the following.

WHAT INFORMATION DO WE COLLECT?

If just browsing The Site, our servers and cookies collect the following generic information about you;

• The Operating System you use e.g. Windows
• The Browser you use e.g. Safari or Google Chrome
• The device you are using to view this website e.g. Desktop or Mobile
• General Demographics e.g. Gender, Age Bracket & Broad Location
• Your IP Address
• Your Behaviour on our Site e.g. Page Views, Link Clicks etc.

Only when voluntarily completing a form on The Site, do we then have access to the following information:

• E-mail Address
• First & Last Name
• Postal Address
• Telephone Number
• Other Personal Details used to make a booking
• Biometric Data

HOW WE COLLECT YOUR INFORMATION

DIGITAL

• Cookies (Please refer to the Overview Table in the Cookies section below)
• Booking Process
• Newsletter Sign Up Form
• Third-Party Review Sites

OFFLINE
Only when voluntarily completing a form at Cairngorm Mountain in one of these departments, do we then have access to the following information:

• Equipment Hire
• Snow School Bookings
• Guided Walks
• Annual Funicular Pass
• Seasonal Snowsports Pass
• Educational Tours

Information collected:

• E-mail Address
• First & Last Name
• Postal Address
• Telephone Number
• Other Personal Details used to make a booking
• Biometric Data

OTHER

• We may from time to time record telephone calls you have with members or our staff for training purposes and to improve the quality of our service.
• Feedback Surveys
• Competitions 
• We utilise webcams on-site to update guests regarding conditions, as well as ensuring their safety on the mountain.

HEALTH & SAFETY

Whether it be from a walking or a snowsports injury, anyone receiving first aid treatment at Cairngorm Mountain (Scotland) Ltd, will have the details recorded on an Accident Report. This will be retained in accordance with current health and safety legislation, stored securely and it will not be passed onto any third party without prior approval.

In the event of serious snowsports injuries, the casualty’s details may be communicated via two-way radio between the Ski Patrol and/or the emergency services.

As a public safety measure, any vehicle left in the car park unattended overnight will have the registration details recorded by the CMSL  Ranger Service. If after 3 days the vehicle has still not been removed, the details will be passed onto Police Scotland.

COOKIES

We store cookies on your computer to identify that you have been to our site before, and to personalise certain content based on previous behaviour. We do use third party cookies to track data. We also use remarketing cookies to log when users view specific pages on our site, in order for us to provide targeted advertising in the future. A summary of the cookies used on this Site and what they are used for can be viewed below.

You can opt out of Google’s use of cookies by visiting Google’s Ads Settings page:
http://www.google.com/settings/ads. If you would not like to be tracked during your visit you can install a Do Not Track Plugin for Google Chrome or enable the Do Not Track feature in Firefox.

HOW WE USE YOUR INFORMATION

• To enable us to complete your booking
• To communicate with you regarding your booking or other purchase
• To personalise repeat visits to our site as part of the booking process
• To respond to specific enquiries and queries
• For resolving complaints and dealing with disputes
• To notify you about changes to our service
• To ensure that content from our Site is presented in the most effective manner for you and for your computer;
• For preventing and detecting fraudulent or criminal activity
• If you have given us your consent to receive marketing communications by email, are a customer of ours or you have previously asked us for information about our breaks or experiences, we may send you marketing messages by email. However, in every marketing email message we send you, we will give you the opportunity to unsubscribe from our mailings altogether.
• For internal research/analysis and customer profiling.

Please note the usage as outlined above applied to all information we hold about you, however we obtain it during your journey with us.

DISCLOSURE OF YOUR INFORMATION 

• We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with law, enforce our site policies, or protect ours or others rights, property or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising or other uses. We collect GDPR readiness statements from all of our trusted third parties, which are available on request.
• You have the right at any time to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing by not ticking certain boxes on the forms we use to collect your data.

• Our third party review administrator(s) (including TripAdvisor) may contact you to ask for your comments on the accommodation and/or services that have been provided
• From a Data Retention perspective, we are legally bound from a financial viewpoint to keep your transaction data on our systems for 7 years after you have made a booking with Cairngorm Mountain (Scotland) Ltd. For all biometric data associated with your transaction, we retain the right to hold this information for 3 years in accordance with health & safety guidelines.

