Appendix 6: Sample data protection statements
Under the terms of the Data Protection Act, the museum is obliged to supply the following information at all instances where it requests personal data. This includes personal data collected in hard-copy format (i.e. paper form), or electronically (i.e. via e-mail or the website).
1. The name of the Data Controller, i.e. the XXXX museum.
2. The purpose for which the personal data are being collected (e.g. administering a booking, answering an enquiry etc.).
3. Clear contact details for the museum (somewhere on the form, if not necessarily part of the statement itself).
4. Details about any further ways in which the museum would like to use the personal data (in particular, marketing ...