The Project

THE PROJECT PRIVACY POLICY

Introduction

The Project is privacy conscious and takes your privacy seriously.  This policy follows the guidelines set out in the General Data Protection Regulation (GDPR) which enhances the Data Protection Act 1998.  It sets out details of the personal information which we may collect from you and how we use and store that information, as well as your rights regarding our holding that information.

Collection of personal information

The Project collects personally identifiable data in the following ways:

• On acceptance for inclusion on a mailing list or database
• By signing up for a Project event
• Through research, surveys or monitoring activities
• By entering into email, telephone or postal correspondence with The Project

The data collected will normally be limited to your name and postal and/or email address/es, and your telephone number/s.

The Project's reasons for holding your personal data

We hold the personal information you provide to us for the following purposes:

• To maintain our records
• To respond to any enquiries you may make
• To contact you about events, news and opportunities available which are offered by The Project
• To administer any of The Project's events in which you participate or may wish to participate and to deal with any matters involving you
• To create anonymous aggregated information about those on our mailing list to enable us to secure funding for any projects.

Access to your personal information

Access to your personal information is strictly limited to those who perform the functions outlined above, and those responsible for running The Project.

Disclosure of personal information

The Project will never share your personal information with any third party unless in the highly unlikely event that we are under a duty to do so to comply with any legal obligation/UK law.  We do not collect or compile personal information for dissemination or sale to external parties for marketing purposes, nor do we host mailings on behalf of third parties.

Storage of your personal information

The Project stores your information in electronic form.  Data may be held on a local database. Data is not transferred outside the UK.  Access to all personal data is always password protected.

Retention of personal information

We retain personal information we collect from you where we deem there is an ongoing interest from you in The Project.  Your personal information will be held indefinitely unless you request us to remove it.

Data protection officer

• The Project's data protection officer who is responsible for ensuring its compliance with the GDPR can be contacted at davina.misroch@gmail.com

Changes to your personal information

You can contact us using the above details at any time if there are any changes to your personal information.We may also contact you from time to time to ensure that the personal information we hold about you is correct.

Your rights

The Project aims to be as open as possible in terms of giving people access to the personal information held about them.

• The GDPR gives you the following rights:
• The right to be informed about what personal information we hold about you
• The right of access to that information
• The right to have your personal information rectified
• The right to have your personal information erased
• The right to restrict the use of your personal information
• The right to data portability, that is to say, the right to receive personal information provided to us in a structured, commonly used and machine readable format, such as email and to transmit that information to another organisation
• The right to object to our holding personal information about you, including withdrawing your consent to our doing so
• Rights in relation to automated decision making and profiling.

You can find out if we hold any personal information about you, and if so, what information, by making a "Subject Access Request" under the GDPR.  Such a request should be addressed to The Project's data protection officer using the contact details given above.

Your request should include details and provide evidence of who you are, such as a copy of your driving licence, passport or birth certificate, together with as much detail as possible of the information you wish to access, for example where and by whom you believe it to be held and specific details of the information required.

Once we receive your request, we will answer it within 28 days.

Please also write to the data protection officer using the contact details given above if you wish to raise any matter relating to your other rights.

If you are not satisfied with our response, you may complain to the Information Commissioners Office.

Updating this privacy policy

We may update this privacy policy from time to time either to comply with the law or to reflect our evolving needs.  Notification of any changes will be available on request.  

May 2018