ACCESSING YOUR INFORMATION

• The GDPR Regulation 2018 gives you the right to check that your personal data is being processed lawfully. Your subject access right can be exercised in accordance with the regulation. Any subject access request must be made in writing to info@cairngormmountain.co.uk.
• If you would like amendments made to your data e.g. change of name or contact details, please contact us at any time via info@cairngormmountain.co.uk.

DATA SECURITY

The transmission of information via the internet is not completely secure, and although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to this web site, therefore any transmission is at your own risk.

Once we have received your information, we will take all reasonable steps to keep your personal data secure (both technologically and physically) and to try to prevent any unauthorised access to it.  All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.

Where we have given you (or where you have chosen) a password, which enables you to access certain parts of our site, you are responsible for keeping that password confidential. We ask you not to share a password with anyone.

If at any point you suspect or become aware of a breach in security, or receive suspicious communications from someone claiming to be from CairnGorm Mountain, please let us know immediately via info@cairngormmountain.co.uk. 

EXTERNAL LINKS

Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites. This Site may contain links to other websites not controlled by CairnGorm Mountain (Scotland) Ltd. CairnGorm Mountain (Scotland) Ltd has no responsibility for the linked websites nor does it necessarily endorse any linked websites. CairnGorm Mountain (Scotland) Ltd provides links solely for the convenience and information of its Site users. 
CairnGorm Mountain (Scotland) Ltd provides the materials on this site “as is” without warranties of any kind, either express or implied, including without limitation, warranties of title, implied warranties of merchantability, fitness for a particular purpose or non-infringement of intellectual property. CairnGorm Mountain Ltd disclaims any duty to update or revise the materials on this site, although CairnGorm Mountain Ltd may modify the materials at any time without notice. By your use of this site, you acknowledge that your use is at your sole risk and that you assume full responsibility for all costs associated with all necessary servicing or repairs of any equipment you use in connection with your use of this site. You further acknowledge that CairnGorm Mountain (Scotland) Ltd shall not be liable for any damages or any kind related to your use of this site.

USER FEEDBACK POLICY AND OTHER SUBMISSIONS


All comments, suggestions, ideas, and other submissions disclosed, submitted or offered to Cairngorm Mountain (Scotland) Ltd on or via this Site or otherwise disclosed, submitted or offered in connection with your use of this Site (collectively, the “Comments”) are property of Cairngorm Mountain (Scotland) Ltd. Communication, submission or offering of any Comments shall constitute an assignment to Cairngorm Mountain (Scotland) Ltd of all worldwide rights, titles and interests in all copyrights and other intellectual properties in the Comments. Thus Cairngorm Mountain (Scotland) Ltd will own exclusively all such rights, titles and interests and shall not be limited in any way in its use, commercial or otherwise, of any Comments. Cairngorm Mountain (Scotland) Ltd is and shall be under no obligation (1) to maintain any Comments in confidence; (2) to pay to user any compensation for any Comments; or (3) to respond to any user Comments. You agree that no Comments submitted by you to the Site will violate any right of any third party, including copyright, trademark, privacy or other personal or proprietary right(s). You further agree that no Comments submitted by you to the Site will be or contain libelous or otherwise unlawful, abusive or obscene material. You are and shall remain solely responsible for the content of any Comments you make.

SITE CONTENTS


This Site and all its Contents are intended solely for personal, non-commercial use. You may download or copy the Contents and other downloadable materials displayed on the Site for personal use only. No right, title or interest in any downloaded/copied materials or software is transferred to you as a result of any such activity. You may not reproduce (except as noted above), publish, transmit, distribute, display, modify, create derived works from, sell or participate in any sale of or exploit in any way,in whole or in part, any of the Contents, the Site or any related software.

INDEMNIFICATION


You agree to defend, indemnify and hold Cairngorm Mountain (Scotland) Ltd harmless from and against any and all claims, damages, costs and expenses, including legal fees, arising from or related to your use of the Site.

AMENDMENTS

We reserve the right to update or alter this Privacy Policy from time to time without notice to you.

