The Victoria League for Commonwealth Friendship - GDPR Policy

 

Privacy Notice – General Data Protection Regulations

 

1. Your personal data – what is it?

This is personal data about you such as your name, address and other details. Keeping this information and processing it is governed by the General Data Protection Regulations (the “GDPR”).

2. Who are we?

The Victoria League is registered with the Information Commissioner. Our registered number is ZA187414.

3. Why do we need your information?

Depending whether you are a guest, supporter, volunteer, or employee we

use your personal data for the following purposes to:

• enable us to carry out our aims as a charity for the benefit of the public
• support individual residents
• promote the interests of the charity
• inform supporters of news, events, activities and services
• manage our volunteers and employees
• maintain accounts and records
• carry out our legal requirements as a charity.

4. How do we process your personal data?

We ask your permission to give us certain information about yourself and we keep it up to date, store it securely and eventually destroy it. The information you give us is stored either manually, or electorally or both. We do not collect anything unnecessarily or keep it for longer than is needed. We protect your personal data from loss, misuse, unauthorised access and disclosure and by ensure appropriate technical measures are in place to protect your personal data.

5. Sharing your personal data

We will only share your data any external agencies with your consent. We do not share personal information for marketing purposes with third parties.

6. How long do we keep your personal data?

Personal data processed will not be kept for longer than is necessary for that purpose or purposes.

7. Your rights and your personal data

Through contacting the General Manager, you have the following rights (unless subject to an exemption under the GDPR) to

 request a copy of your personal data held by us.

• request that we correct any personal data if it is found to be inaccurate or out of date;
• right to request your personal data is erased where it is no longer necessary to retain such data;
• right to withdraw your consent at any time;
• right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
• right to object to the processing of personal data where applicable.
• right to lodge a complaint with the Information Commissioners Office.

 

8. Our website provider

Your data may also be available to our website provider to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behaviour of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources.

Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:

1. Your data will be made available to our website provider
2. The data that may be available to them include any of the data we collect as described in this policy.
3. Our website provider will not transfer your data to any other third party; or transfer your data outside of the EEA.
4. They will store your data for a maximum of 7 years.
5. This processing does not affect your rights as detailed in this privacy policy.

9. Online Payments

Financial transactions relating to our online donations are handled by our payment services providers: Stripe and GoCardless.

We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. You can find information about the payment services providers' privacy policies and practices at https://stripe.com/gb/privacy and https://gocardless.com/legal/privacy/

10. Further Information

If you would like further information about how we process and protect personal data, please initially contact the General Manager.

Part of this document was created using a template from SEQ Legal (https://seqlegal.com/free-legal-documents/privacy-policy).