Back to top

RECRUITMENT PRIVACY NOTICE

As part of our recruitment process we will collect and process personal data relating to all job applicants. Cairngorm Mountain (Scotland) Ltd (CMSL) is committed to being transparent about how we collect and use that data and to ensuring that we meet all the data protection obligations.

This recruitment privacy notice is applicable to all applicants to Cairngorm Mountain (Scotland) Ltd. For the purposes of the General Data Protection Regulation 2018 (GDPR), Cairngorm Mountain (Scotland) Ltd are the Data Controller and Data Processor for the purposes of your application process.

What information does CMSL collect?

During the recruitment process we may collect a range of information about you. This includes:

• your name, address and contact details, including email address and telephone number
• details of your qualifications, skills, experience and employment history
• information about your current level of remuneration, including benefit entitlements
• information put forward by you whether or not you have a disability for which we need to make reasonable adjustments during the recruitment process
• information about your entitlement to work in the UK

We may collect this information in a variety of ways. For example, data might be contained in application forms, CVs, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment.

We may also collect personal data about you from third parties, such as references supplied by former employers, information from employment background check providers and information from criminal records checks. We will only seek information from third parties once a job offer has been made.

Data will be stored in a range of different places, including in HR management systems, the website (if applying on line), our Intranet and email.

Why does CMSL process personal data?

We need to process data to take steps at your request prior to entering into a contract with you.

In some cases, we need to process data to ensure that we are complying with our legal obligations. For example, we are required to check a successful applicant’s eligibility to work in the UK before employment starts.

We have a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants allows us to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to whom to offer a job.

For some roles, we may be obliged to seek information about criminal convictions and offences or ask you to provide such details. You will be notified if this is required. When we seek this information, we do so because it is necessary for us to carry out our obligations and exercise specific rights in relation to employment.

We may use your data for a role other than the one you have applied for if we feel that you are more suited to another role or you have not been specific about the role you are applying for. This may include roles in other companies across the wider portfolio. However, if this is the case, we will contact you to let you know.

Who has access to your personal data?

Your information may be shared internally for the purposes of the recruitment exercise. This includes members of the HR team, interviewers involved in the recruitment process, managers in the business area with a vacancy or the central management team.  

As part of the recruitment process we may review publicly available information about you such as LinkedIn, Facebook, Twitter and other publicly available information.

We will not share your data with third parties (other than as specified above), unless your application for employment is successful and we make you an offer of employment. We may then share your data with former employers to obtain references for you, employment background check providers to obtain necessary background checks and the Disclosure Scotland Service to obtain necessary criminal records checks if your role requires this.

We will not transfer your data outside the European Economic Area.

Data Security

The transmission of information via the internet is not completely secure and although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to this website, therefore any transmission is at your own risk.

Once we have received your information, we will take all reasonable steps to keep your personal data secure (both technologically and physically) and to prevent any unauthorised access to it. Information you provide to us will be stored on our secure servers, in locked cabinets or in secure internal systems.

How does CMSL protect data?

We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our team in the proper performance of their duties.

For how long does CMSL keep data?

If your application for employment is unsuccessful, we will hold your data on file for 6 months after the end of the relevant recruitment process. At the end of that period, or once you withdraw your consent, your data is deleted or destroyed.

If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment. The periods for which your data will be held will be provided to you in a new employee privacy notice.

Your Rights

The GDPR 2018 provides you with a number of rights. You can:

• access and obtain a copy of your data on request
• require CMSL to change incorrect or incomplete data
• require CMSL to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing
• object to the processing of your data where the organisation is relying on its legitimate interests as the legal ground for processing.

If you would like to exercise any of these rights, please contact The HR Department in writing by contacting The HR Department, Cairngorm Mountain (Scotland) Ltd, Cairngorm Mountain Ski Area, Aviemore, PH22 1RB or email hr@cairngormmountain.co.uk

What if you do not provide personal data to CMSL?

You are under no statutory or contractual obligation to provide data to Cairngorm Mountain (Scotland) Ltd during the recruitment process. However, if you do not provide the information, we may not be able to process your application properly or at all.

Automated decision-making

Applications will be reviewed by an individual person or a team of people. Recruitment processes are not based on automated decision-making.

Amendments

We reserve the right to update or amend this Applicant Privacy Policy from time to time without notifying you.

Back to top